{"report_id":"7e92f52f-71c5-42d3-8c52-418447a7ab87","version":6,"status":"done","tags":[],"date":"2026-02-14T17:08:59Z","url":{"schema":"http","addr":"paxtransfers.com","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"paxtransfers.com/","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"title":"smart-transacts","dom":{"size":51661,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1285)","md5":"96a1daa50a2799cfc7bdb996c4cdf035","sha1":"cbd4186becfa0aa2cce584b33302dd1ca6f2675b","sha256":"5477dd336f76cae07664e0ae442f19e650710a8dc063f5d47b03c3a6b61f969e","sha512":"6dd3b11415dde7140510216ed5a027e7b9e91e6e63a41e7f230a9e6b524ecfd93a0f93e4799696745c48ed32dcc57c023a3c19f2d9268d9a8c57fbc6aba10305","ssdeep":"384:iNagrEBFcARK1CsPhsZ+qZWOZFpZf9ZJvZo0ZebZi0Z7ja3534wOFw35C3LX3Nmc:aoBFvRPstZSH1yFE+vwOndfI2TDH6cR","tlshash":"e533631498f012bb111b5488baa66f15bb54e117cf5bcf99bbbc1a840fc6e93e873148","dom_hash":"domhash7d80a95e0f955fcaff0467ff50452811","first_seen":"2026-02-14T16:56:42.457442Z","last_seen":"2026-02-14T17:09:00.58059Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"paxtransfers.com","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T17:08:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"paxtransfers.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"paxtransfers.com","ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"2025-03-19","domain_rank":0,"first_seen":"2026-02-14T16:56:39.449279Z","last_seen":"2026-02-14T16:56:39.449279Z","alert_count":96,"request_count":24,"received_data":911589,"sent_data":28286,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":6370,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"paxtransfers.com/","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1dcb5f6e24be6eb175f1ba81fc92f0e3","sha1":"1f061505db3260a694d922fc2d08e5046245fbd5","sha256":"475cb6292261240842a88e4108fe0839060290f5ed4fe478e9f3e7cbe845a5c1","sha512":"0ea4b2fe6afa849b9fa92f6286b07780bf643a3d6142045e36a589eb143e3bab7affd40c758ff0b2ef7ee16dccc059bcdd8f6ed837dab7676e5cfba95191be56","ssdeep":"","tlshash":"c53178002878b7ad87e35072097f888ad2766829391edc64c1538ca476336477b7fcbe","size":1806,"data":"","first_seen":"2024-12-20T00:26:45.210828Z","last_seen":"2026-02-14T17:09:00.593016Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxtransfers.com/","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"291e63526525a1267c9ef55e23888900","sha1":"77ad34e7b1f4893bcceededb62e43c376acb9c76","sha256":"987a3b0af742f6e25fc4fb56a6adf1323313098dc0a531035eb0cf62cddc7453","sha512":"114522373c6721acade14b68e46783c297a4369a2325464ace6dc1ad54064c3c3542faaeb2193ac3883a08b86efd84616a3c727d22e8262953d1409bc8e257a0","ssdeep":"","tlshash":"5f118ca3165901ac0ff115c71dbf65874c759b61aec9d0a80752f842a5e4b9182a9f21","size":916,"data":"","first_seen":"2024-12-20T00:26:45.20909Z","last_seen":"2026-02-14T17:09:00.593538Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxtransfers.com/","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a466f0e28129fdcdc5539ae6f5cc16df","sha1":"e48ce78644353bec0097f3099cb678feec513098","sha256":"2547b0e9cf372bcafc8f6460a57f3be75ac03d703a2065436f87a21ce3985de2","sha512":"1448cc76d1c1dbb716012cfbe2c95569c5ab5ac4070d529aa6fa75cb78e5b29ea7179110a8066f0254fd99a64347b97583d1e5feaade97e57c8faaa684acf442","ssdeep":"","tlshash":"cc611a58dfd755d53d33582c97bec27a11c14453a404ca04be2cf9471f18139e99b1c9","size":3365,"data":"","first_seen":"2026-02-14T16:56:42.482436Z","last_seen":"2026-02-14T17:09:00.594018Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"paxtransfers.com/assets/css/styletwo.css","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxtransfers.com/","date":"2026-02-14T17:08:38.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxtransfers.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:59:F1:8E:53:EC:A1:7C:31:47:4B:F5:37:41:39:A5:20:78:E3:F6","sha256":"68:9F:F8:C7:0E:E1:89:C0:2C:FF:8C:9E:4B:5E:DC:8F:1D:25:2B:BB:EE:07:BD:14:3D:2A:3F:6D:BE:DC:D1:81"}}},"request":{"raw":"GET /assets/css/styletwo.css HTTP/1.1\r\nHost: paxtransfers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paxtransfers.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Imx2ZXE5blkzU3BxVCt4VGVxN0IrakE9PSIsInZhbHVlIjoidlQ0aDZLMlRrTmd0cFlmbENmSllaVEh6Z0ZrN09TZ2RmNGFidWR0RU5mU1lxcXJvTlczVzBKNmdwWllRckhpOVRKU3ZTRmxISlhFUFJnZW9FdExkWm5vb0hEa3dhODBXcFVuV2F1ZUo4bHpKYUxRNjd0S0RpVnU2cmVJN29BSkwiLCJtYWMiOiJhZGRhNDY4Zjg1ODU4MGE5ZjEwMGViNDFhMzVlODYxYWZhN2I4MjU1ZjUxYzRjODcwMDZhZmMzZGQxZDUzMDFiIiwidGFnIjoiIn0%3D; instantly_session=eyJpdiI6InhKa3RzTi9tdVZWZzZ6VGQrVGYvTFE9PSIsInZhbHVlIjoiNlBCSCsxNVJBaXN4RFp1bWI1SzJUMFJhcDg2ZUphRE9vaXkyZ3BQTVdPTUNvUmphRnFkRkM5dWJld212NENpOFRYYzRoYWJNbytGUGJrclNoZ2EybnpnWVhxY3JiZmdFMzdQT1RFQWcreXBKWkgrUWR5Wko5WFFuQndma3VNengiLCJtYWMiOiI4MTMzMGRkMmFhMWJkM2JiNzcxMzE0NDhmNWQwYTY4MDE3NDljYjQzNjZjNjdjYTJkZGIzMThhNjA0NDBiMDhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 17:08:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Mar 2025 10:28:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 12480\r\ndate: Sat, 14 Feb 2026 17:08:38 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":88661,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2119), with CRLF line terminators","md5":"663d8d01381786b54cf12461c708446a","sha1":"2abc54501096a8bcd3b1ed2448db82ec0e1ec164","sha256":"2bc7d8e6aff9a118babc64472599d55d0b3742524285195c31be4e2ebdc2cb16","sha512":"58d58ec6a204c2e0cfd412c45491fb279d7a8636f9127af690f32c592c50552d2632ad584478245fa6ced77ce101cf6b6c99d4b70348575fc733eb9430b8f91f","ssdeep":"768:Gi60HZ7XVvruaZgyptjpxEHFQP6PYFBDFh7Y/m0:VdRtbNbSoDFhE/z","tlshash":"4183ed5cc71237e3a6338738b6592541d6a84083bd398d75f5dd29784fea0e0c239faa","first_seen":"2026-02-14T16:56:42.472677Z","last_seen":"2026-02-14T17:09:00.58164Z","times_seen":2,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"paxtransfers.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxtransfers.com/assets/images/logo.png","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxtransfers.com/","date":"2026-02-14T17:08:38.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxtransfers.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:59:F1:8E:53:EC:A1:7C:31:47:4B:F5:37:41:39:A5:20:78:E3:F6","sha256":"68:9F:F8:C7:0E:E1:89:C0:2C:FF:8C:9E:4B:5E:DC:8F:1D:25:2B:BB:EE:07:BD:14:3D:2A:3F:6D:BE:DC:D1:81"}}},"request":{"raw":"GET /assets/images/logo.png HTTP/1.1\r\nHost: paxtransfers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paxtransfers.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Imx2ZXE5blkzU3BxVCt4VGVxN0IrakE9PSIsInZhbHVlIjoidlQ0aDZLMlRrTmd0cFlmbENmSllaVEh6Z0ZrN09TZ2RmNGFidWR0RU5mU1lxcXJvTlczVzBKNmdwWllRckhpOVRKU3ZTRmxISlhFUFJnZW9FdExkWm5vb0hEa3dhODBXcFVuV2F1ZUo4bHpKYUxRNjd0S0RpVnU2cmVJN29BSkwiLCJtYWMiOiJhZGRhNDY4Zjg1ODU4MGE5ZjEwMGViNDFhMzVlODYxYWZhN2I4MjU1ZjUxYzRjODcwMDZhZmMzZGQxZDUzMDFiIiwidGFnIjoiIn0%3D; instantly_session=eyJpdiI6InhKa3RzTi9tdVZWZzZ6VGQrVGYvTFE9PSIsInZhbHVlIjoiNlBCSCsxNVJBaXN4RFp1bWI1SzJUMFJhcDg2ZUphRE9vaXkyZ3BQTVdPTUNvUmphRnFkRkM5dWJld212NENpOFRYYzRoYWJNbytGUGJrclNoZ2EybnpnWVhxY3JiZmdFMzdQT1RFQWcreXBKWkgrUWR5Wko5WFFuQndma3VNengiLCJtYWMiOiI4MTMzMGRkMmFhMWJkM2JiNzcxMzE0NDhmNWQwYTY4MDE3NDljYjQzNjZjNjdjYTJkZGIzMThhNjA0NDBiMDhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 17:08:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 20 Mar 2025 10:28:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2727\r\ndate: Sat, 14 Feb 2026 17:08:38 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2727,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 145 x 52, 8-bit/color RGBA, non-interlaced","md5":"ceacd63642c50bec85de98e30fc8f800","sha1":"9edda5da853b3c1d2b80387a757256b4448dc760","sha256":"cd839c2dab86e5a4a527a3278f59d1396bacdf039f662ec777c67916d7750eeb","sha512":"32b19853a9a98134803ffd6e8ce1fd273cc11698652e2a95950487b801c681a1b12ad8d4079f3fa645fe3f89d661e9f23e80179c4bd8fca70df6117c4554be28","ssdeep":"","tlshash":"ae515bc315c2db63f98cab7d26aad4f1f6480d0367b26695b90e43635172f93a016743","first_seen":"2025-04-01T12:18:08.460444Z","last_seen":"2026-02-14T17:09:00.582223Z","times_seen":39,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"paxtransfers.