{"report_id":"a3204859-a2db-4586-80cc-d04acb3aafd9","version":6,"status":"done","tags":[],"date":"2026-04-04T15:38:32Z","url":{"schema":"https","addr":"convregepay.com/","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"convregepay.com/","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"title":"convregepay.com – convregepay.com – Your trusted partner","dom":{"size":87109,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14390)","md5":"937610c16442be10b999b40681670bcd","sha1":"4ed1c075ecc887427576fab0ab8d93eb57efca2d","sha256":"f2fc72832bcaf26cf05d241ad7b4f71faac0b2412cc764f5f57ae34a8ad9e74a","sha512":"5cbe31c2840a3dd27bcafca99459cd91134770ef0b26f7e650389454ea296a5c32984de4de0653e4391744e8ef6609066f7f4047c95ad9aff6fdd8b0643df16a","ssdeep":"1536:2VypScGkaejkak8w6kzlhXqcCkLPwpGvZ9jdXMUWkvP8Vhb7/w:2Q0cGkFjkakf6kzlh6cCU4pGv7jdXZWM","tlshash":"c2833a7175a4046f3d9b82f9e16ab31cea54e5c7da06d6aaf5fc01206fe2df31843608","dom_hash":"domhashf517d1a43c5ca9addea881adba88274c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"convregepay.com/","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-09T15:38:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-29T22:16:18.281815Z","alert_count":0,"request_count":3,"received_data":148101,"sent_data":1665,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-29T22:32:58.732232Z","alert_count":0,"request_count":1,"received_data":103643,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"convregepay.com","ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":43,"request_count":43,"received_data":1299212,"sent_data":25781,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WooCommerce:10.5.3","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"Contact Form 7:6.1.5","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Elementor:3.35.6","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2026-03-30T02:19:21.074617Z","alert_count":0,"request_count":8,"received_data":11444,"sent_data":3638,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-29T22:20:07.848058Z","alert_count":0,"request_count":4,"received_data":200664,"sent_data":2315,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-03-30T05:39:45.566461Z","alert_count":0,"request_count":2,"received_data":1000775,"sent_data":867,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"convregepay.com/contact-form-7-js-before","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"33996766249eda27cd78c2ab81890edc","sha1":"61a4e0ccfab5d1bf6f78b94760d23b546d3c3c1f","sha256":"5234b1a702bc44494898762c80b1d2dec401d07cf48dfbd0aa70cfb78421cd3f","sha512":"59370520de512966bbdd24cad09124ec9325c2d387146b3433468ea8892b8e7b954cff295b2ef1332e6386feabd992594560410d28b503694bbbb95dfd17a241","ssdeep":"","tlshash":"9c1180e5d5981c8524dbc174057c5314b1149417c65f5e46f34d004c5ff40b96904985","size":864,"data":"","first_seen":"2026-04-04T15:38:48.628193Z","last_seen":"2026-04-04T15:38:48.628193Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=10.5.3","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6843fa9b6dfd1cae807f2c375830d09","sha1":"cc378797cb063f3981907698a6cc01e539eca654","sha256":"fca8dd4ee9c93f33dc3149e2c78aec8a28c54036faaf19c7b0ac9ca32293c070","sha512":"c9eb3dd5c84945d185f5ccccd954ef9546488e4979f9b3af5de54e107b2d0f8959e6c54509eee41f5ab67eb28488476e9a7751cd1a3fe671b618316cf944f3f0","ssdeep":"96:8mJQb8DHwbTtwqfDZa27MXi/NCa2St01Zyw6VfQ0GfV5VP:FKwWpwQFa2N/NCa2St01Zyw6VY9fV5VP","tlshash":"119173ceb121e4b693a22d82602fda850533383ff08694f8248aa6e51f359456577f3f","size":4350,"data":"","first_seen":"2025-11-27T20:47:57.43318Z","last_seen":"2026-04-25T00:50:49.627166Z","times_seen":19836,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.35.6","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"73c07e9630db2adbba0c6bc0bf568719","sha1":"dbeb1065ce0ea1fc9fa6b9df9e5e1700a8dee09e","sha256":"f4bdadf362076967230901fdfc69c8df84957f6615dec226b99ad2abb64c2c76","sha512":"d48774149b65604aeee68cf2936bfe5c84714bab61a46a190952b595ee79ce8aa2c0549a3755768b3a3615c2b6abe0cfdc69c398a77296b8ceebc69bfea8f8dd","ssdeep":"1536:yuyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:C+uhIAu","tlshash":"cf33d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","size":50503,"data":"","first_seen":"2026-01-29T11:04:52.803648Z","last_seen":"2026-04-25T00:54:28.752702Z","times_seen":22836,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-04-25T01:55:28.362136Z","times_seen":133422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d181ec72d6b2cd0b2a53748d9f004123","sha1":"353733ddb3b3435a52d35fa53d100ec5a7ea2cfe","sha256":"18dbb829e4b3760518d434bfde2e27c9b02da6223613ccfb86eaac69463f76f9","sha512":"621814efea307f620bc3611a889b9648f8d408cab76b78e1a816d3b0b6aa2d04f0c70c2b787cce7ebd59c33e23ec308ee41bf108f784e833deeb32332733a296","ssdeep":"","tlshash":"7ad02be5529a9d5363d66ed8200575f270601403e5cd98599ac8bc8c1710dc1ca0480f","size":263,"data":"","first_seen":"2026-04-04T15:38:48.629797Z","last_seen":"2026-04-04T15:38:48.629797Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7efcc4158243453b11cab95d4a0a211e","sha1":"05c2fb8093877902439926c0d0665da72f32cbe4","sha256":"79c8cf485e557e011455996155fbd5952cf06a10aa2cb6f68374c49b6c84ca9b","sha512":"9cc12d614a999a93b60c7b966479f7669be8e4408a0f81eb4beb9a00ae58e14f1f7fad31a0fc79f8f6af4c0788f4b402edf5f2998da5861d321850fd78b8c5e8","ssdeep":"","tlshash":"0f71859ae77638dbb2f900f2697a0d47eb614435d6c8d038c9aea3141cb5893c274e46","size":3686,"data":"","first_seen":"2026-04-04T15:38:48.631614Z","last_seen":"2026-04-04T15:38:48.631614Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f2c41fbb61b82f37635e68ebe09e7c6","sha1":"4d73037e99829c323afe79807bdb132c14cef392","sha256":"0f004a5ee2b74a726770906326a5ec9e7a76eaa49db01d346ead0ff688339d78","sha512":"953d039c3ebbc621a0b766cecc51a4335d3f8fe2b3428f734c7a5284d61f76453eb625159410ed2419d454555d79d7b74d73b0364620afeae5dc92f6422a1710","ssdeep":"","tlshash":"63d0a79605992d8352dcaef00000283334b0e217f6e108002b1cee6c3239dc3de10147","size":215,"data":"","first_seen":"2025-12-02T22:49:33.863677Z","last_seen":"2026-04-25T00:50:49.727451Z","times_seen":13073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.35.6","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cd57e8cc70f6a9fc319c4c45fef6134","sha1":"883fa4ed0f0e114f04e7af8a8ad3a0964156c690","sha256":"fd9ae84b4655a6ff4bc18628d0dedaa835d10b5d6ea48455d73523c8b34e34f6","sha512":"57d47442aa77d546eb854717c1c9c30c1197f3aba0948709dd1ad3528c50d17d0b61e7b791fecfeff9e4d7c2ceeb370b3cc7fdd6eea563ce3db609c7ec2d896f","ssdeep":"96:+6sN0Z9Z4JfrjqyWiNDy9l8OWZp5Rm4leNzwVeLyVU2j2KBKGarNcl8/2:JsNGyrjiiNW65RmH0IW9v7G/2","tlshash":"f7c172941a54fc2b21e139d8e00ba735252ec0373c1af981fa32eced54e4fd183aa531","size":5722,"data":"","first_seen":"2026-03-03T15:30:23.231417Z","last_seen":"2026-04-25T00:58:58.164774Z","times_seen":18934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js?ver=10.5.3","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a816ff38bdd095e2118365ad4c618b","sha1":"c58ae69eeea5bf2846b88a6c7cbaaa7728a2444d","sha256":"0eb862a5891526d089b727fdfa30222cca4b4d75b5835727bf57df17436256f6","sha512":"b6650185967270b09fed48ef9937d21ae45b37010aef6b6a6a4ce3efb295bd39d3734b1cce7535e126cb255b1a3b40c27dd97322f1b70ee0e1c67163e2539cf4","ssdeep":"","tlshash":"41418335b001a826c37782d997aba651b335662d760290dca19c8cb43a39c0b7972cbf","size":2439,"data":"","first_seen":"2026-02-05T17:32:11.552459Z","last_seen":"2026-04-25T00:56:00.920926Z","times_seen":12485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=10.5.3","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"abf4bb282c65836335fa88b6a680fb5c","sha1":"4ff37875342f9e9ab85cc6284fd5acfc06df7d18","sha256":"a41ecabfaa5a628b26a98234caa818e4d68e3edf6c48cee40b2a6f4c4fcafaba","sha512":"98a8eff66d0687b1032168ed55e3bb451fad16f1317da18768311c1058b8d8cb67fd827810298a70a831ec9d73d308d7133e2d21d022e46356d1295f8f645874","ssdeep":"48:0ncEupIbXbi5okOBRQJ8H6xJsnDpr6r75eGSqlw4Sd+uOujoKsPPF3cLR8p2o:0cEQw26a8EJWrO75ekw4klctsd85","tlshash":"0a81872774216d7322eb75ba2c9fe98014331639a8414501b50acf6c2b7e8ca7637f3e","size":4131,"data":"","first_seen":"2025-07-14T18:47:47.063472Z","last_seen":"2026-04-25T00:50:49.686606Z","times_seen":30168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-04-25T01:54:39.218099Z","times_seen":168689,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.js?ver=10.5.3","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc06080ebf979384eaf92a5f1cd7a50b","sha1":"1474b07026c758629a82df51a5e4fbb7abf531df","sha256":"c50a0b33030ba0ec063be642c297f48af94359e2222ff140817248d591faf837","sha512":"d6443028105566717f328c56d17a0694e13905aa008bd36ba744e76bc5181e854ab80563be1d3167d728bf5eba6c502d7e36aebf0ed74504c88e47125cc710aa","ssdeep":"384:1wNWSiRVRS4tdanZkYH5FL736ePkPakFX:qNdi7anPH5FL736ePkP/","tlshash":"fc62e945756050358aa511ac283b018f613adc3aa6f46834ef18e4ae387cede51fbb7d","size":15315,"data":"","first_seen":"2024-06-19T04:58:57Z","last_seen":"2026-04-25T01:54:33.824464Z","times_seen":106901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dd361b7473936c5c8f5bf661c323973","sha1":"5c8f2bcac20956a31c9cff999d50b99f9ee8f9fd","sha256":"55922883b583583787dd3e36a6ee97b5bedc12eec38a24b6bd271d53b8ebf1c2","sha512":"4181a000ecc679d08f6cad5ddac0283744c6dcb07822a19d2552105e4a9191f1baa4a1590975a71325c56714a37084f8122afe463170ce54b5a56d1a1c7780c4","ssdeep":"","tlshash":"a4f05c7a70d278ff200b44520a97105de6a81cf5012961417fbd44382a75ea4a23139f","size":449,"data":"","first_seen":"2025-06-30T23:09:48.860419Z","last_seen":"2026-04-25T00:58:26.610597Z","times_seen":58566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2668762c1f8a76fe5eb039e882fc37b4","sha1":"854219d716ad14e8be283c4c4cfa46ef8a2eabe5","sha256":"13144b6cf7cd8a23d7b5dc38127e6734aefd9aa0d39b5d8db19e0abd3ea4d20e","sha512":"1eb345079f252103ef3aa0e44033c33c07e18fbd9f9a0d2eb2390c303d9e616385be0155ee7a6d874e2e2cb9574330262fa9024780ed1fb05a990e46758ec971","ssdeep":"","tlshash":"20f0c2ae58f1577b152b587a814fa0216602018bac3dfc2b794c15504f8c40ca1b8398","size":450,"data":"","first_seen":"2026-04-02T14:35:32.721154Z","last_seen":"2026-04-04T15:38:48.635044Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/elementor-frontend-js-before","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"985d6fc3ef4c941ef2e5255619e36170","sha1":"5cbd3513a2ca9633c2dc9ed9e5534c613805d3b9","sha256":"2d069633bd3c320c453751d57cdc8f7b9a7d4e31159f276028696031a500b6d7","sha512":"d8f25b86ab3687f0af4d6740f12fca1e6ab1114e582c8b5efbebf4c419a9d738ab992d02bbcf10fef8442761824f9b1a4048729f8805b7252958cea5025bcabd","ssdeep":"","tlshash":"05617221fa451ebf83d78bb03d27fb07687c0625e081b8a6f4bd486c05b69662307d47","size":3424,"data":"","