{"report_id":"ab1b254b-6fd4-4840-a7a2-53a4dd5c3c1b","version":0,"status":"done","tags":[],"date":"2026-10-03T16:42:42Z","url":{"schema":"http","addr":"redotpayverified.shop/","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"redotpayverified.shop/","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"title":"Premium Digital Accounts \u0026 Business Tools — Redotpay Verified Accounts","dom":{"size":87550,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (58622)","md5":"1d75f85f76ad690925513e16d02af77a","sha1":"60d63d5b758f784ac1ba658db18f0efd7449bbfb","sha256":"2a3618436610ea76fb921bcd6c04dfd01cf8d68a80536855c178f4f123b955eb","sha512":"c3e3546f7cda990c0f0c8a166d3b47ac60396a575bbdb0ccf3db849432ae77a76e1bd368b51a3080c9a1a7d652e866d5bc6c223668153a1198c021aaacaa3acf","ssdeep":"1536:ZI35ebx/c64Jysq7v5B2RH6+Oe/nYxYvyoUccccFSWjOeuPkgm8:ZI35erB2RH6+lhXJWw","tlshash":"0f83fa10721c393e5517c3a9fea0f77c91689253e263c569b1ed1ab4a3c2ed4fd23a84","dom_hash":"domhashc09ca0fa9a3ad5a9581040f21505c392","first_seen":"2026-10-03T16:42:01.306013Z","last_seen":"2026-10-03T16:42:50.563526Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"redotpayverified.shop/","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-07T16:42:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"redotpayverified.shop","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-10-03T16:41:55.108079Z","last_seen":"2026-10-03T16:41:55.108079Z","alert_count":60,"request_count":30,"received_data":1561267,"sent_data":23706,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-27T22:45:36.707646Z","alert_count":0,"request_count":8,"received_data":233604,"sent_data":4643,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-27T22:44:07.016679Z","alert_count":0,"request_count":1,"received_data":13271,"sent_data":615,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"redotpayverified.shop/assets/types-BUS6pYcD.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"3b218b21a8eab095334571c63bda8b97","sha1":"e37d60e29ee85829576f7ceb7b884d92705f1c05","sha256":"2042d11f7fe5f869e9f66e4c2f4e66ac0e020abfc7ed9a26e432b5af967ffa30","sha512":"a2b698d49468d4d0e0c753375428be51f27d1a8423c68a9e28c9122332848b72115683d433fc569adda41a7ca885360a2fcd346e8ed95f6ca37537807f34d7ca","ssdeep":"","tlshash":"d3e020d6f19e73f4a3717954808b4017db29eed3219c0a64500ae4957734874877ef5e","size":341,"data":"","first_seen":"2026-10-03T16:42:01.38286Z","last_seen":"2026-10-03T16:42:50.569848Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/button-BY9PZA5a.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1a129d137cef88edb5e67e0d217f7d9","sha1":"8146cbe553374d2f2320f2b2877eed453426dbf7","sha256":"48c40059cd239dcd6be482df28b76d6876d86b1988d49097ac810b876ed5673b","sha512":"7eb58fa546f0fcffefd66e08047501b3b957458eff48411296615ada3862ae4d85adf4d7e8eb2a2b3802bec4baf9f2443317829105bf0e957f05bccd18c64dad","ssdeep":"96:r401gzXIcqjHDmiBI8hhPDH50fim6ytQh:r40mgJh10QytY","tlshash":"d191e78573d1b660222b8927d07fdc1ef7ad7698402c2030f1a950b511698ecc3bafe0","size":4308,"data":"","first_seen":"2026-10-03T16:42:01.366802Z","last_seen":"2026-10-03T16:42:50.586571Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/ProductCard-DkNzKoAK.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d622d72211a72331e43c1372a29b7ab8","sha1":"fe94e47bef45bfd1068437e6f40cec1f4881826c","sha256":"64c2dfb6af26ea518957258f1175894ac79947b8823ec9d48e82134977d65d33","sha512":"89af3703294888b1bfe54431cd5a72a732075a7725fedd68471c28c79134060e30eb67b1a14153398c6b29b554e76db1bb336a14772ce03928f9014ccc1d4a64","ssdeep":"","tlshash":"fe516616e150b9fca02b1a98f21df55ca31dc564eb5689b2f4fd70112481ce6be3bbc4","size":2659,"data":"","first_seen":"2026-10-03T16:42:01.381239Z","last_seen":"2026-10-03T16:42:50.576691Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/plus-D5chBT0l.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"c6df2b495fc793689b8284e905ba568f","sha1":"496f2219612cd6302123fcdaab6def582c5b1dd1","sha256":"583f645c200e732cb0d07d4e2be3262a3cff78e6d0a87364cadf0e6a6885a484","sha512":"5444ceca33aeb579a0751d36c21472688a10e478d1003f2777a2f851dd6598c57ba8542af2e3730e0e09108cad27d9feb2a3639e4016f0c067c9d3012fa7d63b","ssdeep":"","tlshash":"19c02b0f69896e703a000371190eff198896199c83e307463506622e03c00e6df2cf17","size":142,"data":"","first_seen":"2026-10-03T16:42:01.364621Z","last_seen":"2026-10-03T16:42:50.576032Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/trash-2-DdvLq0AJ.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"883aa03060b0b2b46e8c473c5b59faeb","sha1":"b26387b6ba8a1909b06e834bf1d642fd286f893b","sha256":"9b8bd38850167ccfda145ef6fab8ab86108419bc7b6d651cdb880611243ab399","sha512":"bee4cb16028d6fcbc8be89e5b9b05c162d7f82b2d934a82632e84b4cdeb879ca494f4969bcd1fb75f35259b273caa31378a2598ee5d6e3f84834f1f0a96d26a8","ssdeep":"","tlshash":"74e0865fcece0b68450203a1291fff5043d7a9ac51eb4612311d203925a52d0cc3ffa2","size":317,"data":"","first_seen":"2026-10-03T16:42:01.339854Z","last_seen":"2026-10-03T16:42:50.594614Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/shield-check-BLp4Rjcr.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"675bae295ccf5a80dc1181297c55fc34","sha1":"c62efe0c6665a8db99d910cb25d641b850651c8a","sha256":"8687d041fbb8e20ec300f6dd9d10fd4a28a80bb75f310a5641d95bdc1263dfe4","sha512":"570d2bf56874e930deb0fffbc8e61fc6a96c3379f2bebc7976fe72426efbb2c2343076875b54143096250711ce3bc588f89d44cef3fd29eaa7044ebba5eb1b02","ssdeep":"","tlshash":"1ee08cabaf4d1afc2483e7d0d64ba8148f4ae69923be4560b40c983d429249ac05fa25","size":309,"data":"","first_seen":"2026-10-03T16:42:01.360026Z","last_seen":"2026-10-03T16:42:50.598787Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/circle-check-DS1CbYaq.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e835e7a57446c0f344b38b68ff4061b1","sha1":"064405ec06a39a591f9999d09e18bb4a0027f066","sha256":"edc06115c9c5418841697ed20cd3c39eb1a9d2b99c2b78a36210e70703a50412","sha512":"6e4a814093927b47e6b19b249c4e40178f8519abe4ab330a3491a77ff3dfade1ce825087c1566aa7c228c69a75f7ecae116a51a1a75ccbc80aeb70a3ce30f23b","ssdeep":"","tlshash":"7cc0801fad491b74540155d1574ded15e4035759039d0ec5b5c9422943c049aa5dde01","size":167,"data":"","first_seen":"2026-10-03T16:42:01.37721Z","last_seen":"2026-10-03T16:42:50.574585Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/~flock.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-10-11T21:52:56.116117Z","times_seen":18465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/redirect-Coy-z-9D.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cb62048cfb0c50f3de2748b4e6a0a97","sha1":"046866f3dd94635b1b7b340aab6b2de542237c17","sha256":"e02e01f23e8fd5f2dc284f5c9571ba4b5abd44cc95fa0395f1afe9edc5bdd42b","sha512":"1a719e68780392a229e52747e5803dc4e8bd4a1e8d60d035778610af293638c901b7242df602371604542ac2201d114d9ba94450959cd8f13384d9c20ea2a5de","ssdeep":"","tlshash":"ea1112ef72cfb2ed238b045140e35599f2ea05e514894164a048bcb6397a5edc34be2b","size":1009,"data":"","first_seen":"2026-04-27T11:06:17.3468Z","last_seen":"2026-10-11T15:50:00.585711Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/useServerFn-CYfa_rRr.