{"report_id":"b39a1584-ec3e-4000-bfa6-8bf070efe465","version":6,"status":"done","tags":["scam","fraud","crypto"],"date":"2026-01-31T16:29:40Z","url":{"schema":"http","addr":"trustpayenergy.com","fqdn":"trustpayenergy.com","domain":"trustpayenergy.com","tld":"com"},"ip":{"addr":"104.21.85.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"trustpayenergy.com/","fqdn":"trustpayenergy.com","domain":"trustpayenergy.com","tld":"com"},"title":"Пример","dom":{"size":40000,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22994)","md5":"49dce319be565d9b8389c3261163854a","sha1":"f43a232655365898be28cfa7f2f9d85f25051cdd","sha256":"34dbd9c6b178d2071c7f0f7de29b00af7604c0500ffa328a38cb0be9f514f7d2","sha512":"6ffdbd784125d2f3c07e3e3cd43d93f9613950b8825488a56a22f56f709c4bc5001470d17be6472b874832841a7e774eb6ae2e6cb04cd8488bb645214b076a39","ssdeep":"384:BSrvI72InJaq+ROOyC7AN3Mu/XsTeUxxuWDybNOzbg3vFYC9tN0/XmPiXbZdg:0y2+UJi/c839YC+/Xmyng","tlshash":"eb0340b04a80107aa93f83576a81ee08b7d0455aee762f4bf4b2d14ecfc7f4e5621275","dom_hash":"domhash1d9c0295f9ba83e8e682249014f24775","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trustpayenergy.com","fqdn":"trustpayenergy.com","domain":"trustpayenergy.com","tld":"com"},"ip":{"addr":"104.21.85.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-07T16:29:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"api.trustpayenergy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"trustpayenergy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null},{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"summary":[{"fqdn":"api.trustpayenergy.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-12","domain_rank":0,"first_seen":"2026-01-31T13:48:38.471998Z","last_seen":"2026-01-31T13:48:38.471998Z","alert_count":8,"request_count":4,"received_data":63513,"sent_data":2092,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"trustpayenergy.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-12","domain_rank":0,"first_seen":"2026-01-31T13:48:38.493336Z","last_seen":"2026-01-31T13:48:38.493336Z","alert_count":12,"request_count":6,"received_data":6456882,"sent_data":2640,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-25T22:17:37.642954Z","alert_count":0,"request_count":1,"received_data":25422,"sent_data":549,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"min-api.cryptocompare.com","ip":{"addr":"20.4.130.154","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"domain_registered":"2013-11-03","domain_rank":433733,"first_seen":"2017-01-31T12:53:23Z","last_seen":"2026-01-31T02:51:46.549883Z","alert_count":0,"request_count":1,"received_data":757,"sent_data":523,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"trustpayenergy.com/","fqdn":"trustpayenergy.com","domain":"trustpayenergy.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f2d1c40ba07419c190fb0a024c8809a","sha1":"ca886007b2ec2af6a33a078b22b7515d175c3ac1","sha256":"fe0d1c8c0079416577473a1e82e52204ea167e7e2392deed263befa5b434010d","sha512":"cb5484eb162aa6e621e05f186a3db05bcb81b880d23459bfce4cc07eb1a360da3b657bc5381ad19f6cd8559027bc7854a328c8e367b60bb4d5817bae38e6e89c","ssdeep":"","tlshash":"3ac080d612e5c8d41d4780d611c19354a805542205575509750c45709fe5b46e95a7e1","size":160,"data":"","first_seen":"2023-07-06T22:35:27Z","last_seen":"2026-04-17T21:23:19.190636Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustpayenergy.com/assets/main.js","fqdn":"trustpayenergy.com","domain":"trustpayenergy.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"804616e867b3165a3662ec4f1cfa58c8","sha1":"f29da82578563f20e8dbda74c87babf269c7a323","sha256":"df17f352d986b631d3a65c76c23bc1d04dea1e3feefc836870b24b9e97a06f44","sha512":"349e0ca285f489377baac9765d03fabdd6772ca1a3153082f3faacf1e009fe462d917a4fcb9e8361a6257dae78069e0c6d3cd303483c5927e0ab00d9416f1f37","ssdeep":"1536:uIIWVqoZrdqnvIIL0vSqc3c84B4U3S+ithPdDj8ZVB7FZ6g8aLQfROhTo:dIWVq7vIILQ36U396g8WZc","tlshash":"ac44d8a85427553c84ba377d9a135100fd31b397a188cab639bc8811affdd90c6d2fad","size":268485,"data":"","first_seen":"2026-01-31T13:48:43.353964Z","last_seen":"2026-01-31T16:29:44.083238Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustpayenergy.com/assets/modules.js","fqdn":"trustpayenergy.com","domain":"trustpayenergy.