first_seen":"2026-04-04T15:38:48.637203Z","last_seen":"2026-04-04T15:38:48.637203Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wc-order-attribution-js-extra","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"33a4a35771b31b86d1d58ef491a71af7","sha1":"cf7ed0de1b1e3b2ee53d0d091f0988ab04f3b826","sha256":"16792442e69a159ebbb50f1d3fa795fa916f12ad1cc3322688bfb93735566a41","sha512":"c9005efa94e9ae2f084c7bd7b3fba7e04d001deb4c7d041a7090c8d234919f0db72b64f853d3cb2dda1f8d6b3c60e6f108673a6418cb305709734009db9da335","ssdeep":"","tlshash":"18217612ee04a835f7c2803150ac9bfd32b703b6f4c0401dd3ad4b5c9228b81e082a0e","size":1436,"data":"","first_seen":"2026-04-04T15:38:48.639323Z","last_seen":"2026-04-04T15:38:48.639323Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.10.5.3","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef56117d1bb5cc41aa6bd127a49c7640","sha1":"b9c2ed774177fc0fceba5cb58113024b23fe4fb7","sha256":"d151f8c0b2659cfb63704d68654ad8d9437ae9da4410536f63ddec21689a0620","sha512":"0ec9039dbb47470815ad8bf58fd206672717a146b3a99bcb12444687e8489698e06664e6c6cc38a5d2954fa919e5a6c3bc57e44f3be2655f92b801bac43ec763","ssdeep":"192:x9cCxjlRE8iST7TMcPvedRUtV7uLEUfHqo/gH5P5AxTov7fG3ex2NrMP:x9RjlRE8iSf4cPmgtV7uoOKIgxaxTovp","tlshash":"9f12e96831f3215780b7b1907cf7e38f73b2553c648798d1d0acd4692aacd7a2622f09","size":9636,"data":"","first_seen":"2023-08-09T05:33:46Z","last_seen":"2026-04-25T01:54:33.858565Z","times_seen":128867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.35.6","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"070048edd0950b156f2884cc6be49958","sha1":"f7df7a3692aae24b0d9bcfce4f436f9154fc4478","sha256":"a06367414e21ca690b7be3bad14cd62dcd8c35683b88cdee2050aaea11f703db","sha512":"aea4a92b1164697d2d808b46fa87d5dc35a4237afd7b4adee7f92da9b51f3ab1119a9375ca7ec62f2624d7fbb89d4cc77fb034486f80dc75b42e0f8c6d9b15b9","ssdeep":"768:D1c+6idHZRdzM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5GlT:ZcURdzMMBOBjmFatJR8RjD8/xHVlEEnp","tlshash":"69e208523296e866069f48a3f0231119f3765dd9b80af0d5b2bcdce6a471e877362b34","size":31928,"data":"","first_seen":"2026-03-03T15:30:23.234129Z","last_seen":"2026-04-25T00:58:58.071353Z","times_seen":19124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-i18n-js-after","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"38cf0d8b0cf38ce662a71949a3babc2b","sha1":"0f2873cfab50f2005bada42ff0866e9fde44cb5d","sha256":"a72cc72c22e21f5ca45741a7b87ebab9e4c577154afd65f68d5d8bf7096f51c0","sha512":"3933902aa23daa338157590c37314316155e2a573b532e35afb4803f10c5bb4bda5a1e5c7e6d0ed1a6ee8da6e5b07aef5fe400d19fd234bcc294f289d582a7c6","ssdeep":"","tlshash":"210112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":784,"data":"","first_seen":"2025-12-16T12:46:55.040104Z","last_seen":"2026-04-19T05:18:00.275814Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/themes/custom-theme/assets/js/theme.js?ver=1.0.0","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1781917e1b1785565c65fc73acc12c8","sha1":"00636e727d46e705d90a9d4d7f0abc0ff84c59b6","sha256":"3d30ddca01f89108fc0d460b7bf61600645f2814662920ec4560bcc48eacb8e0","sha512":"ff81b302870656f99e18350ae46da4b1ac65d3e291605d235eb0ee2d14baa50eab954472c9201f8a15376935b22a6e142e415b327affdeaf5b9c1698cd18e5a9","ssdeep":"192:UAigFbg74dDSDIoOM0Dy3iGcL1E/igO7MYHk38AywA9whAFaOklXGCGTC75GK/Fz:tZnAOM0Dy3hcaJDqC7j6XsK+ndcA","tlshash":"a392641e25b7207545b3227ea7cfa604763120477409cd0a7ead87441fc29b96fe3bea","size":20931,"data":"","first_seen":"2026-03-07T20:32:57.270232Z","last_seen":"2026-04-13T06:40:51.230681Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.5","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-04-25T01:54:39.216458Z","times_seen":162164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-04-25T01:55:28.435284Z","times_seen":239350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-25T01:54:39.253814Z","times_seen":163875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","size":8481,"data":"","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-04-25T01:56:24.75821Z","times_seen":86140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","size":5314,"data":"","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-04-25T01:55:28.43252Z","times_seen":131852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.10.5.3","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"691a1e43450e7cda541a3bd6f10fd5db","sha1":"d3a78cb77ccec297c9d32fee99a2a4761f604a8c","sha256":"8b083f64f2e9e8ac445c730dfce7013cc6449ce155fd1c2f42b60edba4ecb4b1","sha512":"a32ebe942e704da64381e392ffc20ed4f9d8daf71227a06f2dc0ca5c037675ab67e5b5a5ddf9bcb77b1872308daa780cc0e6ec5a2469bcd51444ece4f3b3de0d","ssdeep":"","tlshash":"c031b6d93095a8da06071490463f1207f2f91e27eecd98906264e8f50ab077a01ebf6b","size":1720,"data":"","first_seen":"2024-03-20T13:06:17Z","last_seen":"2026-04-25T01:54:33.813551Z","times_seen":109331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css?ver=6.5.1","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/all.min.css?ver=6.5.1 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18861\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65692999-49ad\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 62427\r\nexpires: Thu, 25 Mar 2027 15:38:11 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2B%2BaCvfWJPhF0oMnB5gY3YgvxVsKZvVITbjsm3tfrMjAJH644wsDbHQ5eBJRPzJnvcZk%2FNUg9mmcVWsP24f%2FjXwemMWYustaZBkGNTXFKFRkjOgbAlqZSphvpL01Lef2YNt%2Fim8y\"}]}\r\ncf-ray: 9e71660dcee80b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102641,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-04-25T01:55:57.501147Z","times_seen":23833,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":9,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/uploads/2026/03/image_1774894669251-300x171.jpg","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/image_1774894669251-300x171.jpg HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 01 Apr 2026 17:31:59 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69cd568f-10e8\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mWLeenk3SNYEKnFzLPKpkns%2BYJMoAS1VR4WueuEGt0nXiD7yDUYeaun6N86dYixjTSOMBQTRfJZMJyWy5e9gWuovYJa3gfij2%2FZI%2BKwkkoVGlOh6oOFzj8EQKpFC7R0jgVE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660dbc3db51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4328,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x171, components 3","md5":"1ca9ae2fec564787bf37330c0544644f","sha1":"5e208147abb63088e44702cdf063e6eaab389002","sha256":"9c2986e5db012bd6cb6468a954d27c88a2495915c38fc56203b56cfcc2dafba5","sha512":"3191ce4588b0f654f1b113e1bdebabc8277340e66a8a45f895c7208018a1a8322c5d42890ff77a39d8a835fda46bd21df51a78fbc8c7a3e1747c0bc9b5a64929","ssdeep":"96:MzR6x+fC1TKEdui/dB9wgWMjHL1bKAN+UvZA9XIvctTQ:MFhefxgMjr1+y+C1cNQ","tlshash":"70914aa5c70557d6886c0d7ba1fa4d2d8281cba9f1c9dbf9d07cfc8dc2a20d3a11a8c5","first_seen":"2026-04-04T15:38:48.513526Z","last_seen":"2026-04-04T15:38:48.513526Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/themes/custom-theme/assets/js/theme.js?ver=1.0.0","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/themes/custom-theme/assets/js/theme.js?ver=1.0.0 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 01 Apr 2026 17:32:01 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69cd5691-51c3\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nBfyNV%2B2UupwdklvqmCHIyPiQeRWvRzFb55nikouMi6sh6D58xMchImODdEL2mRENSAKrnzANXgMChm2BhoLlfeBMH%2B4cv4t2Tszdp2IIo%2FTvX3gV2KhPDmLEDy5SRVKqsk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660dcc4ab51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20931,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d1781917e1b1785565c65fc73acc12c8","sha1":"00636e727d46e705d90a9d4d7f0abc0ff84c59b6","sha256":"3d30ddca01f89108fc0d460b7bf61600645f2814662920ec4560bcc48eacb8e0","sha512":"ff81b302870656f99e18350ae46da4b1ac65d3e291605d235eb0ee2d14baa50eab954472c9201f8a15376935b22a6e142e415b327affdeaf5b9c1698cd18e5a9","ssdeep":"192:UAigFbg74dDSDIoOM0Dy3iGcL1E/igO7MYHk38AywA9whAFaOklXGCGTC75GK/Fz:tZnAOM0Dy3hcaJDqC7j6XsK+ndcA","tlshash":"a392641e25b7207545b3227ea7cfa604763120477409cd0a7ead87441fc29b96fe3bea","first_seen":"2026-03-07T20:32:57.270232Z","last_seen":"2026-04-13T06:40:51.230681Z","times_seen":18,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.js?ver=10.5.3","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.js?ver=10.5.3 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 01 Apr 2026 17:32:00 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69cd5690-3bd3\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ijv0zmyNtdk5EoprwSJpMufLjAybB99o0weS%2Bwg2rxhh5kf1Qe%2Fj0jSmc9xrFeVzgn6DytaAQh8bbe94bkH8vOJEaUgaclB6i7X67GNm%2FW1zp5MhEqnFqIkSPefvInjVBls%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660dcc48b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15315,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (15315), with no line terminators","md5":"fc06080ebf979384eaf92a5f1cd7a50b","sha1":"1474b07026c758629a82df51a5e4fbb7abf531df","sha256":"c50a0b33030ba0ec063be642c297f48af94359e2222ff140817248d591faf837","sha512":"d6443028105566717f328c56d17a0694e13905aa008bd36ba744e76bc5181e854ab80563be1d3167d728bf5eba6c502d7e36aebf0ed74504c88e47125cc710aa","ssdeep":"384:1wNWSiRVRS4tdanZkYH5FL736ePkPakFX:qNdi7anPH5FL736ePkP/","tlshash":"fc62e945756050358aa511ac283b018f613adc3aa6f46834ef18e4ae387cede51fbb7d","first_seen":"2024-06-19T04:58:57Z","last_seen":"2026-04-25T01:54:33.824464Z","times_seen":106901,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:13.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-04-04%2015%3A38%3A13%7C%7C%7Cep%3Dhttps%3A%2F%2Fconvregepay.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-04-04%2015%3A38%3A13%7C%7C%7Cep%3Dhttps%3A%2F%2Fconvregepay.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fconvregepay.com%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 01 Apr 2026 17:32:00 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69cd5690-2121\"\r\nexpires: Sat, 11 Apr 2026 15:38:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0gdCwUKtOzw8fYlAJ6f4mLNc%2FGQN%2F6JG3dFuUq9gHyQgblIQKnUHcufaexWYX3pSG2FdSyHGUd%2BaB1ECFwJX%2BT66G%2BDGF9uFxdQdYYlQL%2FXTzSexnphr%2BZlqUmdAzhVyY98%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71661bccf5b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8481,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8481), with no line terminators","md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-04-25T01:56:24.75821Z","times_seen":86140,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/2b50.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:13.