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"9bf3b7123558dd93b09e28efa1adcb09","sha1":"be2598c9f4a6a6b25f01057cc2c4a3a543dbf2d9","sha256":"6b71e316611dea19439d415c9a13f7f1c25cffcfe2be8912d36e325bb5a82029","sha512":"d997dee822bd4a3028add40692b8775bb31fbd22478a60a1b02d5c097a8d54a46638399e60155fb772f18c6ce723ffd4bec5cc14cd34a7b6524027471959ad9c","ssdeep":"","tlshash":"ece068ca73e39275439f1cebc0206026e231d6d8512d03a8c01e5f862a33b60d25bf16","size":369,"data":"","first_seen":"2026-10-03T16:42:01.351833Z","last_seen":"2026-10-03T16:42:50.591014Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/BrandMark-vM_chq2W.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"06c258f04c241cfefce6c0a35facdf25","sha1":"ed082a4b8c918fe8d2f29919f011ea3428c214a5","sha256":"cb0a8bb2f0efd356fc3c4730ad43dc3c4c9716b38c2e2d9c882f000effec330d","sha512":"9b0b21780077b9ec18077e24e05258848a4fc1085238b0e6f999939adac3a7b49dd4bc5cb783c789c9cf445cebb5adbf9f0c46ad64b1c1f9c239322b494cf6a3","ssdeep":"","tlshash":"c9019e08b140f8bca4636898f25fda0e31aec124cf158f2ca9bdf91134540e83923fc5","size":667,"data":"","first_seen":"2026-10-03T16:42:01.353643Z","last_seen":"2026-10-03T16:42:50.600853Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/useRouter-BQ61MA5v.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5b1433efdc7bf0731d4213636895b18","sha1":"bb12399af63d82c3c43858f661373437676ba963","sha256":"78f39aa4b37b60c80d10fb5400750866d17c1c3183b0eb241323f0b4e85c4ae5","sha512":"831deffa098c157992c60d7beaf641e61a73d516970f5c7f85da804e4cf843c1117e894414353e0e57774d96c115a5f40236ac4ba553bfc17ed13b83fed5fe1f","ssdeep":"192:XWR0l62y1qjc9oXvlRwejuclrIX1EwlVFI:XDlLy1fIlAclrIX1Ewl/I","tlshash":"3c02b5c974d5b161169375b2807f54aaf33d2899284ca460b222d8e6bdf484cc927f9f","size":8567,"data":"","first_seen":"2026-09-21T20:18:34.159592Z","last_seen":"2026-10-03T16:42:50.578898Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/useStore-D8LdwNKk.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f78342b5a2cf5913f8929a30c3464ac7","sha1":"7887a069c64df2655276d73234bd30ef41e7958a","sha256":"dc47578ad981ea61ec8f02b542cc1696add715e7787be3c038b675df00de5962","sha512":"d1f2713bdfa77a8ba6c51fbf69c40fa92b8356be63386e4ee8faca3c5c6e78c1a399d7bd3e9d6f22111dd82c6ca560218faf10daa5a897a89816eff5a918b0fb","ssdeep":"384:LD82Qdno9Jihcbab2sF9YijO9AiybTq2i2kZ9c8Os9FE:L8no989YijO9A2F7OqFE","tlshash":"1482e8f532d2f4a653ce21e600ff9015f37d0a91284c0618e1b599da3871a59e3fbf6a","size":19049,"data":"","first_seen":"2026-09-21T20:18:34.153689Z","last_seen":"2026-10-03T16:42:50.604305Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/utils-hMy1B40f.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ce51b90ce13e5b5a1f8a813f1e489f9","sha1":"4ca9da9c23205ab7708799f03bafbe442ed35045","sha256":"82dd99a3ba28a9e4cce12c7a3356767c09aae6955a6a7b564e8784bf596b8f5e","sha512":"66840e35f22642eff11b23dd7c9ac647e554b2902ec745b93e222436f39363f6a4e6fd33728bc2a7c04f8531c2207115674241d563264911948be2661e7358a5","ssdeep":"384:eU7l+IHXEmSBVxsSF5U/WqznzULECNkUJOJ8zitiT7tOUih8TJJOj:4I3Emi8uPqznkN4J8pgR8k","tlshash":"16d2fa637152297a26bfd257d14cebcdda326702c60e8b08f2420f319779be59685f0e","size":29069,"data":"","first_seen":"2026-10-03T16:42:01.356244Z","last_seen":"2026-10-03T16:42:50.598112Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/dist-BvzPzGHO.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc1195d7fe439fa33be549721558273e","sha1":"51f1f8540f1efc4df8b996c5a5762a33c53a1876","sha256":"d07f855aa50025a51a231637b7557026d2b0fa8d5562fff9abbb0ece39a50cea","sha512":"7c573c3e875547934786cb0d73f01b09615ba316595b2a054d43074dc769b16cde66e297aa014b9a9c8654c73e903bf4e1eca3e45477f5b05ff28738c25790b9","ssdeep":"96:r4vFfNjTNoO44sNkyuyvS+5yBy5EmyADFhRumyKb+9JFRj606hsj6WMUxp:r41ozfqz2nhpQp","tlshash":"d4a1c6ed2069b4b0efcd6c395223902c9babaecd101f041475da4d5416e4298fb9bf5a","size":4718,"data":"","first_seen":"2026-10-03T16:42:01.378892Z","last_seen":"2026-10-03T16:42:50.583987Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/routes-Dt-mClyZ.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"50625c53cac55a343f451065ac2c3190","sha1":"a249442a602532c82363bbd529d3a9441eb916f5","sha256":"6dd14ec3ea65a1c11233ed82bec6cce825b1508c8c74b7efee6769d8e8e2f0fb","sha512":"6ea81c64b4281698864acb6cfe7dec3c4cd09a567b0b3c758e8b94cb410692c5415dc3caddd42deb5d4cfe24501a3865ee4646a29e34ba5bf72e7aba19e1ee08","ssdeep":"384:MVIMpqr0c8xS/rl0wJQq2I+URf/EYD0D9WO6wyDYj:3MqwerOwl7jZa9WAaG","tlshash":"a7b29429f1f875e9bb1348e5f9afd24d769ad11cd34684b979fa301821180c87723f8a","size":24608,"data":"","first_seen":"2026-10-03T16:42:01.336503Z","last_seen":"2026-10-03T16:42:50.580549Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/sparkles-CLBsZX4P.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b46b4df28f394c0b2d35e4903aa4fab2","sha1":"29aee785de68d79be29add777297fc3caec10492","sha256":"b9b346f600eb753cdb954aa5ab1c654c3351971afc0395d8dd76dcd4aeaf8030","sha512":"18a682ebda73f8a695e16046d0a63053479c1ee6bfa811dd95021095893aaf2e8d50c9fcb9b77153b24d515d5471b7fc8b8939b72bd8f495afdc977c29b1d310","ssdeep":"","tlshash":"9cf0bebb1e8e85bc86839855ce3ff840cb3a82e8353642003c4ca1398283092c96ae41","size":483,"data":"","first_seen":"2026-10-03T16:42:01.323929Z","last_seen":"2026-10-03T16:42:50.575351Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/Combination-CVqmIaVo.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"d3be0251890cf5326a9e894a78098286","sha1":"cf7619880a8d67f3dc7c6fec10aafda80d869ca3","sha256":"b92e53fa7001558fc93543efea372cba2d7f9a92cdaa90174f3a24ff13e81d0d","sha512":"8729464e865372542821d161ac8485d8d4d86ae80b91147bc2daa7686aa1b4c11dc8ebd550117de419f9528b343ac30f92e5bf5df33ba61da3c50095101e2325","ssdeep":"384:r4YEhhnL0B825C29eUAkiRibH8o+N5s3rVOrsONvrGQkR8v/Se:rI/n4BB5C29elkio+NiBOoONvrz1Se","tlshash":"6fd2c6d57692b930c3cb41a6247fd25db63b3a98b00e5414f4758c883db8c95c2a7fba","size":30611,"data":"","first_seen":"2026-10-03T16:42:01.317281Z","last_seen":"2026-10-03T16:42:50.599931Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/link-DC3ehFNW.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b1ca44b16d03752f3d0c0add62b7948","sha1":"a2f031231de967b692834363c948581ac7209c21","sha256":"dad577463fbcefe14e9e0784d3c3684eaf85b3b2ae4de01bc3a7060de5cb1396","sha512":"e3de2509f0566e08737d494e470ba565b26c0cc1c37ac461a300afe268103d0b00ee8f166a7b7b75639de17209156f730006bc5fafdc2e17efc5e0514d793176","ssdeep":"96:rOIqgpjws+14h75mW2wTYgaqcMriOZwkOFnkrl:rOIqcA1agwTN+Jkmi","tlshash":"ab91079ff11270798eff826b801a8000fe377ef52a1f0125b0b16a447a47948b7b7e56","size":4377,"data":"","first_seen":"2026-10-03T16:42:01.375463Z","last_seen":"2026-10-03T16:42:50.596174Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/matchContext-DthNPakR.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bb59101bc86c6ef0b2a1d0a68f4c426","sha1":"13c5b6d48b4f323748772b952ae5e7647f7d9914","sha256":"82c78cc943882f9b793379805c8beb49ec2039d4b61c86c4d61f3ace316253ac","sha512":"ed1b29793e53e2469bf1f998a7920166f2c1f2696ece05d36584b2f0cb1d7c82cfd59916dcb5398f0f3058bb9fb0e8af0a0b1ffd45b9dcb3ef497032bea66817","ssdeep":"","tlshash":"c3c08c1dd98002b13a7b08c3c13381f292707198076ccbe8000b9d8ac5caaa042bcca3","size":160,"data":"","first_seen":"2026-09-21T20:18:34.166531Z","last_seen":"2026-10-03T16:42:50.573521Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/dist-B7vA2W-O.