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxtransfers.com/assets/images/bybit.png","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxtransfers.com/","date":"2026-02-14T17:08:38.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxtransfers.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:59:F1:8E:53:EC:A1:7C:31:47:4B:F5:37:41:39:A5:20:78:E3:F6","sha256":"68:9F:F8:C7:0E:E1:89:C0:2C:FF:8C:9E:4B:5E:DC:8F:1D:25:2B:BB:EE:07:BD:14:3D:2A:3F:6D:BE:DC:D1:81"}}},"request":{"raw":"GET /assets/images/bybit.png HTTP/1.1\r\nHost: paxtransfers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paxtransfers.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Imx2ZXE5blkzU3BxVCt4VGVxN0IrakE9PSIsInZhbHVlIjoidlQ0aDZLMlRrTmd0cFlmbENmSllaVEh6Z0ZrN09TZ2RmNGFidWR0RU5mU1lxcXJvTlczVzBKNmdwWllRckhpOVRKU3ZTRmxISlhFUFJnZW9FdExkWm5vb0hEa3dhODBXcFVuV2F1ZUo4bHpKYUxRNjd0S0RpVnU2cmVJN29BSkwiLCJtYWMiOiJhZGRhNDY4Zjg1ODU4MGE5ZjEwMGViNDFhMzVlODYxYWZhN2I4MjU1ZjUxYzRjODcwMDZhZmMzZGQxZDUzMDFiIiwidGFnIjoiIn0%3D; instantly_session=eyJpdiI6InhKa3RzTi9tdVZWZzZ6VGQrVGYvTFE9PSIsInZhbHVlIjoiNlBCSCsxNVJBaXN4RFp1bWI1SzJUMFJhcDg2ZUphRE9vaXkyZ3BQTVdPTUNvUmphRnFkRkM5dWJld212NENpOFRYYzRoYWJNbytGUGJrclNoZ2EybnpnWVhxY3JiZmdFMzdQT1RFQWcreXBKWkgrUWR5Wko5WFFuQndma3VNengiLCJtYWMiOiI4MTMzMGRkMmFhMWJkM2JiNzcxMzE0NDhmNWQwYTY4MDE3NDljYjQzNjZjNjdjYTJkZGIzMThhNjA0NDBiMDhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 17:08:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 20 Mar 2025 10:28:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4226\r\ndate: Sat, 14 Feb 2026 17:08:38 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4226,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 180, 8-bit/color RGBA, non-interlaced","md5":"a85e9771a641a44009b93b047311893b","sha1":"446709eb6692e0c1b930c140fba819c2af7c5e10","sha256":"3d454414944a0c71988f42fdfac2473b5bd06340ded5b18f1dbf800364ba0c5b","sha512":"0dc4436c29ea245f840fb25ef40b27a61498a99bb042755e937d64a7bf8a11c710860c2769aebaf4fcdd5e0ab576456229a6876f5503ebab22395ac1f31a1fb1","ssdeep":"96:lXWkGkGkGkGkGkGkGkGkhGtWAFF2cvppTIR/xD0i/us257qymWJx6hOtbXjcKLWx:4vvvvvvvvdtWM2cvfTOLOzx6hO9oKSv5","tlshash":"f491f8854616e38efdea5c4c61d99a702f92c13971361bc03fe152272a8ba70e88c74f","first_seen":"2024-12-20T00:26:45.196861Z","last_seen":"2026-02-14T17:09:00.582852Z","times_seen":7,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"paxtransfers.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxtransfers.com/assets/images/localcoinsswap.jpg","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxtransfers.com/","date":"2026-02-14T17:08:38.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxtransfers.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:59:F1:8E:53:EC:A1:7C:31:47:4B:F5:37:41:39:A5:20:78:E3:F6","sha256":"68:9F:F8:C7:0E:E1:89:C0:2C:FF:8C:9E:4B:5E:DC:8F:1D:25:2B:BB:EE:07:BD:14:3D:2A:3F:6D:BE:DC:D1:81"}}},"request":{"raw":"GET /assets/images/localcoinsswap.jpg HTTP/1.1\r\nHost: paxtransfers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paxtransfers.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Imx2ZXE5blkzU3BxVCt4VGVxN0IrakE9PSIsInZhbHVlIjoidlQ0aDZLMlRrTmd0cFlmbENmSllaVEh6Z0ZrN09TZ2RmNGFidWR0RU5mU1lxcXJvTlczVzBKNmdwWllRckhpOVRKU3ZTRmxISlhFUFJnZW9FdExkWm5vb0hEa3dhODBXcFVuV2F1ZUo4bHpKYUxRNjd0S0RpVnU2cmVJN29BSkwiLCJtYWMiOiJhZGRhNDY4Zjg1ODU4MGE5ZjEwMGViNDFhMzVlODYxYWZhN2I4MjU1ZjUxYzRjODcwMDZhZmMzZGQxZDUzMDFiIiwidGFnIjoiIn0%3D; instantly_session=eyJpdiI6InhKa3RzTi9tdVZWZzZ6VGQrVGYvTFE9PSIsInZhbHVlIjoiNlBCSCsxNVJBaXN4RFp1bWI1SzJUMFJhcDg2ZUphRE9vaXkyZ3BQTVdPTUNvUmphRnFkRkM5dWJld212NENpOFRYYzRoYWJNbytGUGJrclNoZ2EybnpnWVhxY3JiZmdFMzdQT1RFQWcreXBKWkgrUWR5Wko5WFFuQndma3VNengiLCJtYWMiOiI4MTMzMGRkMmFhMWJkM2JiNzcxMzE0NDhmNWQwYTY4MDE3NDljYjQzNjZjNjdjYTJkZGIzMThhNjA0NDBiMDhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 17:08:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 20 Mar 2025 10:28:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5446\r\ndate: Sat, 14 Feb 2026 17:08:38 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5446,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 310x163, components 3","md5":"d1413dfc1362c483807da4df0ebc22d6","sha1":"fceafc92c43707d92756bba90726fa0daaeaf67b","sha256":"f8b14ed7eeb7595a533002e9786d16283041b842e44040c71570a5b47b99dce9","sha512":"12b68038c4976e66c952b591df1fdea04582daa257b85c5764039aa8868bba3458a471a8997b20237df401bce3c97f86a65199f0e017dacdc922c473e527d772","ssdeep":"96:4mBYhu9aJPFWNEm3X7VwtaKPk7yiiZx649diokXxE4IIKMJrB:h5b+m3XG1K/K9dizX043","tlshash":"1ab17c782eb35f30ff98907298c13e62e89103859dd19a1454fa4a118fb3d20ee5c695","first_seen":"2024-08-29T11:06:09Z","last_seen":"2026-02-14T17:09:00.583449Z","times_seen":9,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":510,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"paxtransfers.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxtransfers.com/assets/images/deriv.png","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxtransfers.com/","date":"2026-02-14T17:08:38.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxtransfers.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:59:F1:8E:53:EC:A1:7C:31:47:4B:F5:37:41:39:A5:20:78:E3:F6","sha256":"68:9F:F8:C7:0E:E1:89:C0:2C:FF:8C:9E:4B:5E:DC:8F:1D:25:2B:BB:EE:07:BD:14:3D:2A:3F:6D:BE:DC:D1:81"}}},"request":{"raw":"GET /assets/images/deriv.png HTTP/1.1\r\nHost: paxtransfers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paxtransfers.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Imx2ZXE5blkzU3BxVCt4VGVxN0IrakE9PSIsInZhbHVlIjoidlQ0aDZLMlRrTmd0cFlmbENmSllaVEh6Z0ZrN09TZ2RmNGFidWR0RU5mU1lxcXJvTlczVzBKNmdwWllRckhpOVRKU3ZTRmxISlhFUFJnZW9FdExkWm5vb0hEa3dhODBXcFVuV2F1ZUo4bHpKYUxRNjd0S0RpVnU2cmVJN29BSkwiLCJtYWMiOiJhZGRhNDY4Zjg1ODU4MGE5ZjEwMGViNDFhMzVlODYxYWZhN2I4MjU1ZjUxYzRjODcwMDZhZmMzZGQxZDUzMDFiIiwidGFnIjoiIn0%3D; instantly_session=eyJpdiI6InhKa3RzTi9tdVZWZzZ6VGQrVGYvTFE9PSIsInZhbHVlIjoiNlBCSCsxNVJBaXN4RFp1bWI1SzJUMFJhcDg2ZUphRE9vaXkyZ3BQTVdPTUNvUmphRnFkRkM5dWJld212NENpOFRYYzRoYWJNbytGUGJrclNoZ2EybnpnWVhxY3JiZmdFMzdQT1RFQWcreXBKWkgrUWR5Wko5WFFuQndma3VNengiLCJtYWMiOiI4MTMzMGRkMmFhMWJkM2JiNzcxMzE0NDhmNWQwYTY4MDE3NDljYjQzNjZjNjdjYTJkZGIzMThhNjA0NDBiMDhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 17:08:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 20 Mar 2025 10:28:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1171\r\ndate: Sat, 14 Feb 2026 17:08:38 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1171,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 168, 8-bit colormap, non-interlaced","md5":"8eef553c076e9bb6a71d7ca8a68d3441","sha1":"cc169df73ce07e2a588655d0287b4d6d889fd93a","sha256":"7f7aeb7ac4b5bd65abb1ccafa5733c1e6c076571d8645dd9bd438c31eab5d2a3","sha512":"7f340d40e42d24bc08e0401923c2de5569a027bd4ca98ad1298a29a585756a0e7f90badbfed15e4fcb6eb3642c7973b2acb1501ffb4c1e3cd631c40ff534056e","ssdeep":"","tlshash":"4e21b90f7d968bfcd5d23f3bd6b7e1734094085547704127a84dc5b0e4745897ea7205","first_seen":"2025-08-03T23:44:22.144978Z","last_seen":"2026-02-14T17:09:00.584003Z","times_seen":6,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"paxtransfers.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxtransfers.com/assets/images/1-individuals.jpg","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxtransfers.com/","date":"2026-02-14T17:08:38.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxtransfers.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:59:F1:8E:53:EC:A1:7C:31:47:4B:F5:37:41:39:A5:20:78:E3:F6","sha256":"68:9F:F8:C7:0E:E1:89:C0:2C:FF:8C:9E:4B:5E:DC:8F:1D:25:2B:BB:EE:07:BD:14:3D:2A:3F:6D:BE:DC:D1:81"}}},"request":{"raw":"GET /assets/images/1-individuals.jpg HTTP/1.1\r\nHost: paxtransfers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paxtransfers.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Imx2ZXE5blkzU3BxVCt4VGVxN0IrakE9PSIsInZhbHVlIjoidlQ0aDZLMlRrTmd0cFlmbENmSllaVEh6Z0ZrN09TZ2RmNGFidWR0RU5mU1lxcXJvTlczVzBKNmdwWllRckhpOVRKU3ZTRmxISlhFUFJnZW9FdExkWm5vb0hEa3dhODBXcFVuV2F1ZUo4bHpKYUxRNjd0S0RpVnU2cmVJN29BSkwiLCJtYWMiOiJhZGRhNDY4Zjg1ODU4MGE5ZjEwMGViNDFhMzVlODYxYWZhN2I4MjU1ZjUxYzRjODcwMDZhZmMzZGQxZDUzMDFiIiwidGFnIjoiIn0%3D; instantly_session=eyJpdiI6InhKa3RzTi9tdVZWZzZ6VGQrVGYvTFE9PSIsInZhbHVlIjoiNlBCSCsxNVJBaXN4RFp1bWI1SzJUMFJhcDg2ZUphRE9vaXkyZ3BQTVdPTUNvUmphRnFkRkM5dWJld212NENpOFRYYzRoYWJNbytGUGJrclNoZ2EybnpnWVhxY3JiZmdFMzdQT1RFQWcreXBKWkgrUWR5Wko5WFFuQndma3VNengiLCJtYWMiOiI4MTMzMGRkMmFhMWJkM2JiNzcxMzE0NDhmNWQwYTY4MDE3NDljYjQzNjZjNjdjYTJkZGIzMThhNjA0NDBiMDhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 17:08:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 20 Mar 2025 10:28:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7430\r\ndate: Sat, 14 Feb 2026 17:08:39 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7430,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 70x70, components 3","md5":"7818fcdc8800ceacc2b4389288271bf2","sha1":"01f4df9a8426928861627b6b16bc36e33ed8fe21","sha256":"0ef5f61cc53ed5e6c523533367330644b1862d23c758d1d4ca79ddcf0b236cb1","sha512":"6a5077e0e00225252767d1e76adfc9a727f3ba6e6365cfed8dcacda4545b72bb1eda77488e4090b3247390cabc8ac7a198ba23f3d9ff6b2f4cae4a448b606ec2","ssdeep":"192:JktLaN+KmLRQSFS+3AKw+5KuQibGGgG0Nx7q:JklaPmbA+J5KuQibGGgGqq","tlshash":"63e1afd6b8a3f007cc9808b34ef2101f8591dbb295d35b3d5867c1b5d2da0a92526dd7","first_seen":"2023-11-28T16:47:17Z","last_seen":"2026-02-14T17:09:00.584558Z","times_seen":10,"resource_available":false,"data":null}},"time_used":674,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":674,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"paxtransfers.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxtransfers.com/assets/images/logo1.html","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxtransfers.com/","date":"2026-02-14T17:08:39.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxtransfers.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:59:F1:8E:53:EC:A1:7C:31:47:4B:F5:37:41:39:A5:20:78:E3:F6","sha256":"68:9F:F8:C7:0E:E1:89:C0:2C:FF:8C:9E:4B:5E:DC:8F:1D:25:2B:BB:EE:07:BD:14:3D:2A:3F:6D:BE:DC:D1:81"}}},"request":{"raw":"GET /assets/images/logo1.html HTTP/1.1\r\nHost: paxtransfers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paxtransfers.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Imx2ZXE5blkzU3BxVCt4VGVxN0IrakE9PSIsInZhbHVlIjoidlQ0aDZLMlRrTmd0cFlmbENmSllaVEh6Z0ZrN09TZ2RmNGFidWR0RU5mU1lxcXJvTlczVzBKNmdwWllRckhpOVRKU3ZTRmxISlhFUFJnZW9FdExkWm5vb0hEa3dhODBXcFVuV2F1ZUo4bHpKYUxRNjd0S0RpVnU2cmVJN29BSkwiLCJtYWMiOiJhZGRhNDY4Zjg1ODU4MGE5ZjEwMGViNDFhMzVlODYxYWZhN2I4MjU1ZjUxYzRjODcwMDZhZmMzZGQxZDUzMDFiIiwidGFnIjoiIn0%3D; instantly_session=eyJpdiI6InhKa3RzTi9tdVZWZzZ6VGQrVGYvTFE9PSIsInZhbHVlIjoiNlBCSCsxNVJBaXN4RFp1bWI1SzJUMFJhcDg2ZUphRE9vaXkyZ3BQTVdPTUNvUmphRnFkRkM5dWJld212NENpOFRYYzRoYWJNbytGUGJrclNoZ2EybnpnWVhxY3JiZmdFMzdQT1RFQWcreXBKWkgrUWR5Wko5WFFuQndma3VNengiLCJtYWMiOiI4MTMzMGRkMmFhMWJkM2JiNzcxMzE0NDhmNWQwYTY4MDE3NDljYjQzNjZjNjdjYTJkZGIzMThhNjA0NDBiMDhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Thu, 20 Mar 2025 10:28:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 934\r\ndate: Sat, 14 Feb 2026 17:08:39 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3829,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1f86548e5edfba4e37542b0b5142855c","sha1":"e2f9a2bd8a14467dbef19ae02ea84f12548d1e4d","sha256":"d27b184a8297e1a468d60d4fdfd1405641e21267f656e0a10c00bf28e451a92c","sha512":"2641699cd002574bcfd59a1230edb586d5ceeb5daa41bdfdc5e3c5fa2a5d0d1c22ce145ac19411849c0910c63cfca4931e495efec3f7ee3f82843921db411043","ssdeep":"","tlshash":"ea81e916a1f8330b6070c5be7a4117152f2ea1aba1496d7d7e4c87acef89f509c9f60c","first_seen":"2026-02-14T16:56:42.480337Z","last_seen":"2026-02-14T17:09:00.585412Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"paxtransfers.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxtransfers.com/assets/css/style_apply.css","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxtransfers.com/","date":"2026-02-14T17:08:38.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxtransfers.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:59:F1:8E:53:EC:A1:7C:31:47:4B:F5:37:41:39:A5:20:78:E3:F6","sha256":"68:9F:F8:C7:0E:E1:89:C0:2C:FF:8C:9E:4B:5E:DC:8F:1D:25:2B:BB:EE:07:BD:14:3D:2A:3F:6D:BE:DC:D1:81"}}},"request":{"raw":"GET /assets/css/style_apply.css HTTP/1.1\r\nHost: paxtransfers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paxtransfers.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Imx2ZXE5blkzU3BxVCt4VGVxN0IrakE9PSIsInZhbHVlIjoidlQ0aDZLMlRrTmd0cFlmbENmSllaVEh6Z0ZrN09TZ2RmNGFidWR0RU5mU1lxcXJvTlczVzBKNmdwWllRckhpOVRKU3ZTRmxISlhFUFJnZW9FdExkWm5vb0hEa3dhODBXcFVuV2F1ZUo4bHpKYUxRNjd0S0RpVnU2cmVJN29BSkwiLCJtYWMiOiJhZGRhNDY4Zjg1ODU4MGE5ZjEwMGViNDFhMzVlODYxYWZhN2I4MjU1ZjUxYzRjODcwMDZhZmMzZGQxZDUzMDFiIiwidGFnIjoiIn0%3D; instantly_session=eyJpdiI6InhKa3RzTi9tdVZWZzZ6VGQrVGYvTFE9PSIsInZhbHVlIjoiNlBCSCsxNVJBaXN4RFp1bWI1SzJUMFJhcDg2ZUphRE9vaXkyZ3BQTVdPTUNvUmphRnFkRkM5dWJld212NENpOFRYYzRoYWJNbytGUGJrclNoZ2EybnpnWVhxY3JiZmdFMzdQT1RFQWcreXBKWkgrUWR5Wko5WFFuQndma3VNengiLCJtYWMiOiI4MTMzMGRkMmFhMWJkM2JiNzcxMzE0NDhmNWQwYTY4MDE3NDljYjQzNjZjNjdjYTJkZGIzMThhNjA0NDBiMDhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 17:08:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Mar 2025 10:28:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 801\r\ndate: Sat, 14 Feb 2026 17:08:38 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2860,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"61bd35917d688a770ae90297ff476918","sha1":"9d8a8669713702e2adba78995159b074bb20b78b","sha256":"aab25d399572df81bbebf223138dfc2870a4804afccf999c8ab6e3110239a0dd","sha512":"29d73d0faebbfec6b5884f11c498f9d2d6deddfa610b119dd7dd66c07faf9463f0aae75fb0e9163d570661a7fdf4709ad89c66cb29999c36bded1a95e3e641d4","ssdeep":"","tlshash":"91511c59ee001509a137e59dd7f30748d7a99103db4306b87ef0a254cf791698ab9fcc","first_seen":"2024-12-20T00:26:45.171928Z","last_seen":"2026-02-14T17:09:00.586007Z","times_seen":6,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"paxtransfers.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxtransfers.com/assets/images/noonesimg.png","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxtransfers.com/","date":"2026-02-14T17:08:38.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxtransfers.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:59:F1:8E:53:EC:A1:7C:31:47:4B:F5:37:41:39:A5:20:78:E3:F6","sha256":"68:9F:F8:C7:0E:E1:89:C0:2C:FF:8C:9E:4B:5E:DC:8F:1D:25:2B:BB:EE:07:BD:14:3D:2A:3F:6D:BE:DC:D1:81"}}},"request":{"raw":"GET /assets/images/noonesimg.png HTTP/1.1\r\nHost: paxtransfers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paxtransfers.