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 19:44:39 GMT","end":"Sun, 24 May 2026 19:44:38 GMT"},"fingerprint":{"sha1":"56:DE:8F:AC:F7:7D:09:E2:76:F8:9A:D7:5D:9D:16:D0:8A:77:E9:1B","sha256":"F4:65:F9:07:07:7E:3C:D6:2E:1F:02:76:FC:58:8D:E2:FE:E1:4B:A5:5A:D5:4C:AE:78:56:62:41:A7:28:80:CC"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/2b50.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 15:38:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:29:30 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 17\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":554,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"141d49436743034a59dec6bd5618675d","sha1":"40ae1e869a5dbb69db04b0efff13a34e6e339dda","sha256":"2bf5907894a70b877089c24817fcc65db655cfed28840aa16c8f3810cd412620","sha512":"0f3c7b3a13f8682cdd855891adeb4e09cbe5ec5554cfbc67bddc628a767565987bf4ce9082e9f819096f2707eb91e5ca28985df16e47102be115b41421b1c96d","ssdeep":"","tlshash":"4af081d74271c5ccc28be455ee3b6dc12a5ea03e467a04a583270bdc641a9dd3944c80","first_seen":"2023-05-18T03:23:07Z","last_seen":"2026-04-24T23:17:20.607202Z","times_seen":3809,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":50,"dns":6,"connect":8,"send":0,"wait":8,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 04 Apr 2026 15:38:11 GMT\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22365,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"63c1df95a2b11b7542db5b48c56125f1","sha1":"b4116959b5ecbc00779addd320d98d8863692210","sha256":"7ead28f8032c788137532c3a88e9a7bda1411143e54ed4c066271c29f90340b7","sha512":"a5e42a035be607f6a98d7f73a26c37ad2e03a81dd0b54f2cc7bc5dc94a41b3b80af855ce9604e2b2283a7936df9008f068a8285c4cd8e4e960ab411c9c687d4f","ssdeep":"384:bvWLvKvXvUwvzv+vLWaZOUPSVsWJqtUghWVWInkUBALWWXYjUyvsHWm1iUz+54WD:bv0vKvXv3vzv+vLrZOuSVsMqtNhWV1nR","tlshash":"66a2bdd6486ba405ab870cc163dfbfa2ad9e5151a081c4becbfd2cb86cd6d32136075d","first_seen":"2025-09-17T18:46:03.2743Z","last_seen":"2026-04-25T00:54:09.391944Z","times_seen":11588,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":130,"dns":1,"connect":22,"send":0,"wait":33,"receive":0,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/uploads/2026/03/image_1774894671953-1024x585.jpg","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:13.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/image_1774894671953-1024x585.jpg HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:13 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 01 Apr 2026 17:31:59 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69cd568f-8b9f\"\r\nexpires: Sat, 11 Apr 2026 15:38:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X%2F8JOSTm25bdc8D5LBKx2%2BG7ORJ3%2FjFXUDr6b4SY5nqGJQmiMCK9utsTKpClvFnERysCgq3G8qMG0rgFqNJ5yyou9zUz2Sc0TPrDxUiI0oelikJhdbP8SbQWZtu2Kp%2F4d2I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e7166174cc6b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35743,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x585, components 3","md5":"3c23a88b7d6607e4a6bb0558a586706f","sha1":"2654defc9e4ab62c374c4d06003be8cafe34515e","sha256":"8ef610c8d615dad6784154854bc67e4e9900739772aaa027f73be8834e373d92","sha512":"4866e4c84583d307ec0b2727e48e32f0c47091554a451f1e7815dc033ddb5cc9e1f2663e6fbd3411fe034eaed153af9a32adc375052d9d3beb424f333eaca041","ssdeep":"768:4MEol9GJxQXCtPFs0o7Sj5PWVEQVmUgc+gRVIagqh26FX6bpSsy/g4q3:4c9cMCU0o7Sj5PSZ561Qp2He3q3","tlshash":"26f2f123dbdcae53e2f4863c0009963d37f7b565e40910a623f4d62a43d9cc462ab676","first_seen":"2026-04-04T15:38:48.529683Z","last_seen":"2026-04-04T15:38:48.529683Z","times_seen":1,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":266,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17?plugins=typography@0.5.16","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 09:41:26 GMT","end":"Fri, 19 Jun 2026 10:41:19 GMT"},"fingerprint":{"sha1":"1C:D9:C0:8C:4D:FA:FF:5A:2C:CC:48:EB:7B:35:CF:FA:AB:7F:C0:61","sha256":"1E:81:97:52:8B:47:37:54:3B:62:1E:0B:E5:1D:D6:F7:F2:6D:CD:F7:D3:1F:8C:0E:78:14:26:9F:B9:87:EA:5C"}}},"request":{"raw":"GET /3.4.17?plugins=typography@0.5.16 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://convregepay.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::2w7xz-1773800733016-8adc4983bf11\r\nlast-modified: Wed, 18 Mar 2026 02:25:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 1516357\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FVsW%2F8gJRHCqysiCUiMQFfosSeMb0KZv0srSDm0pSrz5qyQWEcKUiCSAsnX9Y2H%2BKBMxdHLpwNTKld62J9Gb9ZE3jk69530ZHlRkXUjuSSe71t909FumYuhpI379juHfy1fbGic%3D\"}]}\r\ncf-ray: 9e71660e5e858be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":499661,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52873)","md5":"29ffc3e3e3e0e98bf3590865db08dc00","sha1":"bb6dfbdfd7e9b4c6589ee2b526cea2c2edece065","sha256":"40f00f2a537733b55c4d30fbb762164329de258493af6faf88b72f48d354ae6f","sha512":"7574770ebd3153913e40fcb74bce4217ae1f866bfb4383a151a17f0350e4d07c2131430e330c0d9f5226f8c07f67f65345d45274b70194be6ced0cb1f33c0b99","ssdeep":"6144:G/Q1+KztlZNXAs+7Vy61LLwaoh0A3qdP06OBlBmIqf7NgekjLO0s:r1+Kztfqs+7Vy61LLMSgFFRmI4NCLO0s","tlshash":"7bb43ba97356b13647eba1e850ab1402f37d5a28900c84acf79dc4da3de4d4950bbf3d","first_seen":"2025-08-04T14:57:28.699817Z","last_seen":"2026-04-25T00:22:03.289255Z","times_seen":743,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.35.6","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.35.6 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Apr 2026 17:32:01 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69cd5691-d58a\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z5ZZfXwY87tQjHu1VZ4umGX8Na41SwuXwwnKAafp7RdEUAGrGKppmXCVPuHfDyAv%2FxnE9cM3%2FRbw5mS8SX2hO7NH8keBmPpOpeIaOJ6JFqf%2Fbwtu8uqqlf8gmdXN4ItHuzk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660dac30b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54666,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (54666), with no line terminators","md5":"4fb5f7fc5e41f736ec0527b162519d52","sha1":"33697641c940c68153509fa7c9d7d0c3c760ce2d","sha256":"0a5d398672e25dc7f020f69df92a985481b248a60e301fee232d0c8afd648dc5","sha512":"5da1e9708bfdbd38beb7cee98d806ebc84b4d8337ce638a363d28461ebd9fda5189618bfa62167a5261ec2e98b02cb88ee4ff7bd5ecdd2d2facd480965e0c7a6","ssdeep":"384:Ws4J/8DEksCoI+SBQYO22/RmRs5Cz9TQXPTkvmGkvmCFldtraiIks05ArOk:dFLh5mP3RbrlDdps05Xk","tlshash":"17330da23d13b269226f442b82c7364c526499c1ee0375d9f944c523dafece63b36c5b","first_seen":"2026-01-29T13:38:24.653388Z","last_seen":"2026-04-25T01:56:24.713045Z","times_seen":22984,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=10.5.3","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=10.5.3 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 01 Apr 2026 17:32:00 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69cd5690-1023\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y47IiGWWHeJp2oYAY7S6b%2BoUudv6o7sGFwTS9pM6c5NA7tI1hHButn2Zx241D%2Bev90qt3kuHs%2BzG%2Fqau7k8%2FdKD2K8opD6s%2FdSgG%2FHUIKvGZ4xRd%2B6eJHH2B7qsSk27Jg20%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660dbc3ab51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4131,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4131), with no line terminators","md5":"abf4bb282c65836335fa88b6a680fb5c","sha1":"4ff37875342f9e9ab85cc6284fd5acfc06df7d18","sha256":"a41ecabfaa5a628b26a98234caa818e4d68e3edf6c48cee40b2a6f4c4fcafaba","sha512":"98a8eff66d0687b1032168ed55e3bb451fad16f1317da18768311c1058b8d8cb67fd827810298a70a831ec9d73d308d7133e2d21d022e46356d1295f8f645874","ssdeep":"48:0ncEupIbXbi5okOBRQJ8H6xJsnDpr6r75eGSqlw4Sd+uOujoKsPPF3cLR8p2o:0cEQw26a8EJWrO75ekw4klctsd85","tlshash":"0a81872774216d7322eb75ba2c9fe98014331639a8414501b50acf6c2b7e8ca7637f3e","first_seen":"2025-07-14T18:47:47.063472Z","last_seen":"2026-04-25T00:50:49.686606Z","times_seen":30168,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/uploads/2026/03/image_1774894660025.png","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/image_1774894660025.png HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 01 Apr 2026 17:31:59 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69cd568f-47e3b\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=53jC4imgBBtoxa50hI4dHKqfud54%2FPZobtKN0vYpM8EPWFFPgkOhTZTDtDX8M8kBSqcBCOB9uBP2oHaXZzEBJMiGpFQ%2F%2B970%2B%2FZxirr0d12nAH7D24oihBjhOEv9pI2Q9ac%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660dbc3bb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":294459,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"6ad352e01a8d2238ab9e4e8a02acbf97","sha1":"58adad385d329e0b0ca929214ec4b54359d53d5a","sha256":"f1d93edfb5e73b5f2b2fa270e2575eb9395af56d92bb2e937b97356434b6120d","sha512":"86457433445106904b53bbee78b48746370aa313511de4b1f6e00dc9841d7de15ef2eb1129dccd20dd2b39d4c8f6e5f82e9db17aaaeaced3445635d8fffaba05","ssdeep":"6144:SI1Cn5QFnmC91FXMI+Ix9XppiI2yWWQsNWvY:S205QFnmYXG2J+WF8vY","tlshash":"8a542353f28ae7f2ca918af8d5e2765ec6d0fb4a61ecb5cc75f2d4172221394d30114a","first_seen":"2026-04-04T15:38:48.538903Z","last_seen":"2026-04-04T15:38:48.538903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=wc-10.5.3","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=wc-10.5.3 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Apr 2026 17:32:00 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69cd5690-36b6\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BRzfqUAbIn6t1mTPZr9%2FL3DWdqOovCjumvzWCkoFNEColpn%2FcwFSL8%2Brq852qXqJEZJq9%2FN6mMH9eLEsvZszMIlrMWvbmme%2BukTzamHctgwZwrQVj2cKNLSifTUlapADLRA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660dbc43b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14006,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (10312)","md5":"e2d671c403c7e2bd09b3b298c748d0db","sha1":"d9e1884d4627704102a1e6c19905ca2f00431c6a","sha256":"45173f1550e57be245f3ed3b0f6fde7962e27901d5a04adf9342e546500bed49","sha512":"cee28ff90c4e108f2afbbf51772f294ed1a5b5d179b3c7dec59ee0781f6cb2e3f70a79a8f88e3b6587507c0aea6b2f483dd0d1f1ca753b8ed6670b9ef15c9770","ssdeep":"96:JctcybwYP5GKHxNBQUEr2xT8l/0JYNFvyadAAPOO+yH1:eF7RGKRNQr2Ges","tlshash":"fd5266b1e7b52cf8493989649e70b6d2b5f93080cbd325d9d04ae580719f4aa0bd27cf","first_seen":"2025-09-22T15:19:04.124916Z","last_seen":"2026-04-25T01:36:49.874838Z","times_seen":60330,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f3af.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:13.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 19:44:39 GMT","end":"Sun, 24 May 2026 19:44:38 GMT"},"fingerprint":{"sha1":"56:DE:8F:AC:F7:7D:09:E2:76:F8:9A:D7:5D:9D:16:D0:8A:77:E9:1B","sha256":"F4:65:F9:07:07:7E:3C:D6:2E:1F:02:76:FC:58:8D:E2:FE:E1:4B:A5:5A:D5:4C:AE:78:56:62:41:A7:28:80:CC"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f3af.