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d09a7228678b620c582b82a6f05750f1","sha1":"0f0bb14aa630ff2bc9c892812c6f7d8213a9a59d","sha256":"6cc25384a2284d399b750200e0092d27c7a31fb594a3b32ce407e38387e964e0","sha512":"e88ae28e5e52cc15d233b5cfef0371cbd9bed5413263ce326e07e004b4b89a6f5d7e9b6a6d1fe54dd916e92650483922571146e732968a547d1531c053222615","ssdeep":"768:5ZTVnncECkUsEsdj29E0I/0rGV4xksc64Jysq7vfib0pbgKolIY:f1v0sdq9E0I/ebx/c64Jysq7vfibsBov","tlshash":"d7f22ac4f80861304c2b5201adce572cf13576516e664436b21d4caef6e3fe939baf66","size":36015,"data":"","first_seen":"2026-10-03T16:42:01.331633Z","last_seen":"2026-10-03T16:42:50.591776Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/index-NYl3kIAz.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd8c80dbb5a7d195e21401eb7a17c029","sha1":"46d553750f7fc26f88db411ca4c1330613431c0d","sha256":"c7a9a569166b6caee1715abdfb99e69407a07c8452c0f05fd077e02a95fe01d0","sha512":"a07c088271998a3ee3f5d467ca06d5e662817d135f1480ba8a8ec1b1e620537e60b0a2f3b2d256f490ab299ec257ea0bea0dcc662b92369d900973a39d01a603","ssdeep":"6144:ItiskXcRzDayPmhdV3RWWAt6PnixFTC1+gpuYpFc+IYiebrRBLGYuV8hBh6fMKus:LsKzjSg/FJI4dZZLyC+","tlshash":"b4b46ee833a6b0320bd681b2907b1502f33954567c0d4428b678eddf76e5845e6bbfb8","size":514228,"data":"","first_seen":"2026-10-03T16:42:01.345269Z","last_seen":"2026-10-03T16:42:50.572779Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/StoreLayout-BddwCk5-.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d46983516eb4f3d6e703da389bc358e2","sha1":"4346eb7a4d875304e18325d0014ef97d2d3dc61a","sha256":"056e98d5ca97042e35fcbee4d87d03909c433038bbb7bcf265e365d555166716","sha512":"b7535914b634911c80b7af2a181ac7ea320b67deb095d201df40b365cd4f46437bd4434bb38e5d0c1faab932802dd9c52d9c324e41ab956c13d0e8587e78b6a6","ssdeep":"192:r4Pgyj9vpKLjLtZs5kA5ZN4mUTOAXl7LhPMOuZAm5eHViSeQKgR4:r47pc3Ls8mBAXkOas4","tlshash":"38627449f1a52afcb92b48a8506ef01d754fc1dcda5b89b5b9bc306818414e4fe2bfc4","size":14549,"data":"","first_seen":"2026-10-03T16:42:01.349925Z","last_seen":"2026-10-03T16:42:50.593561Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/dist-yuS2ZPqd.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"a458876bda5bf857550702139492067a","sha1":"3cce9323c3254a70aeb0c521f7624d12cf6bf6b9","sha256":"2fbd9c1ec877202cc4fac51f2ff3f9ed526da3e3fbb36fffefac81a919964b3f","sha512":"993a0dde4c35c61ed1c43c99bebe6dcd5fe512cc94f39c689e800f7559e529a0f16706563558fb429cd4ef3c25487e99f0c8e938a44a2896e3ab679c688c5143","ssdeep":"","tlshash":"740144d628501af0323dc8dfc70f21950311c5b980ae2630f02d0e6036be491916be33","size":697,"data":"","first_seen":"2026-10-03T16:42:01.370987Z","last_seen":"2026-10-03T16:42:50.567174Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/createServerFn-DnPDcTgs.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"afc7d98570b556d47c5f1a6ace45e52c","sha1":"f1fb4e4bc77c1b17bed9d67f0305ae700a7584a2","sha256":"1c0c312fd91cf83d537ad312ce714c558c86e3721fefc85006527f3a091be8bd","sha512":"d28f46cf6b16d9ec41a0a83566c275aa977f5b1044232d78a7a01f679a110c5474d9d3f9bb89614b7b6919234d6e6c632074c03e7b8746ad569715303c55832d","ssdeep":"768:Z2joBK/EkfBR2+IXvKH/9stWVt5pKZaCreSIAijJGaa7sK15:ZNCR2+IXjERsvijJ/a7sKn","tlshash":"2bf271dd32a3f12783df52b6902b1046f3b91da4680d4861f268e55f38b1495caf7fa8","size":35609,"data":"","first_seen":"2026-10-03T16:42:01.333919Z","last_seen":"2026-10-03T16:42:50.595397Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"redotpayverified.shop/assets/styles-DXBRlnE2.css","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.136Z","timestamp":1791045731136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/styles-DXBRlnE2.css HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/css; charset=utf-8\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660b9a311525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96786,"size_decoded":16631,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65470)","md5":"d9ef8ae494226b8c4e03405c73ed35c5","sha1":"5a326c23274150d6574682a39c2b648f7d961d1a","sha256":"db1d36838bd708d0d7a3663825360243076f2ded555c3b0419a9f1ff2678091b","sha512":"a98c7d249b07fe56d94fed7e1e44d01d305f62fd7bc1fac7468b0c30e15d54c50e343be0378d6b3bb54cb28e4180fbce0171bfadae2eeb4091e07cfad7166d3b","ssdeep":"1536:DmIUuBh+LqLNyP9ETwy1nLmmUh6a5SsMq+WDhXX78T0Xtu988R988q:SIUuBh+LeNyP2wy1nLjUhlMq+WDhYgXh","tlshash":"7c93f790b229da3f7d33a4f593ccb88ca209b0c1dd3546f9fa56612206c7bf29d67614","first_seen":"2026-10-03T16:42:01.309829Z","last_seen":"2026-10-03T16:42:50.564524Z","times_seen":2,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/dist-yuS2ZPqd.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.205Z","timestamp":1791045731205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/dist-yuS2ZPqd.js HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/assets/dist-BvzPzGHO.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660c0b5f1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":697,"size_decoded":982,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (697), with no line terminators","md5":"a458876bda5bf857550702139492067a","sha1":"3cce9323c3254a70aeb0c521f7624d12cf6bf6b9","sha256":"2fbd9c1ec877202cc4fac51f2ff3f9ed526da3e3fbb36fffefac81a919964b3f","sha512":"993a0dde4c35c61ed1c43c99bebe6dcd5fe512cc94f39c689e800f7559e529a0f16706563558fb429cd4ef3c25487e99f0c8e938a44a2896e3ab679c688c5143","ssdeep":"","tlshash":"740144d628501af0323dc8dfc70f21950311c5b980ae2630f02d0e6036be491916be33","first_seen":"2026-10-03T16:42:01.370987Z","last_seen":"2026-10-03T16:42:50.567174Z","times_seen":2,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.371Z","timestamp":1791045731371,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://redotpayverified.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 16:14:45 GMT\r\nexpires: Tue, 28 Sep 2027 16:14:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 433646\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":32921,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-10-11T21:45:24.892335Z","times_seen":36261,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":30,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/types-BUS6pYcD.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.397Z","timestamp":1791045731397,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/types-BUS6pYcD.js HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/assets/StoreLayout-BddwCk5-.