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd7888c17d986b6122e6a9397cf907d6","sha1":"b4d8de352083413f9352fdb221525c81540a6a0a","sha256":"e531262f2af00276370279551348f4949a9d28b26af6be5f9a64cc496ac0b78a","sha512":"79f4a147849ba685e56a07f91c574d9970c5cb743ef6081fd2b4760e8656f760b92ead577d55004ab46158599d8c7cf554c3d53304070bf47b2ae97a2c944854","ssdeep":"49152:BC0EJoL7vMPaypp3JZ4CQmB0Rcj206bYF2Xi/Mf4hPGnN9EYtwkak9CGglx:Mmy3zQkA6mEwtwyjax","tlshash":"ff567dd073a0b0a5439752d0442bd005f339a82a644c449ff6efe8e76fa9e899537f39","size":6101525,"data":"","first_seen":"2025-05-16T16:12:44.565992Z","last_seen":"2026-07-13T05:36:53.122386Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustpayenergy.com/assets/w-modal.js","fqdn":"trustpayenergy.com","domain":"trustpayenergy.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","size":37639,"data":"","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-07-22T10:17:07.414629Z","times_seen":200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustpayenergy.com/assets/w-loader.js","fqdn":"trustpayenergy.com","domain":"trustpayenergy.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","size":41716,"data":"","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-07-27T11:44:45.118403Z","times_seen":396,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"api.trustpayenergy.com/","fqdn":"api.trustpayenergy.com","domain":"trustpayenergy.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustpayenergy.com/","date":"2026-01-31T16:29:19.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpayenergy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 13:22:31 GMT","end":"Sun, 12 Apr 2026 14:19:14 GMT"},"fingerprint":{"sha1":"3B:CD:AD:77:57:E9:25:10:80:5C:B2:A6:D4:2A:FF:38:35:95:E8:CE","sha256":"C2:BD:98:98:5C:15:0B:2B:D3:84:87:09:1C:CC:82:02:30:49:BC:CF:9D:D0:2E:09:AB:2E:F0:97:F1:4D:14:AF"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: api.trustpayenergy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustpayenergy.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 503\r\nOrigin: https://trustpayenergy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":503,"data":"v=150725\u0026s=1\u0026r=2d310220117b1a382a7a7c210721023112101a31291f1e7a121e71222a7a7d25291f2b21040b02232a7a7920291f7c21072102782b261e322c000a202d1f1e3d121002262d1b7d222a7a7821040b027b2a7b023a1210022e291f192107257d792a0f3f3b01261e321210022e291f19210721017a0621013b012579242b7b0620127a1e2e2c00052107220d7b0622237c0632117d061c237b05321d3b0125062711101a2e120f0e78111b017e12250e3b2b7a1d3b01262c202a0f30242c0e7120120f1a31121006320122383d2c1f303b040b023f111002782a251e31107a0e23120002242b7b0521072512202a0006242e197575"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 31 Jan 2026 16:29:19 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"5b18-qiQvxCF83sBWe9Eh0LiOjsnSciM\"\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=djHIL1fyvyByDYe2BakTG81eU%2BqWDZMLKGiyPXFX%2F3su4xVsWfkOkF%2FqhFpmS7v6kxBEu7rka8VtbwqPUGkfhIpiMWx4YSb%2BnG2%2FOrItJBAacZ5tWiU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c6a965689fa1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":23320,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (23320), with no line terminators","md5":"a8482f1ef54d4ff2b2bae0ed11fba8e9","sha1":"aa242fc4217cdec0567bd121d0b88e8ec9d27223","sha256":"46a9bb37ad80e5dd6ce99b01af5f753a657c9a2bed92f4686e791328bee65c8f","sha512":"ea5d6d2ca0338e7b6de8fe2730093aafced92da35417fbf891de9736d6da3db3502450afef207be3c399a72e817f6e6d6345846a481af5df140ae7ed5c43e599","ssdeep":"384:Thu7hNyhYh7jIxdBIQKPEQCyCQkzOlOAl9DV3DVQbvDVTpLVnN5ncDN/:NuFN4S7jYdBIQKPEQUQkSl1ZKbrdpL1G","tlshash":"88a20078ba8e35f5032fd721aa8cedff362741e2291750211b43d2c31a913da9bf1925","first_seen":"2026-01-31T13:48:43.359738Z","last_seen":"2026-01-31T16:29:44.066427Z","times_seen":2,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"api.trustpayenergy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"api.trustpayenergy.com/","fqdn":"api.trustpayenergy.com","domain":"trustpayenergy.