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 15:38:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:22:03 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 17\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1029,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"90eb8387713284f854d84ae86a5ff811","sha1":"61b30d8748b949a6feeb744f34b454c21e972f43","sha256":"e6c11ef16f86c3c06a36ce4e3af7bd3ec27b7a8f1791f510b0e7a1638edbfca2","sha512":"c83efe74ecfd341c188248756fc31c417aff228cc93ae66ca4316c996ad136b341b2caac893c3f86487e6ed48d86179d663b516584e2f708bdbf0635b4cca269","ssdeep":"","tlshash":"6711a2d6123ce0ca4d8bceac9d5bbc51208950ef472e5bc431d459049c6a6df7662e34","first_seen":"2023-05-23T23:57:14Z","last_seen":"2026-04-24T23:08:25.007425Z","times_seen":1205,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":47,"dns":4,"connect":10,"send":0,"wait":8,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 01 Apr 2026 17:31:58 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69cd568e-14c2\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uZbteAJ%2BQIFf5%2FmMl16YE0B5gZ8%2FNuyraaTZVN%2BsKrVyKXsrx5o8peFP05t45j%2FZoKFG2F8sH3JuT04c1uf3YfKsyI3uybxaZHagJD3HRB%2FJLDDhEwpmItBIx8cAMpIuDJA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660dbc42b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-04-25T01:55:28.43252Z","times_seen":131852,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 01 Apr 2026 17:31:59 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69cd568f-15601\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gmfqWu%2Frdibp%2Fk%2BYk1Cw7L1bN9DDRoGH1ogNHYsiWF3XvuSAk5vi9KjiyYYjJGdxK7O3qa1pnQd3aAadpkiK0EkmwABqfuSmyz7w1YIO4PwqweDGVvPMv8nA5PD89tX94Ts%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660dac34b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-25T01:55:28.345592Z","times_seen":739093,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/uploads/2026/03/image_1774894663338-300x171.jpg","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/image_1774894663338-300x171.jpg HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 01 Apr 2026 17:31:59 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69cd568f-23fb\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eBHeUoDZT6zUAKkTzifOt%2F0pANOlhk7aoJRZ1D2sp8fDuzDXwgDPfe1ft3Uk7L%2BE4KTyrGn6WIe%2B2DROzB%2F6wOo0%2BlVT9ETRH179kNs%2Bu6ohzclCfAlf3SpdxzA1rEOBxtM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660dbc3fb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9211,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x171, components 3","md5":"86fd8dab3d26c90d1e3063055f73d3cf","sha1":"cc574161670cd3357bd5d86652bf41ef20855123","sha256":"9f4eb1ca706b1c17bf4d6e8ac4ed3d412b01753c76c2dba4b4c40383e10eadce","sha512":"c4527f307f2bd000382ca71be17dd510649b4a3fe3f4e51a245c1607ac9fad502347b14cda21dae8c44d4560edf05a950f23561498307fe8f393151e96abab87","ssdeep":"192:MQwcS/VDGpV5qp79SkZYiLtZgxUztSTAIgbh3dx54IIxOPnj:AsV5ipSkZXLtZeT4NTEAj","tlshash":"d712a066770242eaef06cc3676f30f59d23767123127b06e6072f9d6a5a07dc06e7444","first_seen":"2026-04-04T15:38:48.548666Z","last_seen":"2026-04-04T15:38:48.548666Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=10.5.3","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=10.5.3 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Apr 2026 17:32:00 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69cd5690-15266\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=muvcRbTAZ5whPAIiSNw4IxfHMX9HxDKNMahUaxjYxuCQmyo2VpiD8mQTKxgqdQKJEP8PWYUOjHimix6kT6ome%2FXxIchByonYNjCvS6VEyHGfl98qhw9e%2Fe10oxF%2FERqvDu8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660d9c28b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86630,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"1eb298bdcbd06f8af3819a6a5450e17e","sha1":"dfef64b849e42fc4216561e4f45928cf2e885481","sha256":"28cc0f067f1ddef58cb4a8c849913f7b10bb663359371a5fdfe561f4c157b768","sha512":"6261509b44e245bc960195f79f6a50cc4ef7097b5de780267ddd1cba62b77dacd12f2df293b831c972f1721e172ee6269a6a059cd97c4628ac4ca379c8eba534","ssdeep":"768:uoJlQ6I5wzYtZcRIXQ6KmdbqmMk8iqjb/jOixEVUc:umQt5wzYtbQ6/dbqmMkuy","tlshash":"5683409b95b42d787beaf6958c84b1c53e10d075b2c01075ede50f9c81caaeb351af0e","first_seen":"2026-01-11T18:13:56.662365Z","last_seen":"2026-04-24T22:43:18.635978Z","times_seen":2221,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/themes/custom-theme/assets/css/utilities.css?ver=1.0.0","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/themes/custom-theme/assets/css/utilities.css?ver=1.0.0 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Apr 2026 17:32:01 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69cd5691-352a\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vUugwQ1ljHH46y3vky4DCtFydO4khNFaHia0NpN%2BZ8J8o32DiEnA6cpmOnRS5uutRfS%2BuJ0625Vt4DZpNzJyY6CTOsRqKP%2Bykh2KGZF8ngmCFtgJE8YJvf23gs4GV2wZ12Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660d9c29b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13610,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"54c00f59b5c2fc0ad005f01fa3508110","sha1":"bd2b224b0aee77114a4cb8f3100709caa051e603","sha256":"48386dc94576f82db8fc9d702d7b57457e046fb89cd03af40ce651d6ffd047ca","sha512":"c92a69fe735aa96895e570a001a0868e1dee5fe6b597eecf8a5096df1f3df83ff3c20770aa8e6ec817754d4190b83e64e70c7b595397446da7cc663c7ca49980","ssdeep":"192:IsCj32dvaebX+KgzoS5e5VcIEPc9SsoXQDs4MkfSqGzfutPVz8SGiV:KaZrAe5VcIEPspYVnbutPig","tlshash":"165296573a12210cb03f5129f093a75443298501f61ffcfe7696984ad6981fc3677bab","first_seen":"2026-02-27T19:47:30.007312Z","last_seen":"2026-04-13T06:40:51.145591Z","times_seen":24,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/uploads/elementor/css/post-5.css?ver=1775064733","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-5.css?ver=1775064733 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Apr 2026 17:32:13 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69cd569d-490\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mm%2BwrC9pryQn8%2BI5zg6NI901p4Ck3%2BSE7mKUmlI8HZSPz7X%2BmP0ER9xlH9RkZLqqZriCkpGIr3sF3Es7ZoXW3K8%2FjnI7QN8CAcqsTe5KC6qqkDuWeTh%2FR%2FIT6T81LvFNeiU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660dac2fb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1168,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1168), with no line terminators","md5":"d894eda9099c06a0e3a9ad38a8850a56","sha1":"3a5b3cb8bc87bd83ac5be01e9b5692c09377c330","sha256":"9a22810feef8b6a1068ec532431f1cb7333179289962363718ed7382668368a1","sha512":"a3435a76447a5e2d5b0ffab0cfe78af6478b51a2c8e61bdef1a036bfffbbc4d90075714b59898a7bd159aa16ed883f81532ab50b42837767a253713064de3a4f","ssdeep":"","tlshash":"862125457a23d432e17b093f91c3b02c112cd46fa25f8adff41c9649f9bea462228647","first_seen":"2025-06-17T01:58:04.925731Z","last_seen":"2026-04-20T02:00:39.472874Z","times_seen":324,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.10.5.3","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.10.5.3 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 01 Apr 2026 17:32:00 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69cd5690-25a4\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JDgdi5B6tZtSLz%2BNr53cPvS09aNniyWHrhGY6I8w4C%2BSho6uyXHpfJXXll2iPy5IRp%2B3Iu4wH8ID1PI0GtTtx%2F%2BxtJTtV03AEumnaK2qvl9YQHG0MnyyX1QCb3%2FOUQMEfPE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660dbc36b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9636,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9242)","md5":"ef56117d1bb5cc41aa6bd127a49c7640","sha1":"b9c2ed774177fc0fceba5cb58113024b23fe4fb7","sha256":"d151f8c0b2659cfb63704d68654ad8d9437ae9da4410536f63ddec21689a0620","sha512":"0ec9039dbb47470815ad8bf58fd206672717a146b3a99bcb12444687e8489698e06664e6c6cc38a5d2954fa919e5a6c3bc57e44f3be2655f92b801bac43ec763","ssdeep":"192:x9cCxjlRE8iST7TMcPvedRUtV7uLEUfHqo/gH5P5AxTov7fG3ex2NrMP:x9RjlRE8iSf4cPmgtV7uoOKIgxaxTovp","tlshash":"9f12e96831f3215780b7b1907cf7e38f73b2553c648798d1d0acd4692aacd7a2622f09","first_seen":"2023-08-09T05:33:46Z","last_seen":"2026-04-25T01:54:33.858565Z","times_seen":128867,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=10.5.3","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=10.5.3 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 01 Apr 2026 17:32:00 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69cd5690-10fe\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CIdfw4Ie%2B0PH2dDzROVsRFrRkwYGie%2BnISxRT%2FSdNbAw7IZwazhKcIoCky%2FHUt1uQVPcgmf7lUatEBqbRmU7HtRh1d6jh1aHN7tfWDrWg7ewelTGPJZtSDE5I3Z7kHrqjQs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660dbc37b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4350,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4350), with no line terminators","md5":"d6843fa9b6dfd1cae807f2c375830d09","sha1":"cc378797cb063f3981907698a6cc01e539eca654","sha256":"fca8dd4ee9c93f33dc3149e2c78aec8a28c54036faaf19c7b0ac9ca32293c070","sha512":"c9eb3dd5c84945d185f5ccccd954ef9546488e4979f9b3af5de54e107b2d0f8959e6c54509eee41f5ab67eb28488476e9a7751cd1a3fe671b618316cf944f3f0","ssdeep":"96:8mJQb8DHwbTtwqfDZa27MXi/NCa2St01Zyw6VfQ0GfV5VP:FKwWpwQFa2N/NCa2St01Zyw6VY9fV5VP","tlshash":"119173ceb121e4b693a22d82602fda850533383ff08694f8248aa6e51f359456577f3f","first_seen":"2025-11-27T20:47:57.43318Z","last_seen":"2026-04-25T00:50:49.627166Z","times_seen":19836,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/uploads/2026/03/image_1774894661661-300x171.jpg","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/image_1774894661661-300x171.jpg HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 01 Apr 2026 17:31:59 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69cd568f-1c1d\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cc%2FAL%2Bfm2vy1rrFn1ULx8rpFXwbPFTqHjwaYhy5N6hpU8kb9uHeeKnnQ8hjV2xvZtmq0c9X3b8l5S6q5hNQB%2BVuz6R0SEHxmU%2BMbLGlosvkLuVNc9xYQmWVbInBJBzh21P0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660dbc41b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7197,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x171, components 3","md5":"70490c07ef1de2a3f6d2429fe6bbe44a","sha1":"51671ae41c6071c03164d1fc3c54b5a27670f77d","sha256":"513817a1d338152087d8ec4ca298f0f5bd1111b2a2af9e6937208d2ee8df0c27","sha512":"5b53368c7e0f03054c5799471b50285770c1ad7259540ebff297f373c45e4440876265793983572743b37033d71c7c85778b43d10435de8f7a8c5afd6e270b1c","ssdeep":"192:MhgeuUk9zg+yEkzBKhCfnMqYEHAlZ99G7SAqnITx6UUF:ogZg+EBcCUc+ZJY69","tlshash":"dde19f39430d6389f9654cfa2cb9d0a9a595fa404f508a903c7fc5e0bdd6ae431a0bce","first_seen":"2026-04-04T15:38:48.558734Z","last_seen":"2026-04-04T15:38:48.558734Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.35.6","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.35.6 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 01 Apr 2026 17:32:00 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69cd5690-c547\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TUGCKO%2FsD8oleshsVvld%2FadV6Bzzy4HTCSZErpPOrAtAuoljbNctyxGOhUNplOkwqffFQOErXTrVG1mQD9202CjmWHVVEqLHPq9lCh4kKUabX90IXRS8Y0QfG4WdgYAmmaM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660ddc4bb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50503,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50502), with no line terminators","md5":"73c07e9630db2adbba0c6bc0bf568719","sha1":"dbeb1065ce0ea1fc9fa6b9df9e5e1700a8dee09e","sha256":"f4bdadf362076967230901fdfc69c8df84957f6615dec226b99ad2abb64c2c76","sha512":"d48774149b65604aeee68cf2936bfe5c84714bab61a46a190952b595ee79ce8aa2c0549a3755768b3a3615c2b6abe0cfdc69c398a77296b8ceebc69bfea8f8dd","ssdeep":"1536:yuyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:C+uhIAu","tlshash":"cf33d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","first_seen":"2026-01-29T11:04:52.803648Z","last_seen":"2026-04-25T00:54:28.752702Z","times_seen":22836,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f3c6.