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660d3ee91525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":341,"size_decoded":749,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (341), with no line terminators","md5":"3b218b21a8eab095334571c63bda8b97","sha1":"e37d60e29ee85829576f7ceb7b884d92705f1c05","sha256":"2042d11f7fe5f869e9f66e4c2f4e66ac0e020abfc7ed9a26e432b5af967ffa30","sha512":"a2b698d49468d4d0e0c753375428be51f27d1a8423c68a9e28c9122332848b72115683d433fc569adda41a7ca885360a2fcd346e8ed95f6ca37537807f34d7ca","ssdeep":"","tlshash":"d3e020d6f19e73f4a3717954808b4017db29eed3219c0a64500ae4957734874877ef5e","first_seen":"2026-10-03T16:42:01.38286Z","last_seen":"2026-10-03T16:42:50.569848Z","times_seen":2,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-03T16:42:10.466Z","timestamp":1791045730466,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; Path=/; Max-Age=86400; SameSite=Lax; Secure\n__cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R; HttpOnly; SameSite=None; Secure; Path=/; Domain=redotpayverified.shop; Expires=Sat, 03 Oct 2026 17:12:10 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d6607ad5f1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag","quoted":false,"path":"/","max_age":86400,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"__dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; Path=/; Max-Age=86400; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R","quoted":false,"path":"/","domain":"redotpayverified.shop","expires":"2026-10-03T17:12:10Z","raw_expires":"Sat, 03 Oct 2026 17:12:10 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R; HttpOnly; SameSite=None; Secure; Path=/; Domain=redotpayverified.shop; Expires=Sat, 03 Oct 2026 17:12:10 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73787,"size_decoded":15472,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (58571)","md5":"4c4923ece253df2a9bf8d5a95f3b94d8","sha1":"0bc0c90f69ba8e09c903e7de847e17ad378ca9a6","sha256":"24f2afdd565f2fe566e9ef9adc05a9317124319dc43fb1c7412dbe2a47f08d1e","sha512":"2608255c2357b1507227a3e88372b560d1a7e7eb17e2d2a08ce0a5de0e14857581f875595c4e717def4cb86d5e6d03e20adc46667e85e499c7b9e270bb0d45c6","ssdeep":"768:fh6uuu+koeeQ2WylA5WnG5bxYqHtpEYOK2Uz6v7knRzmOTD5Wqk5GeVSTz2d0qen:ZnT7e/nYxYvyoUccccFSWjjeuJkgHD","tlshash":"e073d72122683d3f554382edfeb0f7b892ad8296e163c55db2fd1b746386c44ee13684","first_seen":"2026-10-03T16:42:50.57143Z","last_seen":"2026-10-03T16:42:50.57143Z","times_seen":1,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":17,"connect":1,"send":0,"wait":169,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/index-NYl3kIAz.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.140Z","timestamp":1791045731140,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/index-NYl3kIAz.js HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660baa441525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":514228,"size_decoded":146347,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (53295)","md5":"cd8c80dbb5a7d195e21401eb7a17c029","sha1":"46d553750f7fc26f88db411ca4c1330613431c0d","sha256":"c7a9a569166b6caee1715abdfb99e69407a07c8452c0f05fd077e02a95fe01d0","sha512":"a07c088271998a3ee3f5d467ca06d5e662817d135f1480ba8a8ec1b1e620537e60b0a2f3b2d256f490ab299ec257ea0bea0dcc662b92369d900973a39d01a603","ssdeep":"6144:ItiskXcRzDayPmhdV3RWWAt6PnixFTC1+gpuYpFc+IYiebrRBLGYuV8hBh6fMKus:LsKzjSg/FJI4dZZLyC+","tlshash":"b4b46ee833a6b0320bd681b2907b1502f33954567c0d4428b678eddf76e5845e6bbfb8","first_seen":"2026-10-03T16:42:01.345269Z","last_seen":"2026-10-03T16:42:50.572779Z","times_seen":2,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/matchContext-DthNPakR.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.151Z","timestamp":1791045731151,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/matchContext-DthNPakR.js HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660bba741525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160,"size_decoded":647,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"0bb59101bc86c6ef0b2a1d0a68f4c426","sha1":"13c5b6d48b4f323748772b952ae5e7647f7d9914","sha256":"82c78cc943882f9b793379805c8beb49ec2039d4b61c86c4d61f3ace316253ac","sha512":"ed1b29793e53e2469bf1f998a7920166f2c1f2696ece05d36584b2f0cb1d7c82cfd59916dcb5398f0f3058bb9fb0e8af0a0b1ffd45b9dcb3ef497032bea66817","ssdeep":"","tlshash":"c3c08c1dd98002b13a7b08c3c13381f292707198076ccbe8000b9d8ac5caaa042bcca3","first_seen":"2026-09-21T20:18:34.166531Z","last_seen":"2026-10-03T16:42:50.573521Z","times_seen":8,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/circle-check-DS1CbYaq.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.157Z","timestamp":1791045731157,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/circle-check-DS1CbYaq.js HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660bba951525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":167,"size_decoded":664,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e835e7a57446c0f344b38b68ff4061b1","sha1":"064405ec06a39a591f9999d09e18bb4a0027f066","sha256":"edc06115c9c5418841697ed20cd3c39eb1a9d2b99c2b78a36210e70703a50412","sha512":"6e4a814093927b47e6b19b249c4e40178f8519abe4ab330a3491a77ff3dfade1ce825087c1566aa7c228c69a75f7ecae116a51a1a75ccbc80aeb70a3ce30f23b","ssdeep":"","tlshash":"7cc0801fad491b74540155d1574ded15e4035759039d0ec5b5c9422943c049aa5dde01","first_seen":"2026-10-03T16:42:01.37721Z","last_seen":"2026-10-03T16:42:50.574585Z","times_seen":2,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/sparkles-CLBsZX4P.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.161Z","timestamp":1791045731161,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/sparkles-CLBsZX4P.js HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660bcaa81525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":483,"size_decoded":772,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (483), with no line terminators","md5":"b46b4df28f394c0b2d35e4903aa4fab2","sha1":"29aee785de68d79be29add777297fc3caec10492","sha256":"b9b346f600eb753cdb954aa5ab1c654c3351971afc0395d8dd76dcd4aeaf8030","sha512":"18a682ebda73f8a695e16046d0a63053479c1ee6bfa811dd95021095893aaf2e8d50c9fcb9b77153b24d515d5471b7fc8b8939b72bd8f495afdc977c29b1d310","ssdeep":"","tlshash":"9cf0bebb1e8e85bc86839855ce3ff840cb3a82e8353642003c4ca1398283092c96ae41","first_seen":"2026-10-03T16:42:01.323929Z","last_seen":"2026-10-03T16:42:50.575351Z","times_seen":2,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/plus-D5chBT0l.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.392Z","timestamp":1791045731392,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/plus-D5chBT0l.js HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/assets/StoreLayout-BddwCk5-.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660d3ed81525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142,"size_decoded":646,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"c6df2b495fc793689b8284e905ba568f","sha1":"496f2219612cd6302123fcdaab6def582c5b1dd1","sha256":"583f645c200e732cb0d07d4e2be3262a3cff78e6d0a87364cadf0e6a6885a484","sha512":"5444ceca33aeb579a0751d36c21472688a10e478d1003f2777a2f851dd6598c57ba8542af2e3730e0e09108cad27d9feb2a3639e4016f0c067c9d3012fa7d63b","ssdeep":"","tlshash":"19c02b0f69896e703a000371190eff198896199c83e307463506622e03c00e6df2cf17","first_seen":"2026-10-03T16:42:01.364621Z","last_seen":"2026-10-03T16:42:50.576032Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/ProductCard-DkNzKoAK.