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Imx2ZXE5blkzU3BxVCt4VGVxN0IrakE9PSIsInZhbHVlIjoidlQ0aDZLMlRrTmd0cFlmbENmSllaVEh6Z0ZrN09TZ2RmNGFidWR0RU5mU1lxcXJvTlczVzBKNmdwWllRckhpOVRKU3ZTRmxISlhFUFJnZW9FdExkWm5vb0hEa3dhODBXcFVuV2F1ZUo4bHpKYUxRNjd0S0RpVnU2cmVJN29BSkwiLCJtYWMiOiJhZGRhNDY4Zjg1ODU4MGE5ZjEwMGViNDFhMzVlODYxYWZhN2I4MjU1ZjUxYzRjODcwMDZhZmMzZGQxZDUzMDFiIiwidGFnIjoiIn0%3D; instantly_session=eyJpdiI6InhKa3RzTi9tdVZWZzZ6VGQrVGYvTFE9PSIsInZhbHVlIjoiNlBCSCsxNVJBaXN4RFp1bWI1SzJUMFJhcDg2ZUphRE9vaXkyZ3BQTVdPTUNvUmphRnFkRkM5dWJld212NENpOFRYYzRoYWJNbytGUGJrclNoZ2EybnpnWVhxY3JiZmdFMzdQT1RFQWcreXBKWkgrUWR5Wko5WFFuQndma3VNengiLCJtYWMiOiI4MTMzMGRkMmFhMWJkM2JiNzcxMzE0NDhmNWQwYTY4MDE3NDljYjQzNjZjNjdjYTJkZGIzMThhNjA0NDBiMDhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 17:08:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 20 Mar 2025 10:28:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5796\r\ndate: Sat, 14 Feb 2026 17:08:38 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5796,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 180, 8-bit colormap, non-interlaced","md5":"278e04d7ad707c21aa8d3ed9ef24e659","sha1":"27098a49e5f1d409bdd80dce683076fa4abb1e4e","sha256":"4882daaf2d25eab08bd5b1d016b1d109e2c745ae5084306df37cb77ef3e0ef2b","sha512":"8bf5bd8ba765372c799317243ef1427e59a1757d8980ec735b799b3086df20d42fef231bcc58b4d1bc9d88982734be423bacba5a089955f4eef6fbc7659c6778","ssdeep":"96:xr1f6O00CFgSV+comdJ9ebj7RJOHAsSem9hdpEGeEq86XkVekWDW7k1ahLr94aMb:xrI0CZ1vg/RJOgsSnhHEHPkekh7kMh9i","tlshash":"dbc19fb4861a0d7081563c377ad626fb73e3a6cce313f45fd1199440097ca1a2a7a70e","first_seen":"2024-12-20T00:26:45.195185Z","last_seen":"2026-02-14T17:09:00.586834Z","times_seen":7,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"paxtransfers.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;1,100;1,200\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxtransfers.com/","date":"2026-02-14T17:08:39.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;1,100;1,200\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paxtransfers.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 17:08:39 GMT\r\ndate: Sat, 14 Feb 2026 17:08:39 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5684,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0a90d54e8778b4448bbe3d133d0c0c90","sha1":"8f201ea1e67e59229399625e6b7b14caa51b1828","sha256":"ba58b3662d391df02e1634fbf1eee582a95776efd1b0efb0998a5b9123ee16fb","sha512":"4b406af0c046706f12f378a32e2aa5c6e9bda1218d6213e4ae6e1fb0b189f35ef0302204582afb4af8650dc813e9708185e55fb3381650e515daab374fa47bb5","ssdeep":"96:SYgS7hYgS7lJc+ukYgS7YN3YgJ6eYgJ6uJc+ukYgJ6RWN3OS74OS7eJc+ukOS78i:H37G37No37ri6Li6+oi6a7s7Ol71FaUZ","tlshash":"b4c19c92083be11467831cc122cf7d36ef4ea254b444a875abfd1c9cada7c66537172d","first_seen":"2026-02-14T16:56:42.464058Z","last_seen":"2026-02-14T17:09:00.587683Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":89,"dns":1,"connect":21,"send":0,"wait":30,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxtransfers.com/www.paypalobjects.com/marketing/web/ke/home/hero-banner-cookied.html","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxtransfers.com/","date":"2026-02-14T17:08:39.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxtransfers.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:59:F1:8E:53:EC:A1:7C:31:47:4B:F5:37:41:39:A5:20:78:E3:F6","sha256":"68:9F:F8:C7:0E:E1:89:C0:2C:FF:8C:9E:4B:5E:DC:8F:1D:25:2B:BB:EE:07:BD:14:3D:2A:3F:6D:BE:DC:D1:81"}}},"request":{"raw":"GET /www.paypalobjects.com/marketing/web/ke/home/hero-banner-cookied.html HTTP/1.1\r\nHost: paxtransfers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paxtransfers.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Imx2ZXE5blkzU3BxVCt4VGVxN0IrakE9PSIsInZhbHVlIjoidlQ0aDZLMlRrTmd0cFlmbENmSllaVEh6Z0ZrN09TZ2RmNGFidWR0RU5mU1lxcXJvTlczVzBKNmdwWllRckhpOVRKU3ZTRmxISlhFUFJnZW9FdExkWm5vb0hEa3dhODBXcFVuV2F1ZUo4bHpKYUxRNjd0S0RpVnU2cmVJN29BSkwiLCJtYWMiOiJhZGRhNDY4Zjg1ODU4MGE5ZjEwMGViNDFhMzVlODYxYWZhN2I4MjU1ZjUxYzRjODcwMDZhZmMzZGQxZDUzMDFiIiwidGFnIjoiIn0%3D; instantly_session=eyJpdiI6InhKa3RzTi9tdVZWZzZ6VGQrVGYvTFE9PSIsInZhbHVlIjoiNlBCSCsxNVJBaXN4RFp1bWI1SzJUMFJhcDg2ZUphRE9vaXkyZ3BQTVdPTUNvUmphRnFkRkM5dWJld212NENpOFRYYzRoYWJNbytGUGJrclNoZ2EybnpnWVhxY3JiZmdFMzdQT1RFQWcreXBKWkgrUWR5Wko5WFFuQndma3VNengiLCJtYWMiOiI4MTMzMGRkMmFhMWJkM2JiNzcxMzE0NDhmNWQwYTY4MDE3NDljYjQzNjZjNjdjYTJkZGIzMThhNjA0NDBiMDhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nx-powered-by: PHP/8.2.30\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 1992\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Sat, 14 Feb 2026 17:08:40 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6603,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5391)","md5":"543ac81966d87ac815e08eb0e436d719","sha1":"e35bb4e32ccf08c11a3935084b50660feb835350","sha256":"8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968","sha512":"0c6a8f7948f93d4d00b5fbb98f487d7e2ee15d104acd83dfbc884ef9b77826dc7daa27b906640572977750a00cb7ef590ed5cd93e2f40ef4def88b9ff92f1dc3","ssdeep":"96:/J/SNi/FLQVTLKCGWz5NN5PXy0jRdoMCX4SZTdI5:/pV2RKCxnNByTMCX4SZT0","tlshash":"aed1871eeac5101e60d785b7e8d4e64c8916aac3de238bdfb54f7915cf8038719a321c","first_seen":"2023-04-06T17:05:03Z","last_seen":"2026-08-11T11:33:52.200437Z","times_seen":9146,"resource_available":true,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"paxtransfers.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxtransfers.com/www.paypalobjects.com/digitalassets/c/paypal-ui/fonts/PayPalSansSmall-Regular.html","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paxtransfers.com/","date":"2026-02-14T17:08:39.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxtransfers.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:59:F1:8E:53:EC:A1:7C:31:47:4B:F5:37:41:39:A5:20:78:E3:F6","sha256":"68:9F:F8:C7:0E:E1:89:C0:2C:FF:8C:9E:4B:5E:DC:8F:1D:25:2B:BB:EE:07:BD:14:3D:2A:3F:6D:BE:DC:D1:81"}}},"request":{"raw":"GET /www.paypalobjects.com/digitalassets/c/paypal-ui/fonts/PayPalSansSmall-Regular.html HTTP/1.1\r\nHost: paxtransfers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paxtransfers.com/assets/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Imx2ZXE5blkzU3BxVCt4VGVxN0IrakE9PSIsInZhbHVlIjoidlQ0aDZLMlRrTmd0cFlmbENmSllaVEh6Z0ZrN09TZ2RmNGFidWR0RU5mU1lxcXJvTlczVzBKNmdwWllRckhpOVRKU3ZTRmxISlhFUFJnZW9FdExkWm5vb0hEa3dhODBXcFVuV2F1ZUo4bHpKYUxRNjd0S0RpVnU2cmVJN29BSkwiLCJtYWMiOiJhZGRhNDY4Zjg1ODU4MGE5ZjEwMGViNDFhMzVlODYxYWZhN2I4MjU1ZjUxYzRjODcwMDZhZmMzZGQxZDUzMDFiIiwidGFnIjoiIn0%3D; instantly_session=eyJpdiI6InhKa3RzTi9tdVZWZzZ6VGQrVGYvTFE9PSIsInZhbHVlIjoiNlBCSCsxNVJBaXN4RFp1bWI1SzJUMFJhcDg2ZUphRE9vaXkyZ3BQTVdPTUNvUmphRnFkRkM5dWJld212NENpOFRYYzRoYWJNbytGUGJrclNoZ2EybnpnWVhxY3JiZmdFMzdQT1RFQWcreXBKWkgrUWR5Wko5WFFuQndma3VNengiLCJtYWMiOiI4MTMzMGRkMmFhMWJkM2JiNzcxMzE0NDhmNWQwYTY4MDE3NDljYjQzNjZjNjdjYTJkZGIzMThhNjA0NDBiMDhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nx-powered-by: PHP/8.2.30\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6603\r\ndate: Sat, 14 Feb 2026 17:08:40 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":6603,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5391)","md5":"543ac81966d87ac815e08eb0e436d719","sha1":"e35bb4e32ccf08c11a3935084b50660feb835350","sha256":"8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968","sha512":"0c6a8f7948f93d4d00b5fbb98f487d7e2ee15d104acd83dfbc884ef9b77826dc7daa27b906640572977750a00cb7ef590ed5cd93e2f40ef4def88b9ff92f1dc3","ssdeep":"96:/J/SNi/FLQVTLKCGWz5NN5PXy0jRdoMCX4SZTdI5:/pV2RKCxnNByTMCX4SZT0","tlshash":"aed1871eeac5101e60d785b7e8d4e64c8916aac3de238bdfb54f7915cf8038719a321c","first_seen":"2023-04-06T17:05:03Z","last_seen":"2026-08-11T11:33:52.200437Z","times_seen":9146,"resource_available":true,"data":null}},"time_used":539,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"paxtransfers.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxtransfers.com/www.paypalobjects.com/digitalassets/c/paypal-ui/fonts/PayPalSansBig-Light-2.html","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paxtransfers.com/","date":"2026-02-14T17:08:40.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxtransfers.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:59:F1:8E:53:EC:A1:7C:31:47:4B:F5:37:41:39:A5:20:78:E3:F6","sha256":"68:9F:F8:C7:0E:E1:89:C0:2C:FF:8C:9E:4B:5E:DC:8F:1D:25:2B:BB:EE:07:BD:14:3D:2A:3F:6D:BE:DC:D1:81"}}},"request":{"raw":"GET /www.paypalobjects.com/digitalassets/c/paypal-ui/fonts/PayPalSansBig-Light-2.html HTTP/1.1\r\nHost: paxtransfers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paxtransfers.com/assets/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Imx2ZXE5blkzU3BxVCt4VGVxN0IrakE9PSIsInZhbHVlIjoidlQ0aDZLMlRrTmd0cFlmbENmSllaVEh6Z0ZrN09TZ2RmNGFidWR0RU5mU1lxcXJvTlczVzBKNmdwWllRckhpOVRKU3ZTRmxISlhFUFJnZW9FdExkWm5vb0hEa3dhODBXcFVuV2F1ZUo4bHpKYUxRNjd0S0RpVnU2cmVJN29BSkwiLCJtYWMiOiJhZGRhNDY4Zjg1ODU4MGE5ZjEwMGViNDFhMzVlODYxYWZhN2I4MjU1ZjUxYzRjODcwMDZhZmMzZGQxZDUzMDFiIiwidGFnIjoiIn0%3D; instantly_session=eyJpdiI6InhKa3RzTi9tdVZWZzZ6VGQrVGYvTFE9PSIsInZhbHVlIjoiNlBCSCsxNVJBaXN4RFp1bWI1SzJUMFJhcDg2ZUphRE9vaXkyZ3BQTVdPTUNvUmphRnFkRkM5dWJld212NENpOFRYYzRoYWJNbytGUGJrclNoZ2EybnpnWVhxY3JiZmdFMzdQT1RFQWcreXBKWkgrUWR5Wko5WFFuQndma3VNengiLCJtYWMiOiI4MTMzMGRkMmFhMWJkM2JiNzcxMzE0NDhmNWQwYTY4MDE3NDljYjQzNjZjNjdjYTJkZGIzMThhNjA0NDBiMDhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nx-powered-by: PHP/8.2.30\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6603\r\ndate: Sat, 14 Feb 2026 17:08:40 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6603,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5391)","md5":"543ac81966d87ac815e08eb0e436d719","sha1":"e35bb4e32ccf08c11a3935084b50660feb835350","sha256":"8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968","sha512":"0c6a8f7948f93d4d00b5fbb98f487d7e2ee15d104acd83dfbc884ef9b77826dc7daa27b906640572977750a00cb7ef590ed5cd93e2f40ef4def88b9ff92f1dc3","ssdeep":"96:/J/SNi/FLQVTLKCGWz5NN5PXy0jRdoMCX4SZTdI5:/pV2RKCxnNByTMCX4SZT0","tlshash":"aed1871eeac5101e60d785b7e8d4e64c8916aac3de238bdfb54f7915cf8038719a321c","first_seen":"2023-04-06T17:05:03Z","last_seen":"2026-08-11T11:33:52.200437Z","times_seen":9146,"resource_available":true,"data":null}},"time_used":400,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"paxtransfers.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxtransfers.com/www.paypalobjects.com/digitalassets/c/website/marketing/global/font/new-money/DharmaGothicE-RegularItalic-2.html","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paxtransfers.com/","date":"2026-02-14T17:08:40.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxtransfers.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:59:F1:8E:53:EC:A1:7C:31:47:4B:F5:37:41:39:A5:20:78:E3:F6","sha256":"68:9F:F8:C7:0E:E1:89:C0:2C:FF:8C:9E:4B:5E:DC:8F:1D:25:2B:BB:EE:07:BD:14:3D:2A:3F:6D:BE:DC:D1:81"}}},"request":{"raw":"GET /www.paypalobjects.com/digitalassets/c/website/marketing/global/font/new-money/DharmaGothicE-RegularItalic-2.html HTTP/1.1\r\nHost: paxtransfers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paxtransfers.com/assets/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Imx2ZXE5blkzU3BxVCt4VGVxN0IrakE9PSIsInZhbHVlIjoidlQ0aDZLMlRrTmd0cFlmbENmSllaVEh6Z0ZrN09TZ2RmNGFidWR0RU5mU1lxcXJvTlczVzBKNmdwWllRckhpOVRKU3ZTRmxISlhFUFJnZW9FdExkWm5vb0hEa3dhODBXcFVuV2F1ZUo4bHpKYUxRNjd0S0RpVnU2cmVJN29BSkwiLCJtYWMiOiJhZGRhNDY4Zjg1ODU4MGE5ZjEwMGViNDFhMzVlODYxYWZhN2I4MjU1ZjUxYzRjODcwMDZhZmMzZGQxZDUzMDFiIiwidGFnIjoiIn0%3D; instantly_session=eyJpdiI6InhKa3RzTi9tdVZWZzZ6VGQrVGYvTFE9PSIsInZhbHVlIjoiNlBCSCsxNVJBaXN4RFp1bWI1SzJUMFJhcDg2ZUphRE9vaXkyZ3BQTVdPTUNvUmphRnFkRkM5dWJld212NENpOFRYYzRoYWJNbytGUGJrclNoZ2EybnpnWVhxY3JiZmdFMzdQT1RFQWcreXBKWkgrUWR5Wko5WFFuQndma3VNengiLCJtYWMiOiI4MTMzMGRkMmFhMWJkM2JiNzcxMzE0NDhmNWQwYTY4MDE3NDljYjQzNjZjNjdjYTJkZGIzMThhNjA0NDBiMDhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nx-powered-by: PHP/8.2.30\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6603\r\ndate: Sat, 14 Feb 2026 17:08:40 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6603,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5391)","md5":"543ac81966d87ac815e08eb0e436d719","sha1":"e35bb4e32ccf08c11a3935084b50660feb835350","sha256":"8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968","sha512":"0c6a8f7948f93d4d00b5fbb98f487d7e2ee15d104acd83dfbc884ef9b77826dc7daa27b906640572977750a00cb7ef590ed5cd93e2f40ef4def88b9ff92f1dc3","ssdeep":"96:/J/SNi/FLQVTLKCGWz5NN5PXy0jRdoMCX4SZTdI5:/pV2RKCxnNByTMCX4SZT0","tlshash":"aed1871eeac5101e60d785b7e8d4e64c8916aac3de238bdfb54f7915cf8038719a321c","first_seen":"2023-04-06T17:05:03Z","last_seen":"2026-08-11T11:33:52.200437Z","times_seen":9146,"resource_available":true,"data":null}},"time_used":487,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":486,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"paxtransfers.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxtransfers.com/assets/images/famonipal.html","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxtransfers.com/","date":"2026-02-14T17:08:40.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxtransfers.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:59:F1:8E:53:EC:A1:7C:31:47:4B:F5:37:41:39:A5:20:78:E3:F6","sha256":"68:9F:F8:C7:0E:E1:89:C0:2C:FF:8C:9E:4B:5E:DC:8F:1D:25:2B:BB:EE:07:BD:14:3D:2A:3F:6D:BE:DC:D1:81"}}},"request":{"raw":"GET /assets/images/famonipal.html HTTP/1.1\r\nHost: paxtransfers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paxtransfers.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Imx2ZXE5blkzU3BxVCt4VGVxN0IrakE9PSIsInZhbHVlIjoidlQ0aDZLMlRrTmd0cFlmbENmSllaVEh6Z0ZrN09TZ2RmNGFidWR0RU5mU1lxcXJvTlczVzBKNmdwWllRckhpOVRKU3ZTRmxISlhFUFJnZW9FdExkWm5vb0hEa3dhODBXcFVuV2F1ZUo4bHpKYUxRNjd0S0RpVnU2cmVJN29BSkwiLCJtYWMiOiJhZGRhNDY4Zjg1ODU4MGE5ZjEwMGViNDFhMzVlODYxYWZhN2I4MjU1ZjUxYzRjODcwMDZhZmMzZGQxZDUzMDFiIiwidGFnIjoiIn0%3D; instantly_session=eyJpdiI6InhKa3RzTi9tdVZWZzZ6VGQrVGYvTFE9PSIsInZhbHVlIjoiNlBCSCsxNVJBaXN4RFp1bWI1SzJUMFJhcDg2ZUphRE9vaXkyZ3BQTVdPTUNvUmphRnFkRkM5dWJld212NENpOFRYYzRoYWJNbytGUGJrclNoZ2EybnpnWVhxY3JiZmdFMzdQT1RFQWcreXBKWkgrUWR5Wko5WFFuQndma3VNengiLCJtYWMiOiI4MTMzMGRkMmFhMWJkM2JiNzcxMzE0NDhmNWQwYTY4MDE3NDljYjQzNjZjNjdjYTJkZGIzMThhNjA0NDBiMDhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Thu, 20 Mar 2025 10:28:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 932\r\ndate: Sat, 14 Feb 2026 17:08:40 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3841,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"7ccb858eec2faed534b81a8050bca87a","sha1":"974eb66088f6ba422f72c472a3de15a492757979","sha256":"585f2e46f546a2b13f023b45196b6f2ea727192a75e142230d4d16ff62b66bc8","sha512":"160c9a77fd0426fd0e254a4324e483fc0001a12fef6be889515382ef2c2716abb20ab3be4352f4b7549290ec0e00f85736aec2a30a7ca02aee25f829dcf7dc4e","ssdeep":"","tlshash":"2981cb12a1f4330b6070d4be7e4127056f2ea16ba14a6d6d7e4c47acdf89f918c9f60c","first_seen":"2026-02-14T16:56:42.476006Z","last_seen":"2026-02-14T17:09:00.588738Z","times_seen":2,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"paxtransfers.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxtransfers.com/assets/images/2-businesses.jpg","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxtransfers.com/","date":"2026-02-14T17:08:38.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxtransfers.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:59:F1:8E:53:EC:A1:7C:31:47:4B:F5:37:41:39:A5:20:78:E3:F6","sha256":"68:9F:F8:C7:0E:E1:89:C0:2C:FF:8C:9E:4B:5E:DC:8F:1D:25:2B:BB:EE:07:BD:14:3D:2A:3F:6D:BE:DC:D1:81"}}},"request":{"raw":"GET /assets/images/2-businesses.jpg HTTP/1.1\r\nHost: paxtransfers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paxtransfers.