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:13.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 19:44:39 GMT","end":"Sun, 24 May 2026 19:44:38 GMT"},"fingerprint":{"sha1":"56:DE:8F:AC:F7:7D:09:E2:76:F8:9A:D7:5D:9D:16:D0:8A:77:E9:1B","sha256":"F4:65:F9:07:07:7E:3C:D6:2E:1F:02:76:FC:58:8D:E2:FE:E1:4B:A5:5A:D5:4C:AE:78:56:62:41:A7:28:80:CC"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f3c6.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 15:38:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:26:00 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 17\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1237,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a00e865c445d42dfb9f64bedfab8cf8","sha1":"c3e6f7072f6ea090ef6883110b23ea426266a8d7","sha256":"7510cc92013c2cd6c8271e3435539d9870044945e4a50151a50b18e61ee4ba83","sha512":"734d9218fd61a9e4ef7160bab9860b35fbbfa6be2c37e79c70ffc0006e5c4134fb64a41e765fe91bf5db2b2b282e9eb0b337ec07c9b0c39755780804afd8317c","ssdeep":"","tlshash":"8c2165e8673db28841d726695fe5db54405e287161305c82f17dde8ce381eca3e0be01","first_seen":"2023-05-11T08:21:41Z","last_seen":"2026-04-25T01:07:36.099905Z","times_seen":1122,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:14.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://convregepay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 02 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 198742\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-25T01:53:16.793838Z","times_seen":154142,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/uploads/elementor/css/post-750.css?ver=1775064733","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-750.css?ver=1775064733 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q6OuNNxPKTl6P6xKafG7JgasAVg%2FRqGXrd6BqO05NxUZuei%2F1hwNABecK3JdCHLWzk4p1kkBDfvStBEc%2FGqvDFhdKfbwOKKUwGD6RQqQFA2aPpSqdf206ErFC4ZcMwyGDyM%3D\"}]}\r\nlast-modified: Wed, 01 Apr 2026 17:32:13 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69cd569d-3ed\"\r\ncf-ray: 9e71660dac31b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1005,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1005), with no line terminators","md5":"d334132380b6a16880a229543ed0ae60","sha1":"2b074922964efff597c7fc137dedfde79b31c6b0","sha256":"052b7c768897a71663edd85e9e35e74e6c3cd77c718e32844f910adb4e630b0b","sha512":"6ae4366a8e9579b8c50eb5a1ff922a5f5f40c7bbba715cd97489c0f1d12c968119eef43a462afadd2f68173fe98021ae11f421183e9cad254dc27aa2196a6c8b","ssdeep":"","tlshash":"1d115b9d3e535850222f65a7c80391cca27019fa983c23d6e87125637571df3b3dc94a","first_seen":"2026-04-04T15:38:48.564813Z","last_seen":"2026-04-04T15:38:48.564813Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 01 Apr 2026 17:31:59 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69cd568f-3509\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OYq7q5aqeLlGEzimqmOSFgSW64uh%2BLdi7Ymx4fNTiAM%2F4krPcRY4MMozwzA3AhwVXfxSz5zZ20La1S%2FMyvDZg6p%2FBiXToU3eNIVQPSxVRhfA2zWPhQBqaUEg1kp24PuU1w0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660dac35b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-25T01:54:39.284848Z","times_seen":686297,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/uploads/2026/03/image_1774894660025-100x100.png","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:13.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/image_1774894660025-100x100.png HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-04-04%2015%3A38%3A13%7C%7C%7Cep%3Dhttps%3A%2F%2Fconvregepay.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-04-04%2015%3A38%3A13%7C%7C%7Cep%3Dhttps%3A%2F%2Fconvregepay.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fconvregepay.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 01 Apr 2026 17:31:59 GMT\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\netag: W/\"69cd568f-15c4\"\r\nexpires: Sat, 11 Apr 2026 15:38:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B8yxCO8Rbun8Ji8wL%2BCujhcS%2B8jEIIGE9%2BpRUNd0UxNoLAY%2B6n0ATNUoLB9TYCILCq%2FEvnsgtj9HLNM7b3eQDojdxWOxyWOa8IBgTrKtG5kcX1eBnvW663zwX3TfywEV3b0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71661a1ce1b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5572,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced","md5":"66f64c503cd77bd568007ed918fe2b5b","sha1":"68e9facbba4c2a90f58de2c2c363a3cb62adcecf","sha256":"531944869588fefde716cc253dadc158b99af1b6c8a3a0a7362798b904e27893","sha512":"1ee4800f9c563a4115bc19ed63f183bfc0043debda46c95c67989a4617233446873ca2621af8802d1f052da41225eebd25c7e71e3735a464eae4f18b958af6d5","ssdeep":"96:t58cMijK+V9P7cpSfbq1EZ1WMAi/Z8Ampl2aKFQAJmamzU0CLVWRbx0O1FoTB6gV:AMjK6WV1NDi/Zmpl2aQEZwAvPQBYU","tlshash":"3ab19ecbe25088b5bce98b2768cd7c8750965beb582b901c735c94324f18359678cfbb","first_seen":"2026-04-04T15:38:48.567712Z","last_seen":"2026-04-04T15:38:48.567712Z","times_seen":1,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.10.5.3","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.10.5.3 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 01 Apr 2026 17:32:00 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69cd5690-6b8\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VYoQhv4yy3l7eh1hVH6ZCSJJ9ZrRqzfW%2BDZvKHn1YanWRs3QO3gHYVB789dw9IcdAL0Ls83zXEKExPqnoPtWpihCLFHUZ2%2FguvvjxA1F%2BKZZgJqx4XxgVlIcEKmz9lL5s0E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660dbc38b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1720,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1690)","md5":"691a1e43450e7cda541a3bd6f10fd5db","sha1":"d3a78cb77ccec297c9d32fee99a2a4761f604a8c","sha256":"8b083f64f2e9e8ac445c730dfce7013cc6449ce155fd1c2f42b60edba4ecb4b1","sha512":"a32ebe942e704da64381e392ffc20ed4f9d8daf71227a06f2dc0ca5c037675ab67e5b5a5ddf9bcb77b1872308daa780cc0e6ec5a2469bcd51444ece4f3b3de0d","ssdeep":"","tlshash":"c031b6d93095a8da06071490463f1207f2f91e27eecd98906264e8f50ab077a01ebf6b","first_seen":"2024-03-20T13:06:17Z","last_seen":"2026-04-25T01:54:33.813551Z","times_seen":109331,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 04 Apr 2026 15:38:11 GMT\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15162,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cd46912baf19b9fe32c8e6a6320bcaf9","sha1":"08ee007e9656ed41ffbabdb06701a3895bfa0094","sha256":"92a04c9ec1ae41b88f1eda4e7c4d74ffea87294a25c63c0fcdd7472dd82f1035","sha512":"33912fabd74bd7afee0c49ddd4b89161dfc7939fabb2ac6a75b9a5b4fd3e745fcdb6a4dda2ba6ddef3c9177f4ac972ff43239bc2f1af456c7530e7b981510b9e","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kc:8KYXuM0p2+g7r","tlshash":"3f628892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T14:17:01.635764Z","last_seen":"2026-04-25T01:53:16.79056Z","times_seen":2880,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":147,"dns":2,"connect":9,"send":0,"wait":33,"receive":0,"ssl":142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 04 Apr 2026 15:38:11 GMT\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100764,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"9e6b9ba92c3c07c25c3a64a82c98afc3","sha1":"3ddff674c5f9cd149de491cf5df81c1074eaf397","sha256":"3d675aa2a0daa5e5b0080f14f3335f2d7a15275badcc418deba1e740a5ea55ab","sha512":"097289d7ac1a663cb14fa54e87356c82d88f82ae9574fa4cdd23333e1a98d3e9241d11fbb3d3cf34b52bfa7aac3d625d2bccefeb40fae26970f0e20d0b4751ab","ssdeep":"768:yDdD9DADNDgBDUKD7DnDdAgTQgUUhaWWHncXgLUahdPuOJ+gaULUIIV1ClghUULD:GZQDSVUvWtALyl83uRf","tlshash":"e2a30e91041b5440ab834ce223cebf35fe1f92507141d0b9abfc9b6baddbca6526835c","first_seen":"2026-02-19T22:36:20.76028Z","last_seen":"2026-04-25T00:54:09.435522Z","times_seen":4422,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":134,"dns":5,"connect":22,"send":0,"wait":33,"receive":0,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f4bc.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:13.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 19:44:39 GMT","end":"Sun, 24 May 2026 19:44:38 GMT"},"fingerprint":{"sha1":"56:DE:8F:AC:F7:7D:09:E2:76:F8:9A:D7:5D:9D:16:D0:8A:77:E9:1B","sha256":"F4:65:F9:07:07:7E:3C:D6:2E:1F:02:76:FC:58:8D:E2:FE:E1:4B:A5:5A:D5:4C:AE:78:56:62:41:A7:28:80:CC"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f4bc.