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.162Z","timestamp":1791045731162,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/ProductCard-DkNzKoAK.js HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660bcab01525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2659,"size_decoded":1638,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2659), with no line terminators","md5":"d622d72211a72331e43c1372a29b7ab8","sha1":"fe94e47bef45bfd1068437e6f40cec1f4881826c","sha256":"64c2dfb6af26ea518957258f1175894ac79947b8823ec9d48e82134977d65d33","sha512":"89af3703294888b1bfe54431cd5a72a732075a7725fedd68471c28c79134060e30eb67b1a14153398c6b29b554e76db1bb336a14772ce03928f9014ccc1d4a64","ssdeep":"","tlshash":"fe516616e150b9fca02b1a98f21df55ca31dc564eb5689b2f4fd70112481ce6be3bbc4","first_seen":"2026-10-03T16:42:01.381239Z","last_seen":"2026-10-03T16:42:50.576691Z","times_seen":2,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.373Z","timestamp":1791045731373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://redotpayverified.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 29 Sep 2026 03:49:32 GMT\r\nexpires: Wed, 29 Sep 2027 03:49:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 391959\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-10-11T21:17:43.85729Z","times_seen":27102,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":70,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=JetBrains+Mono:wght@500\u0026family=Outfit:wght@500;600;700;800\u0026family=Plus+Jakarta+Sans:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.138Z","timestamp":1791045731138,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=JetBrains+Mono:wght@500\u0026family=Outfit:wght@500;600;700;800\u0026family=Plus+Jakarta+Sans:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 03 Oct 2026 16:42:11 GMT\r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12587,"size_decoded":1606,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6ef9d920099dadf5d4c828b9d3f0ed64","sha1":"e0dac9d0f490aacf5cb4fb5f461c4909c82c1d93","sha256":"b2dbabce739eccaf1e864304c527ed5febd31c13071ae1e5eaf312127a6a135e","sha512":"9eee00dc34fa76ff307c6421bcb11f39f04d6943038665e7d1aa1730d936cd3623da8cc7501a967c725ab3daa330034937940a6dce91f26bc707cdc1997f8885","ssdeep":"192:tih9EM3qYSf7hprhwEhXxhWGCFJRSdCmaRBUCj3Ro7CcQRvd:s/bdrFn","tlshash":"b142e1a0082fa540eb431cc663ce7e369e5f61567045d4b99ffe1898ec6ec2a6375b0c","first_seen":"2026-10-03T16:42:01.329227Z","last_seen":"2026-10-03T16:42:50.577976Z","times_seen":2,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":32,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/useRouter-BQ61MA5v.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.144Z","timestamp":1791045731144,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/useRouter-BQ61MA5v.js HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660baa581525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8567,"size_decoded":3787,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8567), with no line terminators","md5":"f5b1433efdc7bf0731d4213636895b18","sha1":"bb12399af63d82c3c43858f661373437676ba963","sha256":"78f39aa4b37b60c80d10fb5400750866d17c1c3183b0eb241323f0b4e85c4ae5","sha512":"831deffa098c157992c60d7beaf641e61a73d516970f5c7f85da804e4cf843c1117e894414353e0e57774d96c115a5f40236ac4ba553bfc17ed13b83fed5fe1f","ssdeep":"192:XWR0l62y1qjc9oXvlRwejuclrIX1EwlVFI:XDlLy1fIlAclrIX1Ewl/I","tlshash":"3c02b5c974d5b161169375b2807f54aaf33d2899284ca460b222d8e6bdf484cc927f9f","first_seen":"2026-09-21T20:18:34.159592Z","last_seen":"2026-10-03T16:42:50.578898Z","times_seen":8,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/routes-Dt-mClyZ.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.153Z","timestamp":1791045731153,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/routes-Dt-mClyZ.js HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660bba7e1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24608,"size_decoded":6934,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (24555), with no line terminators","md5":"50625c53cac55a343f451065ac2c3190","sha1":"a249442a602532c82363bbd529d3a9441eb916f5","sha256":"6dd14ec3ea65a1c11233ed82bec6cce825b1508c8c74b7efee6769d8e8e2f0fb","sha512":"6ea81c64b4281698864acb6cfe7dec3c4cd09a567b0b3c758e8b94cb410692c5415dc3caddd42deb5d4cfe24501a3865ee4646a29e34ba5bf72e7aba19e1ee08","ssdeep":"384:MVIMpqr0c8xS/rl0wJQq2I+URf/EYD0D9WO6wyDYj:3MqwerOwl7jZa9WAaG","tlshash":"a7b29429f1f875e9bb1348e5f9afd24d769ad11cd34684b979fa301821180c87723f8a","first_seen":"2026-10-03T16:42:01.336503Z","last_seen":"2026-10-03T16:42:50.580549Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/dist-BvzPzGHO.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.158Z","timestamp":1791045731158,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/dist-BvzPzGHO.js HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660bbaa01525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4718,"size_decoded":2303,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4718), with no line terminators","md5":"cc1195d7fe439fa33be549721558273e","sha1":"51f1f8540f1efc4df8b996c5a5762a33c53a1876","sha256":"d07f855aa50025a51a231637b7557026d2b0fa8d5562fff9abbb0ece39a50cea","sha512":"7c573c3e875547934786cb0d73f01b09615ba316595b2a054d43074dc769b16cde66e297aa014b9a9c8654c73e903bf4e1eca3e45477f5b05ff28738c25790b9","ssdeep":"96:r4vFfNjTNoO44sNkyuyvS+5yBy5EmyADFhRumyKb+9JFRj606hsj6WMUxp:r41ozfqz2nhpQp","tlshash":"d4a1c6ed2069b4b0efcd6c395223902c9babaecd101f041475da4d5416e4298fb9bf5a","first_seen":"2026-10-03T16:42:01.378892Z","last_seen":"2026-10-03T16:42:50.583987Z","times_seen":2,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/button-BY9PZA5a.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.163Z","timestamp":1791045731163,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/button-BY9PZA5a.js HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660bcabe1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4308,"size_decoded":2415,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4308), with no line terminators","md5":"d1a129d137cef88edb5e67e0d217f7d9","sha1":"8146cbe553374d2f2320f2b2877eed453426dbf7","sha256":"48c40059cd239dcd6be482df28b76d6876d86b1988d49097ac810b876ed5673b","sha512":"7eb58fa546f0fcffefd66e08047501b3b957458eff48411296615ada3862ae4d85adf4d7e8eb2a2b3802bec4baf9f2443317829105bf0e957f05bccd18c64dad","ssdeep":"96:r401gzXIcqjHDmiBI8hhPDH50fim6ytQh:r40mgJh10QytY","tlshash":"d191e78573d1b660222b8927d07fdc1ef7ad7698402c2030f1a950b511698ecc3bafe0","first_seen":"2026-10-03T16:42:01.366802Z","last_seen":"2026-10-03T16:42:50.586571Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.378Z","timestamp":1791045731378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://redotpayverified.