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Imx2ZXE5blkzU3BxVCt4VGVxN0IrakE9PSIsInZhbHVlIjoidlQ0aDZLMlRrTmd0cFlmbENmSllaVEh6Z0ZrN09TZ2RmNGFidWR0RU5mU1lxcXJvTlczVzBKNmdwWllRckhpOVRKU3ZTRmxISlhFUFJnZW9FdExkWm5vb0hEa3dhODBXcFVuV2F1ZUo4bHpKYUxRNjd0S0RpVnU2cmVJN29BSkwiLCJtYWMiOiJhZGRhNDY4Zjg1ODU4MGE5ZjEwMGViNDFhMzVlODYxYWZhN2I4MjU1ZjUxYzRjODcwMDZhZmMzZGQxZDUzMDFiIiwidGFnIjoiIn0%3D; instantly_session=eyJpdiI6InhKa3RzTi9tdVZWZzZ6VGQrVGYvTFE9PSIsInZhbHVlIjoiNlBCSCsxNVJBaXN4RFp1bWI1SzJUMFJhcDg2ZUphRE9vaXkyZ3BQTVdPTUNvUmphRnFkRkM5dWJld212NENpOFRYYzRoYWJNbytGUGJrclNoZ2EybnpnWVhxY3JiZmdFMzdQT1RFQWcreXBKWkgrUWR5Wko5WFFuQndma3VNengiLCJtYWMiOiI4MTMzMGRkMmFhMWJkM2JiNzcxMzE0NDhmNWQwYTY4MDE3NDljYjQzNjZjNjdjYTJkZGIzMThhNjA0NDBiMDhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 17:08:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 20 Mar 2025 10:28:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2733\r\ndate: Sat, 14 Feb 2026 17:08:39 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2733,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 70x70, components 3","md5":"a68a6bbdd636fbb2fa70cc6f8c74e926","sha1":"7ea884e37462bb65d5c6deb7e2171653adf3e218","sha256":"4f7ca3d2b26db361b1aba765c90f4e797e294f42632153ed72a71115756a105a","sha512":"d25dab391066184dc9e7183a0befeb64597f76648075de361f2739767b8f616322b0413b213304c533bb706365cda546451e1237462c7a810108147290a40e09","ssdeep":"","tlshash":"d751096bfe40a101e90aecfe74d245b7a0890592f9d0772d5de8c1634b484f8864e6ce","first_seen":"2024-12-20T00:26:45.18965Z","last_seen":"2026-02-14T17:09:00.589293Z","times_seen":7,"resource_available":false,"data":null}},"time_used":673,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":673,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"paxtransfers.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxtransfers.com/assets/images/coinbase.jpg","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxtransfers.com/","date":"2026-02-14T17:08:38.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxtransfers.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:59:F1:8E:53:EC:A1:7C:31:47:4B:F5:37:41:39:A5:20:78:E3:F6","sha256":"68:9F:F8:C7:0E:E1:89:C0:2C:FF:8C:9E:4B:5E:DC:8F:1D:25:2B:BB:EE:07:BD:14:3D:2A:3F:6D:BE:DC:D1:81"}}},"request":{"raw":"GET /assets/images/coinbase.jpg HTTP/1.1\r\nHost: paxtransfers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paxtransfers.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Imx2ZXE5blkzU3BxVCt4VGVxN0IrakE9PSIsInZhbHVlIjoidlQ0aDZLMlRrTmd0cFlmbENmSllaVEh6Z0ZrN09TZ2RmNGFidWR0RU5mU1lxcXJvTlczVzBKNmdwWllRckhpOVRKU3ZTRmxISlhFUFJnZW9FdExkWm5vb0hEa3dhODBXcFVuV2F1ZUo4bHpKYUxRNjd0S0RpVnU2cmVJN29BSkwiLCJtYWMiOiJhZGRhNDY4Zjg1ODU4MGE5ZjEwMGViNDFhMzVlODYxYWZhN2I4MjU1ZjUxYzRjODcwMDZhZmMzZGQxZDUzMDFiIiwidGFnIjoiIn0%3D; instantly_session=eyJpdiI6InhKa3RzTi9tdVZWZzZ6VGQrVGYvTFE9PSIsInZhbHVlIjoiNlBCSCsxNVJBaXN4RFp1bWI1SzJUMFJhcDg2ZUphRE9vaXkyZ3BQTVdPTUNvUmphRnFkRkM5dWJld212NENpOFRYYzRoYWJNbytGUGJrclNoZ2EybnpnWVhxY3JiZmdFMzdQT1RFQWcreXBKWkgrUWR5Wko5WFFuQndma3VNengiLCJtYWMiOiI4MTMzMGRkMmFhMWJkM2JiNzcxMzE0NDhmNWQwYTY4MDE3NDljYjQzNjZjNjdjYTJkZGIzMThhNjA0NDBiMDhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 17:08:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 20 Mar 2025 10:28:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9668\r\ndate: Sat, 14 Feb 2026 17:08:38 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9668,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 259x168, components 3","md5":"c5eb052842a8792f5388886cf229b321","sha1":"dd71f7c1f4a45bc7e8c49ef6c60b5e8292669d3f","sha256":"f91dfb6ce88eafb3dad415519eaac4594f002de929219a152b3fa6f4c953dbe8","sha512":"d462cd2b34a0ccd23800c387419c4603449b0422c65563548313e5aaedf6823830349ad1894a183915c973ffdba42e8fe2db8eeff96f89ed815a55359af7c051","ssdeep":"192:PAqJlwpkwLzP3crDpE9XpdAQwYy1ay4XlCQvXjOglpq03K1zdGwqv+7v4:PAqLmdP3QDpU8h1aVXkQvTOg3qqX2L4","tlshash":"eb129e7bbd0246f1ae4f517aa7c10c82c2c6e3c01a9a529f88e530c3e5b6754682cc17","first_seen":"2024-08-29T11:06:09Z","last_seen":"2026-02-14T17:09:00.589916Z","times_seen":9,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"paxtransfers.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxtransfers.com/www.paypalobjects.com/digitalassets/c/website/marketing/global/font/new-money/DharmaGothicE-RegularItalic.html","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paxtransfers.com/","date":"2026-02-14T17:08:39.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxtransfers.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:59:F1:8E:53:EC:A1:7C:31:47:4B:F5:37:41:39:A5:20:78:E3:F6","sha256":"68:9F:F8:C7:0E:E1:89:C0:2C:FF:8C:9E:4B:5E:DC:8F:1D:25:2B:BB:EE:07:BD:14:3D:2A:3F:6D:BE:DC:D1:81"}}},"request":{"raw":"GET /www.paypalobjects.com/digitalassets/c/website/marketing/global/font/new-money/DharmaGothicE-RegularItalic.html HTTP/1.1\r\nHost: paxtransfers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paxtransfers.com/assets/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Imx2ZXE5blkzU3BxVCt4VGVxN0IrakE9PSIsInZhbHVlIjoidlQ0aDZLMlRrTmd0cFlmbENmSllaVEh6Z0ZrN09TZ2RmNGFidWR0RU5mU1lxcXJvTlczVzBKNmdwWllRckhpOVRKU3ZTRmxISlhFUFJnZW9FdExkWm5vb0hEa3dhODBXcFVuV2F1ZUo4bHpKYUxRNjd0S0RpVnU2cmVJN29BSkwiLCJtYWMiOiJhZGRhNDY4Zjg1ODU4MGE5ZjEwMGViNDFhMzVlODYxYWZhN2I4MjU1ZjUxYzRjODcwMDZhZmMzZGQxZDUzMDFiIiwidGFnIjoiIn0%3D; instantly_session=eyJpdiI6InhKa3RzTi9tdVZWZzZ6VGQrVGYvTFE9PSIsInZhbHVlIjoiNlBCSCsxNVJBaXN4RFp1bWI1SzJUMFJhcDg2ZUphRE9vaXkyZ3BQTVdPTUNvUmphRnFkRkM5dWJld212NENpOFRYYzRoYWJNbytGUGJrclNoZ2EybnpnWVhxY3JiZmdFMzdQT1RFQWcreXBKWkgrUWR5Wko5WFFuQndma3VNengiLCJtYWMiOiI4MTMzMGRkMmFhMWJkM2JiNzcxMzE0NDhmNWQwYTY4MDE3NDljYjQzNjZjNjdjYTJkZGIzMThhNjA0NDBiMDhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nx-powered-by: PHP/8.2.30\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6603\r\ndate: Sat, 14 Feb 2026 17:08:40 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":6603,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5391)","md5":"543ac81966d87ac815e08eb0e436d719","sha1":"e35bb4e32ccf08c11a3935084b50660feb835350","sha256":"8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968","sha512":"0c6a8f7948f93d4d00b5fbb98f487d7e2ee15d104acd83dfbc884ef9b77826dc7daa27b906640572977750a00cb7ef590ed5cd93e2f40ef4def88b9ff92f1dc3","ssdeep":"96:/J/SNi/FLQVTLKCGWz5NN5PXy0jRdoMCX4SZTdI5:/pV2RKCxnNByTMCX4SZT0","tlshash":"aed1871eeac5101e60d785b7e8d4e64c8916aac3de238bdfb54f7915cf8038719a321c","first_seen":"2023-04-06T17:05:03Z","last_seen":"2026-08-11T11:33:52.200437Z","times_seen":9146,"resource_available":true,"data":null}},"time_used":590,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":589,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"paxtransfers.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxtransfers.com/www.paypalobjects.com/digitalassets/c/paypal-ui/fonts/PayPalSansSmall-Regular-2.html","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paxtransfers.com/","date":"2026-02-14T17:08:40.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxtransfers.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:59:F1:8E:53:EC:A1:7C:31:47:4B:F5:37:41:39:A5:20:78:E3:F6","sha256":"68:9F:F8:C7:0E:E1:89:C0:2C:FF:8C:9E:4B:5E:DC:8F:1D:25:2B:BB:EE:07:BD:14:3D:2A:3F:6D:BE:DC:D1:81"}}},"request":{"raw":"GET /www.paypalobjects.com/digitalassets/c/paypal-ui/fonts/PayPalSansSmall-Regular-2.html HTTP/1.1\r\nHost: paxtransfers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paxtransfers.com/assets/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Imx2ZXE5blkzU3BxVCt4VGVxN0IrakE9PSIsInZhbHVlIjoidlQ0aDZLMlRrTmd0cFlmbENmSllaVEh6Z0ZrN09TZ2RmNGFidWR0RU5mU1lxcXJvTlczVzBKNmdwWllRckhpOVRKU3ZTRmxISlhFUFJnZW9FdExkWm5vb0hEa3dhODBXcFVuV2F1ZUo4bHpKYUxRNjd0S0RpVnU2cmVJN29BSkwiLCJtYWMiOiJhZGRhNDY4Zjg1ODU4MGE5ZjEwMGViNDFhMzVlODYxYWZhN2I4MjU1ZjUxYzRjODcwMDZhZmMzZGQxZDUzMDFiIiwidGFnIjoiIn0%3D; instantly_session=eyJpdiI6InhKa3RzTi9tdVZWZzZ6VGQrVGYvTFE9PSIsInZhbHVlIjoiNlBCSCsxNVJBaXN4RFp1bWI1SzJUMFJhcDg2ZUphRE9vaXkyZ3BQTVdPTUNvUmphRnFkRkM5dWJld212NENpOFRYYzRoYWJNbytGUGJrclNoZ2EybnpnWVhxY3JiZmdFMzdQT1RFQWcreXBKWkgrUWR5Wko5WFFuQndma3VNengiLCJtYWMiOiI4MTMzMGRkMmFhMWJkM2JiNzcxMzE0NDhmNWQwYTY4MDE3NDljYjQzNjZjNjdjYTJkZGIzMThhNjA0NDBiMDhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nx-powered-by: PHP/8.2.30\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6603\r\ndate: Sat, 14 Feb 2026 17:08:40 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6603,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5391)","md5":"543ac81966d87ac815e08eb0e436d719","sha1":"e35bb4e32ccf08c11a3935084b50660feb835350","sha256":"8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968","sha512":"0c6a8f7948f93d4d00b5fbb98f487d7e2ee15d104acd83dfbc884ef9b77826dc7daa27b906640572977750a00cb7ef590ed5cd93e2f40ef4def88b9ff92f1dc3","ssdeep":"96:/J/SNi/FLQVTLKCGWz5NN5PXy0jRdoMCX4SZTdI5:/pV2RKCxnNByTMCX4SZT0","tlshash":"aed1871eeac5101e60d785b7e8d4e64c8916aac3de238bdfb54f7915cf8038719a321c","first_seen":"2023-04-06T17:05:03Z","last_seen":"2026-08-11T11:33:52.200437Z","times_seen":9146,"resource_available":true,"data":null}},"time_used":470,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":470,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"paxtransfers.