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 15:38:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:21:38 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 17\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":651,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7d4bf2e92b2587e47b09997dbc654823","sha1":"08f6139e131b9a0be5342ff255e072346ce9ef7b","sha256":"b7244d06499e782eb58335018c80c0f5dca9454d7dab0c9b85e3ced8a2ec1ab9","sha512":"53f07154534de82deaa3a6ae1cbd9ba459dbcb9560c3ec709f5ca4fd8ce166bcd529f770067ab4f7ad3ecbbc977bf0b0627b735e922860a530f6233d2e6ac1c1","ssdeep":"","tlshash":"96f08fd4e638d4c24506e99c3ecd37c6140d27363215509bf10fbb28e5ca5fa3a86a24","first_seen":"2023-05-23T14:24:05Z","last_seen":"2026-04-24T22:50:39.195189Z","times_seen":582,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":43,"dns":1,"connect":8,"send":0,"wait":8,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=10.5.3","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=10.5.3 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Apr 2026 17:32:00 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69cd5690-4d0f\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z5iyzZLbycs570qhC9DwMTwFUQRAPTm7jvaWQkjRGuQ0JrbcAo4ihN15mSisIDxZg6evSrMLQQ%2BZr%2BjV9ircR5Rsu%2F6ZZajBA27YPShcfWocpHy8cGJlKazV%2FcZ3%2BOngW1w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660d9c27b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19727,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19727), with no line terminators","md5":"e98f5279cacaef826050eb2595082e77","sha1":"a8544ea38d3f635cdf937ff02c6766801a689431","sha256":"88b9926f308c1b694f61a23f1c80f2ef3a9980f98084bfc0f273b7049611db2b","sha512":"ca096c013f2913a9cdcafde5becc54e6aea2958398caf72c6370d5676a99b3c1ecb200b901618c2506bd6885ddc411a57d4a0904db1197a56ad62ff2ec4abe10","ssdeep":"384:c3sXkEzOm9Oq/tThyIeGe0cGAyBMKOgSpSgsVY8s:mGAyGZh","tlshash":"669275e7c4381c2877edb5ad7c4031e53c26d53cbb8511b8a8956b1d82ca6d73ab170e","first_seen":"2025-04-10T05:48:53.592778Z","last_seen":"2026-04-25T00:31:44.711923Z","times_seen":35596,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/themes/custom-theme/assets/css/themes.css?ver=1.0.0","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/themes/custom-theme/assets/css/themes.css?ver=1.0.0 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Apr 2026 17:32:01 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69cd5691-7994\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WCaZ173iVnCCmn%2BzeVCkwKeq51yKttdUGZKGZGbs96p%2BHXcAW51ZmMQB2L0Z1blK08%2BdSx1KDKzoO%2BEQ7GeRCXtJ1xVvFQoGVDLSwkXdMvTsW%2F1SBwWJvqy1Brer9qpeQrU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660d9c2ab51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31124,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"49ba76e31367407c47a3178dfd3744e1","sha1":"7bc10e79837cc443cb491a681676af73b649305b","sha256":"4b3d3998f431210ff2f72f3a7bf72903c9d874e42aa1d51323da17abbe3aa34f","sha512":"c68be13943140304427ba8a86000738c1b530e1cdca9947a20b8dc9183868ed4600ed2bf2c2117867a2aac419486fe073f1d3d08e5c26700c2bd3898f9549588","ssdeep":"768:9IgFIcoEqzgOhQ/jDLhYRxc1EAKJUUxC/:inkOc3GGSLhx0","tlshash":"f4e20f443241b1ad2d3a48affb19bd19b7b06019c7156bdffcd602215a8a3bc93f1729","first_seen":"2026-02-27T19:47:30.008195Z","last_seen":"2026-04-13T06:40:51.218338Z","times_seen":24,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 01 Apr 2026 17:31:59 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69cd568f-348c\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c4oA9GayjpIjHc%2BVJaY8Oc66GRXbHK7wCCptiy7YO0Hazfpmw5gHk3Hdal7K0JPd%2Fi9jA8D8UjJjbc2LTWTyIp6GEr%2BA2oKcCradhk5wJX2%2FvHGmW28qj4lC6YgcyjD6Bvw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660dcc45b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13452,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-04-25T01:54:39.218099Z","times_seen":168689,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.35.6","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.35.6 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 01 Apr 2026 17:32:01 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69cd5691-165a\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NreIbn5lEXC9kzvnGPV9o8rczkpOxNPhcWKHM2KPwEPI%2FywPYPoQGo54h3FsejbQ5IcofwU371bEjof2dRmae2fdNxKRk3dnzyT5z%2FRr8ctPRmJSBsz02SzjjjBgcXScUFs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660ddc4cb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5722,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5722), with no line terminators","md5":"9cd57e8cc70f6a9fc319c4c45fef6134","sha1":"883fa4ed0f0e114f04e7af8a8ad3a0964156c690","sha256":"fd9ae84b4655a6ff4bc18628d0dedaa835d10b5d6ea48455d73523c8b34e34f6","sha512":"57d47442aa77d546eb854717c1c9c30c1197f3aba0948709dd1ad3528c50d17d0b61e7b791fecfeff9e4d7c2ceeb370b3cc7fdd6eea563ce3db609c7ec2d896f","ssdeep":"96:+6sN0Z9Z4JfrjqyWiNDy9l8OWZp5Rm4leNzwVeLyVU2j2KBKGarNcl8/2:JsNGyrjiiNW65RmH0IW9v7G/2","tlshash":"f7c172941a54fc2b21e139d8e00ba735252ec0373c1af981fa32eced54e4fd183aa531","first_seen":"2026-03-03T15:30:23.231417Z","last_seen":"2026-04-25T00:58:58.164774Z","times_seen":18934,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f680.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:13.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 19:44:39 GMT","end":"Sun, 24 May 2026 19:44:38 GMT"},"fingerprint":{"sha1":"56:DE:8F:AC:F7:7D:09:E2:76:F8:9A:D7:5D:9D:16:D0:8A:77:E9:1B","sha256":"F4:65:F9:07:07:7E:3C:D6:2E:1F:02:76:FC:58:8D:E2:FE:E1:4B:A5:5A:D5:4C:AE:78:56:62:41:A7:28:80:CC"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f680.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 15:38:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:29:30 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 17\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":677,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"748ff0e7b2f1f22adecad8463de25945","sha1":"aa0d4e6225e9c5ecf65488ac43b9484226a798e8","sha256":"3892ef66f49ce43d49c8719e9277da0e0e821059f0cc239a549f6629cc12b3cf","sha512":"46ab91e8dd016495b59beab5bd52adab9bda22212d86eed166f3e788b5d6efa21b0b84c1689611811f62121d04cfe0955524b3a22bd60fb002927b026631f9bd","ssdeep":"","tlshash":"7a01f4d514bcb1a58b02d3b89f787dc0100a727f729b048190c484a45187adfaa45820","first_seen":"2023-04-16T15:02:53Z","last_seen":"2026-04-24T23:50:14.823151Z","times_seen":2566,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":42,"dns":1,"connect":9,"send":0,"wait":8,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/2728.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:13.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 19:44:39 GMT","end":"Sun, 24 May 2026 19:44:38 GMT"},"fingerprint":{"sha1":"56:DE:8F:AC:F7:7D:09:E2:76:F8:9A:D7:5D:9D:16:D0:8A:77:E9:1B","sha256":"F4:65:F9:07:07:7E:3C:D6:2E:1F:02:76:FC:58:8D:E2:FE:E1:4B:A5:5A:D5:4C:AE:78:56:62:41:A7:28:80:CC"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/2728.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 15:38:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:25:34 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 17\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1052,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e820a306c732b90515989dada9995a97","sha1":"43a4b5ec825c9abfd31c6c0a63fa205087398b3b","sha256":"9271962e9fc8257ce9e008bde83ac1408a2f196db6142548769f290873b70b93","sha512":"9f9c22758bc734829dab1920751e39502c75b8f4f52d6031480468857742f48fc69eead7f86b675c9491781f0e6c6344120b0f6cc7347daa31405c3754b55869","ssdeep":"","tlshash":"dc118cc73320f35985e9add94b6820b0e4c5116e86b2dc8787bfd340090699afec8dd8","first_seen":"2023-04-07T23:46:38Z","last_seen":"2026-04-25T01:01:52.305757Z","times_seen":5112,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":47,"dns":4,"connect":10,"send":0,"wait":8,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/uploads/2026/03/image_1774894660025-300x300.png","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:13.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/image_1774894660025-300x300.png HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-04-04%2015%3A38%3A13%7C%7C%7Cep%3Dhttps%3A%2F%2Fconvregepay.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-04-04%2015%3A38%3A13%7C%7C%7Cep%3Dhttps%3A%2F%2Fconvregepay.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fconvregepay.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 01 Apr 2026 17:31:59 GMT\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\netag: W/\"69cd568f-71bc\"\r\nexpires: Sat, 11 Apr 2026 15:38:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KOGbk1QRwdkSJ6esRwKkHuq1IhrxF3g6G1rAj%2FsAe8WYfm6dcdHVu46w51BBuJoK%2FcLCMkxlhLgVVV9B4VFmLHes3XqQK%2FqQWqQt1BCVrt0JkNt20Lh%2Fktdl4IU%2FtjyOZ%2BY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71661a1ce0b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29116,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"0121063a3eedad7142759a5c742b27c9","sha1":"4f0f640db6e8ac9bc7fd2e2ff025f7a9b842b75a","sha256":"2e3f11ede356ec9642729784ab2ce6f58382cd1b6c144da01d0afd5850823d00","sha512":"8287b5cb63c856cb562a5e92963df6068f4f2b989d5e441053949bcb29739e571c8dcdfc60cd148a342804506ad818861ee9855e1840e28bbb3736778a6e7e1c","ssdeep":"768:mqGRa0ozShrgaXiMVUaav2wjlk7Q3E2uMm7OXduMoF4F:mEg3av2wjlujgXdro2","tlshash":"c4d2f26676760dcf64a8d41e49af855c9431839af2f1cd4d7e0ee91c00b61b3fb2846c","first_seen":"2026-04-04T15:38:48.585743Z","last_seen":"2026-04-04T15:38:48.585743Z","times_seen":1,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:13.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-04-04%2015%3A38%3A13%7C%7C%7Cep%3Dhttps%3A%2F%2Fconvregepay.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-04-04%2015%3A38%3A13%7C%7C%7Cep%3Dhttps%3A%2F%2Fconvregepay.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fconvregepay.com%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GxKTel8i9xs6yPR24OLIQklYoJRGa6csXVpHRS76GMMY%2F0gEcsTLcdoshycQWT7UDWK7qCpff8vaqmvWcAKyb6w%2BTPU3l5QkFw9bxVf4lGmRlCorChFv29f1B7bY4j3WC%2FA%3D\"}]}\r\nlast-modified: Wed, 01 Apr 2026 17:32:00 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 15:38:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69cd5690-1c1\"\r\ncf-ray: 9e71661bccf4b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":449,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (449), with no line terminators","md5":"9dd361b7473936c5c8f5bf661c323973","sha1":"5c8f2bcac20956a31c9cff999d50b99f9ee8f9fd","sha256":"55922883b583583787dd3e36a6ee97b5bedc12eec38a24b6bd271d53b8ebf1c2","sha512":"4181a000ecc679d08f6cad5ddac0283744c6dcb07822a19d2552105e4a9191f1baa4a1590975a71325c56714a37084f8122afe463170ce54b5a56d1a1c7780c4","ssdeep":"","tlshash":"a4f05c7a70d278ff200b44520a97105de6a81cf5012961417fbd44382a75ea4a23139f","first_seen":"2025-06-30T23:09:48.860419Z","last_seen":"2026-04-25T00:58:26.610597Z","times_seen":58566,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T15:38:09.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003chttps://convregepay.