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 29 Sep 2026 03:49:32 GMT\r\nexpires: Wed, 29 Sep 2027 03:49:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 391959\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-10-11T21:17:43.85729Z","times_seen":27102,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":64,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/favicon.png","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.568Z","timestamp":1791045731568,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 3424\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\nserver: cloudflare\r\ncf-ray: a44d660e49ea1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3424,"size_decoded":3877,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"7107175a30c77a1c73bd32a981f09f1c","sha1":"949bc58c8b77d0485c7fca310e860dfdd9712b8d","sha256":"a6d1c9c6ca7460e7a09f35a89b1291be1e8a26543f962c2ba61a2696b40970fa","sha512":"6f509dd8acc84d4ef2eb81063cf4a7e98fb23ea13dc2862113274c4b424d853630d5929115e0b536e2bc4244ceebd52924332fa91a6698efbdcd0de2c099c9d2","ssdeep":"","tlshash":"85617fd21309d570cdd11524893c2f98df46d9c9768a61aef0c8e06d0ec5bcc41fd27a","first_seen":"2026-10-03T16:42:01.342914Z","last_seen":"2026-10-03T16:42:50.587432Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/~flock.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.164Z","timestamp":1791045731164,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660bcac21525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21296,"size_decoded":8697,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-10-11T21:52:56.116117Z","times_seen":18465,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/redotpay-mark-CMpE7BWJ.png","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.165Z","timestamp":1791045731165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/redotpay-mark-CMpE7BWJ.png HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 617659\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\nserver: cloudflare\r\ncf-ray: a44d660bcac71525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":617659,"size_decoded":618166,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"2427462dd14d1394aebfc15ff71e54f8","sha1":"bbea39130c0e5bb1fdb24b60dcf73e9b2a895a36","sha256":"c5c6b1ad217a2904802e7b3fe5183f1178df61297ccbd9021b09626292efd474","sha512":"b33e951cea1f1444b2cb8e85b1648a6ae76c32cc128c34f951cd8a43e54756f742e79f78d4247879eaf90134ce17e66c5dad080026fd063ceeb9e716a40a097c","ssdeep":"12288:0zLAl+h3fSN83rhRqFNzfBxjKn+tjRY4aNzX/VFOJv4bfqpmPq:0U+5fAOrhRq7ZxjK+FyN50Jv4Lq8y","tlshash":"b9d423b56bdf100db75e23b5a904eb47b9306b2f7331d754345e90a11ba9e3822ec781","first_seen":"2026-10-03T16:42:01.362479Z","last_seen":"2026-10-03T16:42:50.589533Z","times_seen":2,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.380Z","timestamp":1791045731380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://redotpayverified.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 16:14:45 GMT\r\nexpires: Tue, 28 Sep 2027 16:14:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 433646\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":32921,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-10-11T21:45:24.892335Z","times_seen":36261,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":48,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.381Z","timestamp":1791045731381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://redotpayverified.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 29 Sep 2026 03:49:32 GMT\r\nexpires: Wed, 29 Sep 2027 03:49:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 391959\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-10-11T21:17:43.85729Z","times_seen":27102,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":61,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbY2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8-qxTOlOV.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.383Z","timestamp":1791045731383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbY2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8-qxTOlOV.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://redotpayverified.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21832\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 16:06:47 GMT\r\nexpires: Tue, 28 Sep 2027 16:06:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 434124\r\nlast-modified: Wed, 10 Sep 2025 16:52:38 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21832,"size_decoded":22645,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21832, version 1.0","md5":"a21e038a03f709cf60aa1e2944048aef","sha1":"35c2a72b759f5a19834ff0ddd7f94a9cbe557860","sha256":"cb182feeed4d798ff6961d3c79f7026279448fca0676438aaecb21f3fc39553a","sha512":"1bc050df652621ba5577ed422d62e772b36bb2176b37adc3465830eda2c7f4634fd1e8d051285ece7fed0789b72694bcf5e7e908725add53319db3393e33f76a","ssdeep":"384:FkrCJN/+9XC0hl2yCY22vnuykoPbcmlHy3qhXo4JD8S0UcotKuKY2RZD5Si:FkrCmSE8yCYnvujpBoX2SFcqK1Y2nJ","tlshash":"41a2e11b33449687ca1e0933bea7f3d556b9904ee7f135c969a313e11e063b0c502aed","first_seen":"2025-06-08T14:57:17.920295Z","last_seen":"2026-10-11T18:31:27.518435Z","times_seen":2012,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":57,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/useServerFn-CYfa_rRr.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.391Z","timestamp":1791045731391,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/useServerFn-CYfa_rRr.js HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/assets/StoreLayout-BddwCk5-.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660d3ed11525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":369,"size_decoded":770,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (369), with no line terminators","md5":"9bf3b7123558dd93b09e28efa1adcb09","sha1":"be2598c9f4a6a6b25f01057cc2c4a3a543dbf2d9","sha256":"6b71e316611dea19439d415c9a13f7f1c25cffcfe2be8912d36e325bb5a82029","sha512":"d997dee822bd4a3028add40692b8775bb31fbd22478a60a1b02d5c097a8d54a46638399e60155fb772f18c6ce723ffd4bec5cc14cd34a7b6524027471959ad9c","ssdeep":"","tlshash":"ece068ca73e39275439f1cebc0206026e231d6d8512d03a8c01e5f862a33b60d25bf16","first_seen":"2026-10-03T16:42:01.351833Z","last_seen":"2026-10-03T16:42:50.591014Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/dist-B7vA2W-O.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.145Z","timestamp":1791045731145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/dist-B7vA2W-O.js HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660baa5b1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36015,"size_decoded":10663,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36015), with no line terminators","md5":"d09a7228678b620c582b82a6f05750f1","sha1":"0f0bb14aa630ff2bc9c892812c6f7d8213a9a59d","sha256":"6cc25384a2284d399b750200e0092d27c7a31fb594a3b32ce407e38387e964e0","sha512":"e88ae28e5e52cc15d233b5cfef0371cbd9bed5413263ce326e07e004b4b89a6f5d7e9b6a6d1fe54dd916e92650483922571146e732968a547d1531c053222615","ssdeep":"768:5ZTVnncECkUsEsdj29E0I/0rGV4xksc64Jysq7vfib0pbgKolIY:f1v0sdq9E0I/ebx/c64Jysq7vfibsBov","tlshash":"d7f22ac4f80861304c2b5201adce572cf13576516e664436b21d4caef6e3fe939baf66","first_seen":"2026-10-03T16:42:01.331633Z","last_seen":"2026-10-03T16:42:50.591776Z","times_seen":2,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/StoreLayout-BddwCk5-.