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxtransfers.com/assets/images/famonipal.html","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxtransfers.com/","date":"2026-02-14T17:08:40.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxtransfers.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:59:F1:8E:53:EC:A1:7C:31:47:4B:F5:37:41:39:A5:20:78:E3:F6","sha256":"68:9F:F8:C7:0E:E1:89:C0:2C:FF:8C:9E:4B:5E:DC:8F:1D:25:2B:BB:EE:07:BD:14:3D:2A:3F:6D:BE:DC:D1:81"}}},"request":{"raw":"GET /assets/images/famonipal.html HTTP/1.1\r\nHost: paxtransfers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paxtransfers.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Imx2ZXE5blkzU3BxVCt4VGVxN0IrakE9PSIsInZhbHVlIjoidlQ0aDZLMlRrTmd0cFlmbENmSllaVEh6Z0ZrN09TZ2RmNGFidWR0RU5mU1lxcXJvTlczVzBKNmdwWllRckhpOVRKU3ZTRmxISlhFUFJnZW9FdExkWm5vb0hEa3dhODBXcFVuV2F1ZUo4bHpKYUxRNjd0S0RpVnU2cmVJN29BSkwiLCJtYWMiOiJhZGRhNDY4Zjg1ODU4MGE5ZjEwMGViNDFhMzVlODYxYWZhN2I4MjU1ZjUxYzRjODcwMDZhZmMzZGQxZDUzMDFiIiwidGFnIjoiIn0%3D; instantly_session=eyJpdiI6InhKa3RzTi9tdVZWZzZ6VGQrVGYvTFE9PSIsInZhbHVlIjoiNlBCSCsxNVJBaXN4RFp1bWI1SzJUMFJhcDg2ZUphRE9vaXkyZ3BQTVdPTUNvUmphRnFkRkM5dWJld212NENpOFRYYzRoYWJNbytGUGJrclNoZ2EybnpnWVhxY3JiZmdFMzdQT1RFQWcreXBKWkgrUWR5Wko5WFFuQndma3VNengiLCJtYWMiOiI4MTMzMGRkMmFhMWJkM2JiNzcxMzE0NDhmNWQwYTY4MDE3NDljYjQzNjZjNjdjYTJkZGIzMThhNjA0NDBiMDhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Thu, 20 Mar 2025 10:28:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 932\r\ndate: Sat, 14 Feb 2026 17:08:40 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3841,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"7ccb858eec2faed534b81a8050bca87a","sha1":"974eb66088f6ba422f72c472a3de15a492757979","sha256":"585f2e46f546a2b13f023b45196b6f2ea727192a75e142230d4d16ff62b66bc8","sha512":"160c9a77fd0426fd0e254a4324e483fc0001a12fef6be889515382ef2c2716abb20ab3be4352f4b7549290ec0e00f85736aec2a30a7ca02aee25f829dcf7dc4e","ssdeep":"","tlshash":"2981cb12a1f4330b6070d4be7e4127056f2ea16ba14a6d6d7e4c47acdf89f918c9f60c","first_seen":"2026-02-14T16:56:42.476006Z","last_seen":"2026-02-14T17:09:00.588738Z","times_seen":2,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"paxtransfers.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxtransfers.com/","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T17:08:37.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxtransfers.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:59:F1:8E:53:EC:A1:7C:31:47:4B:F5:37:41:39:A5:20:78:E3:F6","sha256":"68:9F:F8:C7:0E:E1:89:C0:2C:FF:8C:9E:4B:5E:DC:8F:1D:25:2B:BB:EE:07:BD:14:3D:2A:3F:6D:BE:DC:D1:81"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: paxtransfers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.2.30\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Imx2ZXE5blkzU3BxVCt4VGVxN0IrakE9PSIsInZhbHVlIjoidlQ0aDZLMlRrTmd0cFlmbENmSllaVEh6Z0ZrN09TZ2RmNGFidWR0RU5mU1lxcXJvTlczVzBKNmdwWllRckhpOVRKU3ZTRmxISlhFUFJnZW9FdExkWm5vb0hEa3dhODBXcFVuV2F1ZUo4bHpKYUxRNjd0S0RpVnU2cmVJN29BSkwiLCJtYWMiOiJhZGRhNDY4Zjg1ODU4MGE5ZjEwMGViNDFhMzVlODYxYWZhN2I4MjU1ZjUxYzRjODcwMDZhZmMzZGQxZDUzMDFiIiwidGFnIjoiIn0%3D; expires=Sat, 14 Feb 2026 19:08:38 GMT; Max-Age=7200; path=/; secure; samesite=lax\ninstantly_session=eyJpdiI6InhKa3RzTi9tdVZWZzZ6VGQrVGYvTFE9PSIsInZhbHVlIjoiNlBCSCsxNVJBaXN4RFp1bWI1SzJUMFJhcDg2ZUphRE9vaXkyZ3BQTVdPTUNvUmphRnFkRkM5dWJld212NENpOFRYYzRoYWJNbytGUGJrclNoZ2EybnpnWVhxY3JiZmdFMzdQT1RFQWcreXBKWkgrUWR5Wko5WFFuQndma3VNengiLCJtYWMiOiI4MTMzMGRkMmFhMWJkM2JiNzcxMzE0NDhmNWQwYTY4MDE3NDljYjQzNjZjNjdjYTJkZGIzMThhNjA0NDBiMDhhIiwidGFnIjoiIn0%3D; expires=Sat, 14 Feb 2026 19:08:38 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\ncontent-length: 9087\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Sat, 14 Feb 2026 17:08:38 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":58478,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1285), with CRLF line terminators","md5":"37ad8c7110416ebdd58b3eedf09a7b62","sha1":"4e1d9e5cb846daaa1fd1554dbc34d23b3eb446cf","sha256":"d94998668dd956c7d5ac4a540f8b3bd500e50b5d85ff3666dc25b59ab2721d4d","sha512":"4280ef0e3cf9ad68e93f9563aa13c6840b7c4ecd15c4de8fa4785d233880a3ca003dbe7e54125407395164343e64bb5d9c0566ad84f117e6541119e53da2119c","ssdeep":"384:Uf0e1rTEQcI+K1PhnpuVE6i+kV+HC+13U+XMFQTGsu2v20Tb3Dfl1McQ:Sw3I+Mz6Eo13U+86TG020T7Dd6cQ","tlshash":"6b43821099d01277113b4688ea762b48fa519117cf1b8ad9bbfc27870fb6e43e873948","first_seen":"2026-02-14T16:56:42.465851Z","last_seen":"2026-02-14T17:09:00.590647Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1198,"timings":{"blocked":364,"dns":1,"connect":166,"send":0,"wait":462,"receive":1,"ssl":200},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"paxtransfers.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxtransfers.com/assets/css/style_re.css","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxtransfers.com/","date":"2026-02-14T17:08:38.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxtransfers.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:59:F1:8E:53:EC:A1:7C:31:47:4B:F5:37:41:39:A5:20:78:E3:F6","sha256":"68:9F:F8:C7:0E:E1:89:C0:2C:FF:8C:9E:4B:5E:DC:8F:1D:25:2B:BB:EE:07:BD:14:3D:2A:3F:6D:BE:DC:D1:81"}}},"request":{"raw":"GET /assets/css/style_re.css HTTP/1.1\r\nHost: paxtransfers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paxtransfers.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Imx2ZXE5blkzU3BxVCt4VGVxN0IrakE9PSIsInZhbHVlIjoidlQ0aDZLMlRrTmd0cFlmbENmSllaVEh6Z0ZrN09TZ2RmNGFidWR0RU5mU1lxcXJvTlczVzBKNmdwWllRckhpOVRKU3ZTRmxISlhFUFJnZW9FdExkWm5vb0hEa3dhODBXcFVuV2F1ZUo4bHpKYUxRNjd0S0RpVnU2cmVJN29BSkwiLCJtYWMiOiJhZGRhNDY4Zjg1ODU4MGE5ZjEwMGViNDFhMzVlODYxYWZhN2I4MjU1ZjUxYzRjODcwMDZhZmMzZGQxZDUzMDFiIiwidGFnIjoiIn0%3D; instantly_session=eyJpdiI6InhKa3RzTi9tdVZWZzZ6VGQrVGYvTFE9PSIsInZhbHVlIjoiNlBCSCsxNVJBaXN4RFp1bWI1SzJUMFJhcDg2ZUphRE9vaXkyZ3BQTVdPTUNvUmphRnFkRkM5dWJld212NENpOFRYYzRoYWJNbytGUGJrclNoZ2EybnpnWVhxY3JiZmdFMzdQT1RFQWcreXBKWkgrUWR5Wko5WFFuQndma3VNengiLCJtYWMiOiI4MTMzMGRkMmFhMWJkM2JiNzcxMzE0NDhmNWQwYTY4MDE3NDljYjQzNjZjNjdjYTJkZGIzMThhNjA0NDBiMDhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 17:08:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Mar 2025 10:28:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1731\r\ndate: Sat, 14 Feb 2026 17:08:38 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8792,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9f895fdee0a1272739c2885472c20fba","sha1":"bde559b2c4545e38ff99de394426217fdbbafd23","sha256":"27b502efa8cf94e3bfd594aa3ecde1baf39bce4193e8cc5e01c3b4721895e9c9","sha512":"fe8cc3d76b43501918ef04ef97c0b94f8974afc4e3383c8f283c7426149079b900cd1a0ab4c784d00cb9fbbfc96d8f4a493df5269ca4d6a37b825ff61aa8a7b3","ssdeep":"192:hrGWv7UMMOgyVMMYFrw3FHWJNtyxPvad90c909g90WM:hcFCFcreh0M","tlshash":"5c02fe86aaf71245b823d1692ef60705236ad007a30fde2d3ed2719ccf4a2d198b27d5","first_seen":"2026-02-14T16:56:42.471507Z","last_seen":"2026-02-14T17:09:00.591347Z","times_seen":2,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"paxtransfers.