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustpayenergy.com/","date":"2026-01-31T16:29:19.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpayenergy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 13:22:31 GMT","end":"Sun, 12 Apr 2026 14:19:14 GMT"},"fingerprint":{"sha1":"3B:CD:AD:77:57:E9:25:10:80:5C:B2:A6:D4:2A:FF:38:35:95:E8:CE","sha256":"C2:BD:98:98:5C:15:0B:2B:D3:84:87:09:1C:CC:82:02:30:49:BC:CF:9D:D0:2E:09:AB:2E:F0:97:F1:4D:14:AF"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: api.trustpayenergy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustpayenergy.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 503\r\nOrigin: https://trustpayenergy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":503,"data":"v=150725\u0026s=1\u0026r=2d310220117b1a382a7a7c210721023112101a31291f1e7a121e71222a7a7d782b250e222c0b013b01251a3e2a1f0e382a21017e01261a312c1006782b0f0e7d121f7d242b252c7d0425063e2a1b013b01262c3e2b253c242b247138120b017e2a261e3b2a0b3f212c1006242b247138120b017e0122117a01213f212a1f1e322b7a0e26121e71782b31017e051c2b7a071c2f7b06222379071c2332061b3f21117a20202c0e712311101a2001223825111f3032121b3f212c7a0e3b2a0f1e78107a0e23120002242b7b052107257d792a0f3f3b01260a202b261a3d1210022e111f1a232b251e322b31017e12250e3b2b7a1e71"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 31 Jan 2026 16:29:20 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"91d0-LiyY8NaT54UBYkDSpLxSbH+ZfKA\"\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CjAUM50ftNIOqYvpC%2Bh6guYj%2FctzWc5LEYimxTnUdU8v3irAHRGkkMTclZbFKGkEJZHNmkKmyKr7iRke6fsTm322gxeUAeAtiEj%2FdebwVLfAHP9nlQ8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c6a9657acf71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":37328,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (37328), with no line terminators","md5":"b168a42887c312c7111fdf3fce0a4d8f","sha1":"2e2c98f0d693e785016240d2a4bc526c7f997ca0","sha256":"ef65c5ea143550bd4f24600871c3c764a327e89a691133c266b02e90c6f0ff14","sha512":"4d62f874bd243dd0458563b3cb837ff4f92c3dc5b05351b592be5aa4b7a7d36b0d6b382034dc44b920664311e74ec13efecbd52a6454a3e7bbb736592da4e955","ssdeep":"768:Bt5hgCPKQbtDzct9BBRvTU4vX4k/g/+er5U4w/XO9lbh7bh+er3TIprRB6Kcz3cy:5Q7IK8KPUSg9mQ","tlshash":"a7f2bd3c3a5a30e4036ee532a584bdbf76274be63d12a4152f8197c256d1bdecee181c","first_seen":"2026-01-31T13:48:43.348773Z","last_seen":"2026-01-31T16:29:44.069614Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"api.trustpayenergy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"trustpayenergy.com/assets/w-modal.js","fqdn":"trustpayenergy.com","domain":"trustpayenergy.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustpayenergy.com/","date":"2026-01-31T16:29:17.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpayenergy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 13:22:31 GMT","end":"Sun, 12 Apr 2026 14:19:14 GMT"},"fingerprint":{"sha1":"3B:CD:AD:77:57:E9:25:10:80:5C:B2:A6:D4:2A:FF:38:35:95:E8:CE","sha256":"C2:BD:98:98:5C:15:0B:2B:D3:84:87:09:1C:CC:82:02:30:49:BC:CF:9D:D0:2E:09:AB:2E:F0:97:F1:4D:14:AF"}}},"request":{"raw":"GET /assets/w-modal.js HTTP/1.1\r\nHost: trustpayenergy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustpayenergy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 31 Jan 2026 16:29:18 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 22 Jan 2026 18:05:57 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TH%2F2upAd8DXGTIgr5Ssm5HmiS8sJ%2FwondKeoPZf5qX5RCgDNlGztDRqo36ot2bNZOc2eDi2ndBkTI4w%2FHuBfrLtIEEQIBXhzzo7r%2FBGwBTJhzg%3D%3D\"}]}\r\netag: W/\"69726705-9307\"\r\ncontent-encoding: br\r\ncf-ray: 9c6a964b4bac1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37639,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (2304), with CRLF line terminators","md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-07-22T10:17:07.414629Z","times_seen":200,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"trustpayenergy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"trustpayenergy.com/assets/w-loader.js","fqdn":"trustpayenergy.com","domain":"trustpayenergy.