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://convregepay.com/wp-json/wp/v2/pages/750\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://convregepay.com/\u003e; rel=shortlink\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qUdpJJDUeTAQPd%2FJHYBhUKCrr%2BrPeL9xNkWFsgVFJsOBsc%2B3ap%2B%2FHaCOcvUqDIyP%2BWLAJlJsmdCiJm38wWme9upqJZ6hKjOI7R0i67J7qEQ7yh17qXoiE5k9hjssZP4GtBI%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9e7166001f3ab503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WooCommerce:10.5.3","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"Contact Form 7:6.1.5","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Elementor:3.35.6","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":73066,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8832)","md5":"909c57898a953caa5498db68af9f9819","sha1":"56b4d2bcee6a75bf3992b98d14aa12b5fa8f64db","sha256":"d0b447c8adb29c3d24d3b9ed3720bea8884a7077eb36ccccb2f96432ce904682","sha512":"e8a58a3c88d6195771cd521f02fe88dedaa9b87faf10892b1931e97f0cb4d232839cb911a2b92717e0756d7c3d1fea9c24949aca013c611ae03a57384988d067","ssdeep":"1536:5NypD8cRkaeikVk8w1kzhceds8npGvZ9jdXMUWkvP8Vhb7/y:5omcRkFikVkf1kzhce2apGv7jdXZWkvz","tlshash":"49633a70b5f504bb359f82b9a13ab31cea94d647eb02d69af1fc11281fe2df21553608","first_seen":"2026-04-04T15:38:48.588943Z","last_seen":"2026-04-04T15:38:48.588943Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2048,"timings":{"blocked":54,"dns":40,"connect":1,"send":0,"wait":1936,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/themes/custom-theme/style.css?ver=1.0.0","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/themes/custom-theme/style.css?ver=1.0.0 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Apr 2026 17:32:01 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69cd5691-911\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XfrQ%2FJq2j8MKrThf3bWhqtOMaTX21wjbX4QWerQE5HnAhFmvvanKFRuuufAptSSQTdS5mDUa1o7r6AuzAbY4etJjLy50UxNRmSiuB95PkWY3cte%2F8nqeJEIs0qeYlixq%2FeQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660dac2eb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2321,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"91d7a3e93fe58faa3ee3eb27d4fdc290","sha1":"f48bb0304f9b13d1b40f38860a97fb4c32d6da7e","sha256":"46977cc5f7d16b15da58cfcca0b62cdbbd48a3f44ccab8d6e0216cc363def792","sha512":"e0f6829e1a5cb58173d2d9cb7239d693accd6dc81e671d247e1bb56f3f9dd2151a780b9c5bfb660152444eb872cb14bdbc988641a5a35887da3df9c2dbd57fe7","ssdeep":"","tlshash":"0841a3093673a764d0ef447bb143715eba8cc54047cf9ce0d5b8204ae9b5a8513f032b","first_seen":"2026-02-27T19:47:29.999229Z","last_seen":"2026-04-13T06:40:51.236553Z","times_seen":25,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js?ver=10.5.3","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js?ver=10.5.3 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 01 Apr 2026 17:32:00 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69cd5690-987\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xvturMTqSOuVX1M8BqFauNd1YW04wq61FKP5VSs0SQbgIqpolog5bbh6J1xxFBxeohzq1xIHyB8WEzJ3OAWMohpUtRP%2BaAFZsfgnmpqIykbLVTG7a0OkBESTOkYXoVThruk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660dcc49b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2439,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2439), with no line terminators","md5":"46a816ff38bdd095e2118365ad4c618b","sha1":"c58ae69eeea5bf2846b88a6c7cbaaa7728a2444d","sha256":"0eb862a5891526d089b727fdfa30222cca4b4d75b5835727bf57df17436256f6","sha512":"b6650185967270b09fed48ef9937d21ae45b37010aef6b6a6a4ce3efb295bd39d3734b1cce7535e126cb255b1a3b40c27dd97322f1b70ee0e1c67163e2539cf4","ssdeep":"","tlshash":"41418335b001a826c37782d997aba651b335662d760290dca19c8cb43a39c0b7972cbf","first_seen":"2026-02-05T17:32:11.552459Z","last_seen":"2026-04-25T00:56:00.920926Z","times_seen":12485,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 01 Apr 2026 17:31:59 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69cd568f-53d8\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SffPR%2BPUGFDGAKBbZBAM%2FoqL2I%2BZ8qD8x7dryak8lGWfHncfQdLL5smaKcMNuhxxZM7%2B4hLK3kfiWRcnrfNLTdSIIS5D0UT27xD2NkeMr9M%2FNjLlQYYgeGCsESMQO%2Fu38sU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660ddc4db51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-04-25T01:55:28.435284Z","times_seen":239350,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700\u0026family=Roboto:wght@300;400;500;700\u0026family=Playfair+Display:wght@400;500;600;700\u0026family=Montserrat:wght@300;400;500;600;700\u0026family=Lato:wght@300;400;700\u0026family=Poppins:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700\u0026family=Roboto:wght@300;400;500;700\u0026family=Playfair+Display:wght@400;500;600;700\u0026family=Montserrat:wght@300;400;500;600;700\u0026family=Lato:wght@300;400;700\u0026family=Poppins:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 04 Apr 2026 15:38:11 GMT\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59629,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"13b97ddd14a4f17a3f7876d9f47c5f74","sha1":"e0f0db33f41cf981e76b1798b5ecd156af4754b4","sha256":"1735b094ae272ddd04e88d82c6cd6665d6c869ac083c45b9699f9a270326db4d","sha512":"bca2ab8fdb513f99e96b04d0d34fe774cfa6da333ddc7829b44460b4d6589f3a227a157515390c9909a278613d6058391be8b98fcf43f098ffaafe0072e3624c","ssdeep":"768:4aOw/0veaHwG02xaww50pAahwI04QDS99YURRuWDyjooYhREHPM5svvYaR7AIWPP:/yll3","tlshash":"84431d91042ba400ab830cc223cf7f36ee5e61557085c1b9affd1e99acdbc66436976d","first_seen":"2026-02-27T19:47:30.006567Z","last_seen":"2026-04-13T06:40:51.215512Z","times_seen":26,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/?plugins=typography","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 09:41:26 GMT","end":"Fri, 19 Jun 2026 10:41:19 GMT"},"fingerprint":{"sha1":"1C:D9:C0:8C:4D:FA:FF:5A:2C:CC:48:EB:7B:35:CF:FA:AB:7F:C0:61","sha256":"1E:81:97:52:8B:47:37:54:3B:62:1E:0B:E5:1D:D6:F7:F2:6D:CD:F7:D3:1F:8C:0E:78:14:26:9F:B9:87:EA:5C"}}},"request":{"raw":"GET /?plugins=typography HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17?plugins=typography@0.5.16\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::l2hnw-1775316665523-4394ccb4661e\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 425\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XdZIKorc%2FrGfSBxO47gQe0U97siKHModnt9Aa0f0VpAr%2FHBemETkLwjBuCJKLRdP9hiC73DJzSaHxNKRuQuROQnP46xW1YgvfOGBRe1MRSXWUQj30tyRwk6rQ2CX5QkCsA0QsAc%3D\"}]}\r\ncf-ray: 9e71660ded318be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":499661,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T01:55:22.842851Z","times_seen":14159143,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":5,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.5","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.5 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Apr 2026 17:31:59 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69cd568f-b83\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1f7YGqrHSyXZCc7tYVWKOoTawFkxIlMmrPqQcI3KNG2l7YJH8j8ncsy33QsXkimssNZplfLoVNP%2FVUYmGqIxu0erlWXts7Lim8%2B4qsSzVh7NTiHFQestvkwgjXWIRZ6%2FG7E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660d9c26b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2947,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"64ac31699f5326cb3c76122498b76f66","sha1":"cc0a5a1741b8257001f89b331378d8aa7c30094a","sha256":"4048fd0e6c44412465449ba4f5c7272349ee1574401cec755d6b8d9c0ccc28dd","sha512":"23ad865e63544ee039221161083510346b01b8be56fa7a83540036c51dceb3f0171adf8f932cf77a457240427c0c3ccbad1f9f371e977c5b6a01e9fe316a878f","ssdeep":"","tlshash":"d0510164660028504bff92db6ea9db047b6e7481cd1faf97b0c21a7c5b782851223e5e","first_seen":"2025-06-26T12:36:15.124007Z","last_seen":"2026-04-25T01:54:39.263254Z","times_seen":109243,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/themes/custom-theme/assets/css/block-themes.css?ver=1.0.0","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/themes/custom-theme/assets/css/block-themes.css?ver=1.0.0 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Apr 2026 17:32:01 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69cd5691-8a3c\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qKZMhFqvz8MnY4mTdXZJWADKBlPi4M6cYfhvTE%2FqXwcre4IclO%2B3PEOmt0NS%2F7VXDJgavUIGH6vKPTaXRLCN1m1bg0MwVmgfsRkYlRMlEN2APoRtgLY8sLu0t9giIuNgQak%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660d9c2bb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35388,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF, CR line terminators","md5":"4310728d5869a9b6cbc4f7d062232f61","sha1":"409b8e45f1494f6afac93f6c547fd96e3afa3c08","sha256":"dbe9af9d5c7e100d404096166d1eeb20cc95e547ed122c8bd9fc1de90e4b6e27","sha512":"86129a88bb4cd63801f9e2845096bf63424b3b02d9332932121e20874619588f22504231919cbc32a7ede6366d8eba9fa37c13258e0674f864b3d9883bd251a8","ssdeep":"192:CaJw2i6QQXixZ3n0OUGnxcCxhhRIKK1BOmr7+OB1CBcMI2hvSgOs2bRo1sTLLM6e:uf+2ocYOqQilAfneJQfUouYRzt0B6j","tlshash":"f0f21f0d727ab27545339e35638d9f69776472418f22265bfd9c001a1f8a3b83a83f1d","first_seen":"2026-03-05T15:18:29.497457Z","last_seen":"2026-04-13T06:40:51.19306Z","times_seen":21,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/uploads/2026/03/image_1774894662250-300x171.jpg","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/image_1774894662250-300x171.jpg HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 01 Apr 2026 17:31:59 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69cd568f-2506\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1CFqnDfQH%2BtdgDkaGOsE1WUcoeMj9gVtboEGy55hkYCTe%2BY%2FOCZIGxsXHKTOOflVqSeWfUC56Jk02yPFy160r7BikVBDy5C20KXtrUiTIPWbxteCLWGb2NUc8W%2FaCRxUxfg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660dbc40b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9478,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x171, components 3","md5":"b15d58af333716c6239ba99bddf202d6","sha1":"b55393bd5a2d390975de725d7093c53852fd31b9","sha256":"de3edf7612c361b028ae4551c5800e723d502f8ae67fda912f92690393b7b47a","sha512":"4130b3817c6b2b8ca25282cbcdac470bfb522d4cc8e50a1983c3e2a9500ee9806e8bc05c292ee6968ab29802ff00173709780a036eb4c92708ad353b484ed6cf","ssdeep":"192:M4Cjx6mAzgYnvZU1j6sVHaRWBQV67Zcfc489rMZA22UxY/OUs9GDBNKaqa:LQu8Ynhe3P067ZcU/9IJ2rOr9WOaT","tlshash":"ce12bf53abbd45608f466ffd2262aef92a287c9404568d2af937decb06522cf4d0007c","first_seen":"2026-04-04T15:38:48.614293Z","last_seen":"2026-04-04T15:38:48.614293Z","times_seen":1,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:12.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://convregepay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 02 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 198740\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-25T01:53:16.793838Z","times_seen":154142,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":65,"dns":1,"connect":7,"send":0,"wait":11,"receive":12,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f30d.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:13.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 19:44:39 GMT","end":"Sun, 24 May 2026 19:44:38 GMT"},"fingerprint":{"sha1":"56:DE:8F:AC:F7:7D:09:E2:76:F8:9A:D7:5D:9D:16:D0:8A:77:E9:1B","sha256":"F4:65:F9:07:07:7E:3C:D6:2E:1F:02:76:FC:58:8D:E2:FE:E1:4B:A5:5A:D5:4C:AE:78:56:62:41:A7:28:80:CC"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f30d.