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxtransfers.com/assets/images/3-pd.jpg","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxtransfers.com/","date":"2026-02-14T17:08:38.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxtransfers.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:59:F1:8E:53:EC:A1:7C:31:47:4B:F5:37:41:39:A5:20:78:E3:F6","sha256":"68:9F:F8:C7:0E:E1:89:C0:2C:FF:8C:9E:4B:5E:DC:8F:1D:25:2B:BB:EE:07:BD:14:3D:2A:3F:6D:BE:DC:D1:81"}}},"request":{"raw":"GET /assets/images/3-pd.jpg HTTP/1.1\r\nHost: paxtransfers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paxtransfers.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Imx2ZXE5blkzU3BxVCt4VGVxN0IrakE9PSIsInZhbHVlIjoidlQ0aDZLMlRrTmd0cFlmbENmSllaVEh6Z0ZrN09TZ2RmNGFidWR0RU5mU1lxcXJvTlczVzBKNmdwWllRckhpOVRKU3ZTRmxISlhFUFJnZW9FdExkWm5vb0hEa3dhODBXcFVuV2F1ZUo4bHpKYUxRNjd0S0RpVnU2cmVJN29BSkwiLCJtYWMiOiJhZGRhNDY4Zjg1ODU4MGE5ZjEwMGViNDFhMzVlODYxYWZhN2I4MjU1ZjUxYzRjODcwMDZhZmMzZGQxZDUzMDFiIiwidGFnIjoiIn0%3D; instantly_session=eyJpdiI6InhKa3RzTi9tdVZWZzZ6VGQrVGYvTFE9PSIsInZhbHVlIjoiNlBCSCsxNVJBaXN4RFp1bWI1SzJUMFJhcDg2ZUphRE9vaXkyZ3BQTVdPTUNvUmphRnFkRkM5dWJld212NENpOFRYYzRoYWJNbytGUGJrclNoZ2EybnpnWVhxY3JiZmdFMzdQT1RFQWcreXBKWkgrUWR5Wko5WFFuQndma3VNengiLCJtYWMiOiI4MTMzMGRkMmFhMWJkM2JiNzcxMzE0NDhmNWQwYTY4MDE3NDljYjQzNjZjNjdjYTJkZGIzMThhNjA0NDBiMDhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 17:08:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 20 Mar 2025 10:28:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2680\r\ndate: Sat, 14 Feb 2026 17:08:39 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2680,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 70x70, components 3","md5":"ea62ab804f887164f48013c5dade8885","sha1":"616502edb164eaf3a7b6799661ac2fcb0359bbe6","sha256":"708c43bf475796551b1b56a16f43c793d65be07eb5429f66e5ec1544bb6d8e52","sha512":"1a48919e3afe7df196344f2178bc5091f0435abb9d5f81d56988d6654e70144dc56e8dd98351a74cfe9898294d7af23f0226b4260d03e426ee689577fae0ff73","ssdeep":"","tlshash":"e851094ef2a14241e419efb614a2513f9241a4c1fdd0fa5d9cd5c8db85100a99e3f0ed","first_seen":"2024-12-20T00:26:45.193719Z","last_seen":"2026-02-14T17:09:00.591946Z","times_seen":7,"resource_available":false,"data":null}},"time_used":673,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":673,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"paxtransfers.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxtransfers.com/www.paypalobjects.com/digitalassets/c/paypal-ui/fonts/PayPalSansBig-Light.html","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paxtransfers.com/","date":"2026-02-14T17:08:39.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxtransfers.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:59:F1:8E:53:EC:A1:7C:31:47:4B:F5:37:41:39:A5:20:78:E3:F6","sha256":"68:9F:F8:C7:0E:E1:89:C0:2C:FF:8C:9E:4B:5E:DC:8F:1D:25:2B:BB:EE:07:BD:14:3D:2A:3F:6D:BE:DC:D1:81"}}},"request":{"raw":"GET /www.paypalobjects.com/digitalassets/c/paypal-ui/fonts/PayPalSansBig-Light.html HTTP/1.1\r\nHost: paxtransfers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paxtransfers.com/assets/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Imx2ZXE5blkzU3BxVCt4VGVxN0IrakE9PSIsInZhbHVlIjoidlQ0aDZLMlRrTmd0cFlmbENmSllaVEh6Z0ZrN09TZ2RmNGFidWR0RU5mU1lxcXJvTlczVzBKNmdwWllRckhpOVRKU3ZTRmxISlhFUFJnZW9FdExkWm5vb0hEa3dhODBXcFVuV2F1ZUo4bHpKYUxRNjd0S0RpVnU2cmVJN29BSkwiLCJtYWMiOiJhZGRhNDY4Zjg1ODU4MGE5ZjEwMGViNDFhMzVlODYxYWZhN2I4MjU1ZjUxYzRjODcwMDZhZmMzZGQxZDUzMDFiIiwidGFnIjoiIn0%3D; instantly_session=eyJpdiI6InhKa3RzTi9tdVZWZzZ6VGQrVGYvTFE9PSIsInZhbHVlIjoiNlBCSCsxNVJBaXN4RFp1bWI1SzJUMFJhcDg2ZUphRE9vaXkyZ3BQTVdPTUNvUmphRnFkRkM5dWJld212NENpOFRYYzRoYWJNbytGUGJrclNoZ2EybnpnWVhxY3JiZmdFMzdQT1RFQWcreXBKWkgrUWR5Wko5WFFuQndma3VNengiLCJtYWMiOiI4MTMzMGRkMmFhMWJkM2JiNzcxMzE0NDhmNWQwYTY4MDE3NDljYjQzNjZjNjdjYTJkZGIzMThhNjA0NDBiMDhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nx-powered-by: PHP/8.2.30\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6603\r\ndate: Sat, 14 Feb 2026 17:08:40 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6603,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5391)","md5":"543ac81966d87ac815e08eb0e436d719","sha1":"e35bb4e32ccf08c11a3935084b50660feb835350","sha256":"8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968","sha512":"0c6a8f7948f93d4d00b5fbb98f487d7e2ee15d104acd83dfbc884ef9b77826dc7daa27b906640572977750a00cb7ef590ed5cd93e2f40ef4def88b9ff92f1dc3","ssdeep":"96:/J/SNi/FLQVTLKCGWz5NN5PXy0jRdoMCX4SZTdI5:/pV2RKCxnNByTMCX4SZT0","tlshash":"aed1871eeac5101e60d785b7e8d4e64c8916aac3de238bdfb54f7915cf8038719a321c","first_seen":"2023-04-06T17:05:03Z","last_seen":"2026-08-11T11:33:52.200437Z","times_seen":9146,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":470,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"paxtransfers.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxtransfers.com/assets/css/style.css","fqdn":"paxtransfers.com","domain":"paxtransfers.com","tld":"com"},"ip":{"addr":"66.29.146.42","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxtransfers.com/","date":"2026-02-14T17:08:38.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxtransfers.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 19 Mar 2025 00:00:00 GMT","end":"Thu, 19 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:59:F1:8E:53:EC:A1:7C:31:47:4B:F5:37:41:39:A5:20:78:E3:F6","sha256":"68:9F:F8:C7:0E:E1:89:C0:2C:FF:8C:9E:4B:5E:DC:8F:1D:25:2B:BB:EE:07:BD:14:3D:2A:3F:6D:BE:DC:D1:81"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: paxtransfers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paxtransfers.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Imx2ZXE5blkzU3BxVCt4VGVxN0IrakE9PSIsInZhbHVlIjoidlQ0aDZLMlRrTmd0cFlmbENmSllaVEh6Z0ZrN09TZ2RmNGFidWR0RU5mU1lxcXJvTlczVzBKNmdwWllRckhpOVRKU3ZTRmxISlhFUFJnZW9FdExkWm5vb0hEa3dhODBXcFVuV2F1ZUo4bHpKYUxRNjd0S0RpVnU2cmVJN29BSkwiLCJtYWMiOiJhZGRhNDY4Zjg1ODU4MGE5ZjEwMGViNDFhMzVlODYxYWZhN2I4MjU1ZjUxYzRjODcwMDZhZmMzZGQxZDUzMDFiIiwidGFnIjoiIn0%3D; instantly_session=eyJpdiI6InhKa3RzTi9tdVZWZzZ6VGQrVGYvTFE9PSIsInZhbHVlIjoiNlBCSCsxNVJBaXN4RFp1bWI1SzJUMFJhcDg2ZUphRE9vaXkyZ3BQTVdPTUNvUmphRnFkRkM5dWJld212NENpOFRYYzRoYWJNbytGUGJrclNoZ2EybnpnWVhxY3JiZmdFMzdQT1RFQWcreXBKWkgrUWR5Wko5WFFuQndma3VNengiLCJtYWMiOiI4MTMzMGRkMmFhMWJkM2JiNzcxMzE0NDhmNWQwYTY4MDE3NDljYjQzNjZjNjdjYTJkZGIzMThhNjA0NDBiMDhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 17:08:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Mar 2025 10:28:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 70299\r\ndate: Sat, 14 Feb 2026 17:08:38 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":644644,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (675), with CRLF line terminators","md5":"63dd11386418c8966e4bc4a5af96ac3c","sha1":"22be50db9c167f13ecccc3b80ca479a03f3ef435","sha256":"0cdeb2f1f8644b81fb1795ecb053e918aeef3f7c75c2b00cb0a6f580c14f51b2","sha512":"21af6cc59dd2aba2dd215a85a6cb0b2f4461e6dc1047e395a1b6da47db72f7ef194f45f9ff93d4a3a0f2cf15fa303ff540f85822c2875c21d77418ed400aaa2d","ssdeep":"3072:1LL044vpdF+VMKvsZIEJ7UAEhUk44nDzhW+Fbs1pYPEu/UIFgbrIH4x9yYRb/Iyd:FJhbhhdhLVhC","tlshash":"7cd4849089123106d63787b9eba69f04fb6d5473ca0305f87aee629d8ff01d0c996e4d","first_seen":"2026-02-14T16:56:42.470056Z","last_seen":"2026-02-14T17:09:00.592514Z","times_seen":2,"resource_available":false,"data":null}},"time_used":682,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":332,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"paxtransfers.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"paxtransfers.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}