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.156Z","timestamp":1791045731156,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/StoreLayout-BddwCk5-.js HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660bba8d1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14549,"size_decoded":4877,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9659)","md5":"d46983516eb4f3d6e703da389bc358e2","sha1":"4346eb7a4d875304e18325d0014ef97d2d3dc61a","sha256":"056e98d5ca97042e35fcbee4d87d03909c433038bbb7bcf265e365d555166716","sha512":"b7535914b634911c80b7af2a181ac7ea320b67deb095d201df40b365cd4f46437bd4434bb38e5d0c1faab932802dd9c52d9c324e41ab956c13d0e8587e78b6a6","ssdeep":"192:r4Pgyj9vpKLjLtZs5kA5ZN4mUTOAXl7LhPMOuZAm5eHViSeQKgR4:r47pc3Ls8mBAXkOas4","tlshash":"38627449f1a52afcb92b48a8506ef01d754fc1dcda5b89b5b9bc306818414e4fe2bfc4","first_seen":"2026-10-03T16:42:01.349925Z","last_seen":"2026-10-03T16:42:50.593561Z","times_seen":2,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.376Z","timestamp":1791045731376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://redotpayverified.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 29 Sep 2026 03:49:32 GMT\r\nexpires: Wed, 29 Sep 2027 03:49:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 391959\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-10-11T21:17:43.85729Z","times_seen":27102,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":67,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/trash-2-DdvLq0AJ.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.394Z","timestamp":1791045731394,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/trash-2-DdvLq0AJ.js HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/assets/StoreLayout-BddwCk5-.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660d3edf1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":317,"size_decoded":712,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (317), with no line terminators","md5":"883aa03060b0b2b46e8c473c5b59faeb","sha1":"b26387b6ba8a1909b06e834bf1d642fd286f893b","sha256":"9b8bd38850167ccfda145ef6fab8ab86108419bc7b6d651cdb880611243ab399","sha512":"bee4cb16028d6fcbc8be89e5b9b05c162d7f82b2d934a82632e84b4cdeb879ca494f4969bcd1fb75f35259b273caa31378a2598ee5d6e3f84834f1f0a96d26a8","ssdeep":"","tlshash":"74e0865fcece0b68450203a1291fff5043d7a9ac51eb4612311d203925a52d0cc3ffa2","first_seen":"2026-10-03T16:42:01.339854Z","last_seen":"2026-10-03T16:42:50.594614Z","times_seen":2,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/createServerFn-DnPDcTgs.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.147Z","timestamp":1791045731147,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/createServerFn-DnPDcTgs.js HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660baa5f1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35609,"size_decoded":11986,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (33404)","md5":"afc7d98570b556d47c5f1a6ace45e52c","sha1":"f1fb4e4bc77c1b17bed9d67f0305ae700a7584a2","sha256":"1c0c312fd91cf83d537ad312ce714c558c86e3721fefc85006527f3a091be8bd","sha512":"d28f46cf6b16d9ec41a0a83566c275aa977f5b1044232d78a7a01f679a110c5474d9d3f9bb89614b7b6919234d6e6c632074c03e7b8746ad569715303c55832d","ssdeep":"768:Z2joBK/EkfBR2+IXvKH/9stWVt5pKZaCreSIAijJGaa7sK15:ZNCR2+IXjERsvijJ/a7sKn","tlshash":"2bf271dd32a3f12783df52b6902b1046f3b91da4680d4861f268e55f38b1495caf7fa8","first_seen":"2026-10-03T16:42:01.333919Z","last_seen":"2026-10-03T16:42:50.595397Z","times_seen":2,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/link-DC3ehFNW.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.152Z","timestamp":1791045731152,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/link-DC3ehFNW.js HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660bba7a1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4377,"size_decoded":2639,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4373), with no line terminators","md5":"1b1ca44b16d03752f3d0c0add62b7948","sha1":"a2f031231de967b692834363c948581ac7209c21","sha256":"dad577463fbcefe14e9e0784d3c3684eaf85b3b2ae4de01bc3a7060de5cb1396","sha512":"e3de2509f0566e08737d494e470ba565b26c0cc1c37ac461a300afe268103d0b00ee8f166a7b7b75639de17209156f730006bc5fafdc2e17efc5e0514d793176","ssdeep":"96:rOIqgpjws+14h75mW2wTYgaqcMriOZwkOFnkrl:rOIqcA1agwTN+Jkmi","tlshash":"ab91079ff11270798eff826b801a8000fe377ef52a1f0125b0b16a447a47948b7b7e56","first_seen":"2026-10-03T16:42:01.375463Z","last_seen":"2026-10-03T16:42:50.596174Z","times_seen":2,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/utils-hMy1B40f.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.155Z","timestamp":1791045731155,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/utils-hMy1B40f.js HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660bba881525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29069,"size_decoded":9924,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (29069), with no line terminators","md5":"4ce51b90ce13e5b5a1f8a813f1e489f9","sha1":"4ca9da9c23205ab7708799f03bafbe442ed35045","sha256":"82dd99a3ba28a9e4cce12c7a3356767c09aae6955a6a7b564e8784bf596b8f5e","sha512":"66840e35f22642eff11b23dd7c9ac647e554b2902ec745b93e222436f39363f6a4e6fd33728bc2a7c04f8531c2207115674241d563264911948be2661e7358a5","ssdeep":"384:eU7l+IHXEmSBVxsSF5U/WqznzULECNkUJOJ8zitiT7tOUih8TJJOj:4I3Emi8uPqznkN4J8pgR8k","tlshash":"16d2fa637152297a26bfd257d14cebcdda326702c60e8b08f2420f319779be59685f0e","first_seen":"2026-10-03T16:42:01.356244Z","last_seen":"2026-10-03T16:42:50.598112Z","times_seen":2,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/shield-check-BLp4Rjcr.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.160Z","timestamp":1791045731160,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/shield-check-BLp4Rjcr.js HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660bcaa51525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309,"size_decoded":745,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (309), with no line terminators","md5":"675bae295ccf5a80dc1181297c55fc34","sha1":"c62efe0c6665a8db99d910cb25d641b850651c8a","sha256":"8687d041fbb8e20ec300f6dd9d10fd4a28a80bb75f310a5641d95bdc1263dfe4","sha512":"570d2bf56874e930deb0fffbc8e61fc6a96c3379f2bebc7976fe72426efbb2c2343076875b54143096250711ce3bc588f89d44cef3fd29eaa7044ebba5eb1b02","ssdeep":"","tlshash":"1ee08cabaf4d1afc2483e7d0d64ba8148f4ae69923be4560b40c983d429249ac05fa25","first_seen":"2026-10-03T16:42:01.360026Z","last_seen":"2026-10-03T16:42:50.598787Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/Combination-CVqmIaVo.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.204Z","timestamp":1791045731204,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/Combination-CVqmIaVo.js HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/assets/dist-BvzPzGHO.