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 15:38:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:22:03 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 17\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1156,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d274903d488a6b57e40a883809fb33c","sha1":"41440d6a845cff94f3f0096c7946fc6419354d98","sha256":"593d59f9f319875b02111ac46a9f70df2c1e0f3a5fd92810c3f5ddbb598ca62c","sha512":"940ff1bad940e7ccfa82ebd11a3335804193efe80cfa811b9820e8bc29bff1f1c8d98d3b97ff00ccc9900244a19423165e0faa5d9b56a395e751c43ae534edc5","ssdeep":"","tlshash":"d72167f89335b2c4f6aa801fbcf8609e661b829b433d8da480c56dc4c0e79c5b309c21","first_seen":"2023-05-08T15:08:59Z","last_seen":"2026-04-24T23:17:20.600348Z","times_seen":1053,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:13.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.1 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-04-04%2015%3A38%3A13%7C%7C%7Cep%3Dhttps%3A%2F%2Fconvregepay.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-04-04%2015%3A38%3A13%7C%7C%7Cep%3Dhttps%3A%2F%2Fconvregepay.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fconvregepay.com%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 01 Apr 2026 17:31:59 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69cd568f-58ea\"\r\nexpires: Sat, 11 Apr 2026 15:38:13 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zxlv8T7Vfw4W3JTJcQwhSpnMMLHbz%2B3on%2FWDXoUxj2Olqll3qLZRGEJ%2FijbhXKHrM%2B6EiHF1HhB0ZWz2aXRBW2zCqo5FBTsYSMju6TQsEKcathMkP2lsxK2ywHQwLxF4lw4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71661b8cf2b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-25T01:54:39.253814Z","times_seen":163875,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f4ca.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:13.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 19:44:39 GMT","end":"Sun, 24 May 2026 19:44:38 GMT"},"fingerprint":{"sha1":"56:DE:8F:AC:F7:7D:09:E2:76:F8:9A:D7:5D:9D:16:D0:8A:77:E9:1B","sha256":"F4:65:F9:07:07:7E:3C:D6:2E:1F:02:76:FC:58:8D:E2:FE:E1:4B:A5:5A:D5:4C:AE:78:56:62:41:A7:28:80:CC"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f4ca.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 15:38:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:22:03 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 17\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":872,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7b4003ce2786fcf382c6b1ba5ac08f24","sha1":"d9f3686ce16cb5bceccf65c77ae2ab0e274c07e7","sha256":"0d2b3df370bc26eeaba561ec30a4360b71558bd669f86fb1d1db286fe1a0ea39","sha512":"90415f2f31875a612d0384bd1651a8ec2b5debaecf7ab1d0d3cca549354dc39c52ae8b81482c1f7a58eb7d39f52eddb36849f60c31747589ba50f302b88f5a06","ssdeep":"","tlshash":"e01190e5833cf8d34809db981dcd27ef61d7726572c81899b108551cb5eeede3893405","first_seen":"2023-07-05T16:46:09Z","last_seen":"2026-04-23T20:10:54.329831Z","times_seen":805,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":48,"dns":1,"connect":8,"send":0,"wait":8,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/uploads/2026/03/image_1774894629685.jpg","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/image_1774894629685.jpg HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 01 Apr 2026 17:31:59 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69cd568f-23c94\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s7roG8qi4FXvoNfBlVDN3JPtJ3MLmmroCSQi2PBKspyolI9XX2FkqpPLfs4EuWarI%2B9UYdjy9rayFBHb6I%2FNrcJoL5Vo%2BAIguvp6NlobvpLHMhG36%2F1%2FTUY24LethFriuOo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660dbc3eb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146580,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1344x768, components 3","md5":"3f3a8c5e22baf44e29031b0ec0665554","sha1":"d59b38292cef9bf82577fa15a260493c0b443ffc","sha256":"50cbd8941fdec20a1f0ee9399d071e109d60a57dd8c5ce8d4aff040f97815378","sha512":"550514110811bcedda881d23d30b95689ab5156a7c8978a51e0606c5ab2e0da979f5cc0e4f5e8521cfb96729135714941b605c7da9fcebe977fc38d8ca77aedf","ssdeep":"3072:lzHEqenMrpxN24KTB5RaRhi0ix2DglSdvbwzavIAekBMns1GA:1HKMJ9KTL2G2DgsvbwCIPkys0A","tlshash":"d7e3132dce3877e9f18a6bc24564b9b04e4702de4448ffe4f12f0df2a805367699a364","first_seen":"2026-04-04T15:38:48.618172Z","last_seen":"2026-04-04T15:38:48.618172Z","times_seen":1,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 01 Apr 2026 17:31:58 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69cd568e-161d\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=79bxdCPn2hzVd9GkECWt%2Fy6y2tW%2FKE9ZEb8uAOUOYVTkTpQIUP2hS1PST7n5GoT5liPMjM%2Fp%2Bis%2FAF0HAVTri9V%2BHaPQRm1fT4DoFWQY7PBAKKzFIZ6C7HcBLjonWIwlZj0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660dbc44b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-04-25T01:55:28.362136Z","times_seen":133422,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.5","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.5 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 01 Apr 2026 17:31:59 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69cd568f-30e0\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pX0HICBWLphbatUTyySCHgcfvR5PE1eYbDXx3h1Rv%2FIeDSopVd7cG26UV8nQIAx0myY1%2FT6Vx5ugsvHvsyBunc8kbcWZYk0Vg2yTxG2mpZeE9uWQM66VVXrZ0wtxtzPJCDE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660dcc46b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12512,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-04-25T01:54:39.216458Z","times_seen":162164,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=10.5.3","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=10.5.3 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Apr 2026 17:32:00 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69cd5690-1d67\"\r\nexpires: Sat, 11 Apr 2026 15:38:12 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LHmzpwIuR0vqHYHhmWbRGDjdNjpWZi3svmKqrKib6kz3fSsJdxl3q625PvPNPbrO%2FQk5zzpq8mwEMhPzVnusFkW9fEULmJW6omp8aRQ71ou4IECeC%2FtTN8S8%2BzCfnO3ZKs4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e7166109c6db51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7527,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7527), with no line terminators","md5":"59d266c0ea580aae1113acb3761f7ad5","sha1":"73c56509ceda1b1047096bae2cab820063047833","sha256":"8de5b2ae100f00d7a4e18f42cb12e8b5562d387f6b5c0ed09332cd5cec389ac0","sha512":"e24e206f12b35d20ba6e84a63f4855baee00a47448e0e106bb6565dca151d758388c65e0fea651fbacbda985efaabfb86756a24eb343e1a1023b17ca20a4fed3","ssdeep":"192:mjHXN5HjRHJNnHKDHJXHasHyBj8nHBH8bNbHlUqrmni4ElJK6XKUlK5859lP5IQl:mTdtjVTHKzJXawyBEleb8apGAHNJ","tlshash":"3ef114a3aa117e7537dee4847c0735e97c2ae038bf04193558990b0cc7da9da61a2f1e","first_seen":"2025-02-26T09:02:49.789528Z","last_seen":"2026-04-25T00:31:44.625432Z","times_seen":37760,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:14.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://convregepay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 02 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 198742\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-25T01:53:16.793838Z","times_seen":154142,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/themes/custom-theme/assets/css/ai-blocks.css?ver=1.0.0","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/themes/custom-theme/assets/css/ai-blocks.css?ver=1.0.0 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Apr 2026 17:32:01 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69cd5691-abdf\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kB3y6G99mOT8zHwf3y0rREVsRKIpfaChab3IF%2BprBRknrfRSNGk%2BtlNYhPKZfVGnvBD66gXm5EVuNR9H4tJkjACS6cKFsKSLX6TT0fo2x0zjFsvtssokBTOW3t8bEo6d3oo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660dac2db51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43999,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"208f1c3f7cd5ecf83661d041f87a6918","sha1":"95b6966000b43fb5a9b0a55e81b99be0d7863f0e","sha256":"c5068ea32bbc2e22a9fc377ea9fd438be461d3d606f269695325fef084f11a0f","sha512":"63d5a67f1a7af9e5e5e3347a3c245285c3db4619cb032737168c572ebb91b657439ba82a6d7b07771f6e6b48f5dbe7d4b21d49426de1b045c03e36d7f865e64d","ssdeep":"384:RaYdtrOtMCcOec4CxYEjhQnb4oIJQTdnPCfCQrAlF6Pc3gXj:utvec4C+2Qb4oIJQTd2CQrAlF6PcM","tlshash":"f413a75822b6d614b8abd4b451c697ba73dc9104ce0fcd7eb7e7601c9dc97e82432b88","first_seen":"2026-03-07T20:32:57.309352Z","last_seen":"2026-04-13T06:40:51.218944Z","times_seen":18,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convregepay.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.35.6","fqdn":"convregepay.com","domain":"convregepay.com","tld":"com"},"ip":{"addr":"172.67.143.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://convregepay.com/","date":"2026-04-04T15:38:11.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convregepay.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 16:28:08 GMT","end":"Tue, 30 Jun 2026 16:28:07 GMT"},"fingerprint":{"sha1":"E4:64:A5:1B:E1:64:3D:8A:61:40:5D:54:69:4F:02:B3:3A:F4:F9:98","sha256":"68:88:B2:6E:DA:0A:38:63:74:05:8E:02:6C:5D:B7:7C:F5:14:E9:96:2A:76:A4:6A:D5:C4:94:87:01:8F:2E:45"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.35.6 HTTP/1.1\r\nHost: convregepay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://convregepay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:38:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 01 Apr 2026 17:32:00 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69cd5690-7cb8\"\r\nexpires: Sat, 11 Apr 2026 15:38:11 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AuCZ%2FgvokFH87ylt1X5JZmOo1Tx1hofMhREYAjyeXk%2BHBDFmMfhPybfZzj%2BGnBSO6qM7%2FizV4B9SHEm%2F9HqULGusuW6wajcoZq3cSUZiTu3nhWG7NhJDXU3aCoNLbkBVUQg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e71660ddc4eb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31928,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31928), with no line terminators","md5":"070048edd0950b156f2884cc6be49958","sha1":"f7df7a3692aae24b0d9bcfce4f436f9154fc4478","sha256":"a06367414e21ca690b7be3bad14cd62dcd8c35683b88cdee2050aaea11f703db","sha512":"aea4a92b1164697d2d808b46fa87d5dc35a4237afd7b4adee7f92da9b51f3ab1119a9375ca7ec62f2624d7fbb89d4cc77fb034486f80dc75b42e0f8c6d9b15b9","ssdeep":"768:D1c+6idHZRdzM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5GlT:ZcURdzMMBOBjmFatJR8RjD8/xHVlEEnp","tlshash":"69e208523296e866069f48a3f0231119f3765dd9b80af0d5b2bcdce6a471e877362b34","first_seen":"2026-03-03T15:30:23.234129Z","last_seen":"2026-04-25T00:58:58.071353Z","times_seen":19124,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"convregepay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