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660c0b571525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30611,"size_decoded":11235,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24556)","md5":"d3be0251890cf5326a9e894a78098286","sha1":"cf7619880a8d67f3dc7c6fec10aafda80d869ca3","sha256":"b92e53fa7001558fc93543efea372cba2d7f9a92cdaa90174f3a24ff13e81d0d","sha512":"8729464e865372542821d161ac8485d8d4d86ae80b91147bc2daa7686aa1b4c11dc8ebd550117de419f9528b343ac30f92e5bf5df33ba61da3c50095101e2325","ssdeep":"384:r4YEhhnL0B825C29eUAkiRibH8o+N5s3rVOrsONvrGQkR8v/Se:rI/n4BB5C29elkio+NiBOoONvrz1Se","tlshash":"6fd2c6d57692b930c3cb41a6247fd25db63b3a98b00e5414f4758c883db8c95c2a7fba","first_seen":"2026-10-03T16:42:01.317281Z","last_seen":"2026-10-03T16:42:50.599931Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/BrandMark-vM_chq2W.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.395Z","timestamp":1791045731395,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/BrandMark-vM_chq2W.js HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/assets/StoreLayout-BddwCk5-.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660d3ee41525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":667,"size_decoded":916,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (667), with no line terminators","md5":"06c258f04c241cfefce6c0a35facdf25","sha1":"ed082a4b8c918fe8d2f29919f011ea3428c214a5","sha256":"cb0a8bb2f0efd356fc3c4730ad43dc3c4c9716b38c2e2d9c882f000effec330d","sha512":"9b0b21780077b9ec18077e24e05258848a4fc1085238b0e6f999939adac3a7b49dd4bc5cb783c789c9cf445cebb5adbf9f0c46ad64b1c1f9c239322b494cf6a3","ssdeep":"","tlshash":"c9019e08b140f8bca4636898f25fda0e31aec124cf158f2ca9bdf91134540e83923fc5","first_seen":"2026-10-03T16:42:01.353643Z","last_seen":"2026-10-03T16:42:50.600853Z","times_seen":2,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/~api/analytics","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.743Z","timestamp":1791045731743,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/\r\nContent-Type: application/json\r\nContent-Length: 342\r\nOrigin: https://redotpayverified.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R; session-id=fdc2776e-852e-4e27-9a1e-d89110d9cc99\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"},{"name":"session-id","value":"fdc2776e-852e-4e27-9a1e-d89110d9cc99"}],"method":"POST","post_data":{"size":342,"data":"{\"timestamp\":\"2026-10-03T16:42:11.732Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"fdc2776e-852e-4e27-9a1e-d89110d9cc99\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://redotpayverified.shop/\\\"}\"}"}},"response":{"raw":"HTTP/2 202 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a44d660f6cb21525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8,"size_decoded":337,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"382ab522931673c11e398ead1b7b1678","sha1":"61a0572c4893ef34311320d84c82df88bea83e11","sha256":"a00fb0c50741f81bb51d35b4475a4357f8039aabd896a21036bc516839401595","sha512":"685c859b43ec0b2f873fb61ff4c48b3748ede3e31bdda719b69b528546f7a1d528216146db9626d1a411dccdd13f3fd155f3d62d3e2ec8090c71f6710ee60641","ssdeep":"","tlshash":"455000003c0000c0000000c000000000c0000000000000c0c000000000c0c000000000","first_seen":"2023-04-11T14:35:59Z","last_seen":"2026-10-11T21:19:55.348255Z","times_seen":8278,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/useStore-D8LdwNKk.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.148Z","timestamp":1791045731148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/useStore-D8LdwNKk.js HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660baa641525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19049,"size_decoded":7308,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19049), with no line terminators","md5":"f78342b5a2cf5913f8929a30c3464ac7","sha1":"7887a069c64df2655276d73234bd30ef41e7958a","sha256":"dc47578ad981ea61ec8f02b542cc1696add715e7787be3c038b675df00de5962","sha512":"d1f2713bdfa77a8ba6c51fbf69c40fa92b8356be63386e4ee8faca3c5c6e78c1a399d7bd3e9d6f22111dd82c6ca560218faf10daa5a897a89816eff5a918b0fb","ssdeep":"384:LD82Qdno9Jihcbab2sF9YijO9AiybTq2i2kZ9c8Os9FE:L8no989YijO9A2F7OqFE","tlshash":"1482e8f532d2f4a653ce21e600ff9015f37d0a91284c0618e1b599da3871a59e3fbf6a","first_seen":"2026-09-21T20:18:34.153689Z","last_seen":"2026-10-03T16:42:50.604305Z","times_seen":8,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpayverified.shop/assets/redirect-Coy-z-9D.js","fqdn":"redotpayverified.shop","domain":"redotpayverified.shop","tld":"shop"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.150Z","timestamp":1791045731150,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpayverified.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 10:19:32 GMT","end":"Wed, 23 Dec 2026 11:19:30 GMT"},"fingerprint":{"sha1":"77:19:C9:10:80:C5:5A:F4:EB:BC:AF:C1:23:3D:8E:28:98:79:2B:53","sha256":"1E:A8:3A:A4:F1:8A:40:3C:11:27:28:2A:9B:9E:7E:6A:82:F1:F6:03:AD:0D:40:AE:0B:3E:16:79:A7:CF:10:8C"}}},"request":{"raw":"GET /assets/redirect-Coy-z-9D.js HTTP/1.1\r\nHost: redotpayverified.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpayverified.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag; __cf_bm=TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650530.vmdsVv2eQXxZ2engSLxNt-E6TV4RAMd30j2A8KbFyag"},{"name":"__cf_bm","value":"TeImwQGVFHIzpDFNCHjviL_bldlkpRrpN2xWwVqjIMU-1791045730.503971-1.0.1.1-5rz3715bq4n2REvjWz5lvrMp1wdtNYAgVbLRUvGd0rsSHqNPb6sb44JPCdbg6CuEMixKIU0PO3s09Bq2lytmJRinjxyKWgsXJ1yHtHbxREUIb9McRfxxD8CSrUKLIk5R"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:42:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.3618d41f-e81f-4aa2-9f9c-86a8a9a2868d.1791650531.sFjwQt5Xj0XMfV-axasXonELUkbxtVBNh1USc2PKgFw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a44d660bba6f1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1009,"size_decoded":1046,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1009), with no line terminators","md5":"6cb62048cfb0c50f3de2748b4e6a0a97","sha1":"046866f3dd94635b1b7b340aab6b2de542237c17","sha256":"e02e01f23e8fd5f2dc284f5c9571ba4b5abd44cc95fa0395f1afe9edc5bdd42b","sha512":"1a719e68780392a229e52747e5803dc4e8bd4a1e8d60d035778610af293638c901b7242df602371604542ac2201d114d9ba94450959cd8f13384d9c20ea2a5de","ssdeep":"","tlshash":"ea1112ef72cfb2ed238b045140e35599f2ea05e514894164a048bcb6397a5edc34be2b","first_seen":"2026-04-27T11:06:17.3468Z","last_seen":"2026-10-11T15:50:00.585711Z","times_seen":182,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"redotpayverified.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://redotpayverified.shop/","date":"2026-10-03T16:42:11.385Z","timestamp":1791045731385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://redotpayverified.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 16:14:45 GMT\r\nexpires: Tue, 28 Sep 2027 16:14:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 433646\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":32921,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-10-11T21:45:24.892335Z","times_seen":36261,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":38,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}