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustpayenergy.com/","date":"2026-01-31T16:29:17.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpayenergy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 13:22:31 GMT","end":"Sun, 12 Apr 2026 14:19:14 GMT"},"fingerprint":{"sha1":"3B:CD:AD:77:57:E9:25:10:80:5C:B2:A6:D4:2A:FF:38:35:95:E8:CE","sha256":"C2:BD:98:98:5C:15:0B:2B:D3:84:87:09:1C:CC:82:02:30:49:BC:CF:9D:D0:2E:09:AB:2E:F0:97:F1:4D:14:AF"}}},"request":{"raw":"GET /assets/w-loader.js HTTP/1.1\r\nHost: trustpayenergy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustpayenergy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 31 Jan 2026 16:29:18 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 22 Jan 2026 18:05:57 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ZSFMGeYpdOJS5tS8%2Fdj3DPkz9SbJ9QNg%2F6BsUk9lupw9Qq3RfS5CrT37vrX6B%2FncGU9%2Fr8wcutUG%2BODHnZs0pmjftXxWxg%2BV6szl9T38lzgMA%3D%3D\"}]}\r\netag: W/\"69726705-a2f4\"\r\ncontent-encoding: br\r\ncf-ray: 9c6a964b4bb81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41716,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2342), with CRLF line terminators","md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-07-27T11:44:45.118403Z","times_seen":396,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"trustpayenergy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"trustpayenergy.com/favicon.ico","fqdn":"trustpayenergy.com","domain":"trustpayenergy.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustpayenergy.com/","date":"2026-01-31T16:29:18.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpayenergy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 13:22:31 GMT","end":"Sun, 12 Apr 2026 14:19:14 GMT"},"fingerprint":{"sha1":"3B:CD:AD:77:57:E9:25:10:80:5C:B2:A6:D4:2A:FF:38:35:95:E8:CE","sha256":"C2:BD:98:98:5C:15:0B:2B:D3:84:87:09:1C:CC:82:02:30:49:BC:CF:9D:D0:2E:09:AB:2E:F0:97:F1:4D:14:AF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: trustpayenergy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustpayenergy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 31 Jan 2026 16:29:18 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 22 Jan 2026 18:05:57 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ugoY23z%2FDC5bDD3yzyf6miFb%2F2NTYueBfrFnZ90RisSxH26k4oHGHQo7FTlwsSTQgKu7ghyRGmkvJvSmzHLUV75TnzUvI%2BS%2BgqzbYfzFlDVf5Q%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c6a9650da511525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1324,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"21380d86e7bcedc32df48615b7554d27","sha1":"e3e38d456e5ca144692f91312cdc27eacd9e2a78","sha256":"e943e44bcdce84a018b9f8c1421ca7609672d8faca6ccd827fe28e1b8311102a","sha512":"9a3c97c9acee7423f6c51efeaa99261d00fce72350364253fe2797dbb68a9a723a44f80d111e0f71a79665b582f2794d39ac19d46a60e913b9d1b15c472395ee","ssdeep":"","tlshash":"642180229ddae8ca0032916a60a1f30eb490c03e6b936e0631ec14732fe27a4cd77c90","first_seen":"2026-01-31T13:48:43.350539Z","last_seen":"2026-01-31T16:29:44.075847Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"trustpayenergy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026family=Nunito:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustpayenergy.com/","date":"2026-01-31T16:29:19.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:02 GMT","end":"Mon, 06 Apr 2026 08:38:01 GMT"},"fingerprint":{"sha1":"00:CB:E3:62:3C:86:A7:11:87:F3:A6:90:20:C5:3B:40:22:3D:A4:45","sha256":"95:06:BF:37:D3:97:28:E3:54:05:91:BE:0D:2F:72:C7:C5:B0:4B:1C:FA:A1:FF:85:13:D0:DE:4A:8F:A2:55:1D"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026family=Nunito:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustpayenergy.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 31 Jan 2026 16:29:19 GMT\r\ndate: Sat, 31 Jan 2026 16:29:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24736,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c98488a0e7e032c7dd0338081f4ff8cd","sha1":"e6f277a559e5a1f4f671563b94f8108726967033","sha256":"b3fd86bf7ad0824ddd5f83d983b11464bdef5e2399638740642123195ed4a9fe","sha512":"1313d2b3133f9e610c98209fb3a4da9039e062783597d7fc6badcfc5ef22f3d924228eea9938820bbec7af6b4a7a6ba70f0a960587d3dbc7266855bf281c1f37","ssdeep":"384:vXuM0p2+bb2vbfoMS2kbqBVd2VbhG6c2SbUP5l7QFDPeo:P","tlshash":"79b2ca92001be500ab872cc227cf7e3aed8e61557455c579abfd4cc8acabd631364b1e","first_seen":"2025-09-19T04:34:09.043423Z","last_seen":"2026-07-27T11:44:45.124776Z","times_seen":143,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":242,"dns":1,"connect":15,"send":0,"wait":31,"receive":0,"ssl":223},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustpayenergy.com/","fqdn":"api.trustpayenergy.com","domain":"trustpayenergy.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustpayenergy.com/","date":"2026-01-31T16:29:19.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpayenergy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 13:22:31 GMT","end":"Sun, 12 Apr 2026 14:19:14 GMT"},"fingerprint":{"sha1":"3B:CD:AD:77:57:E9:25:10:80:5C:B2:A6:D4:2A:FF:38:35:95:E8:CE","sha256":"C2:BD:98:98:5C:15:0B:2B:D3:84:87:09:1C:CC:82:02:30:49:BC:CF:9D:D0:2E:09:AB:2E:F0:97:F1:4D:14:AF"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: api.trustpayenergy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustpayenergy.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 487\r\nOrigin: https://trustpayenergy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":487,"data":"v=150725\u0026s=1\u0026r=2d310220117b1a382a7a7c210721023112101a31291f1e7a121e7138120b013b01251a3e2a1f0e382a21017e01261a312c1006782b0f0e7d121f7d242b252c7d0425063e2a1b013b01262c3e2b253c242b247138120b017e2a261e3b2a0b3f212c1006242b247138120b017e2a261e3b2a0b3f212a1f1e322b7a0e26121e71782b31017e051c2b7a071c2f7b06222379071c197d051b3f21117a20202c0e712311101a2001223825111f3032121b3f212c7a0e3b2a0f1e78107a0e23120002242b7b052107257d792a0f3f3b01260a202b261a3d1210022e111f1a232b251e322b31017e12250e3b2b7a1e71"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 31 Jan 2026 16:29:19 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"48-OayGPtMVaSYdMyd0/e2O1O4luuk\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SpoN%2ByhHo1lXk9TBIb3QbJ%2FCvHa2pEtVxrJ00MTUJ20mXTeOpvB6D%2FGNoVXhv2i3lp89LckGCZrQkaXfjQb6sRSfxcz7uy3Ux%2BuAHlumRDe5XKff\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c6a96552e28b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"d38af40786b44afbc0a5772cc1d81bb2","sha1":"39ac863ed31569261d332774fded8ed4ee25bae9","sha256":"1e31206a3b821c38343f0f71d320da5254e33ca18705dd3d341428a30620af22","sha512":"b79d5c0c8c0cf067b3c1fe51c318222a76b6a1c46492efa259ecc5e51e81848890111e2aad07dc9e623ad5d29bd9b51529b77024fd11b0553858836529e354c7","ssdeep":"","tlshash":"97a002ad381d4436b76816216cddd4aa0502d7f216c0e1557e82528112d178adff6134","first_seen":"2026-01-31T16:29:44.079095Z","last_seen":"2026-01-31T16:29:44.079095Z","times_seen":1,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":43,"dns":28,"connect":1,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"api.trustpayenergy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"api.trustpayenergy.com/","fqdn":"api.trustpayenergy.com","domain":"trustpayenergy.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustpayenergy.com/","date":"2026-01-31T16:29:20.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpayenergy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 13:22:31 GMT","end":"Sun, 12 Apr 2026 14:19:14 GMT"},"fingerprint":{"sha1":"3B:CD:AD:77:57:E9:25:10:80:5C:B2:A6:D4:2A:FF:38:35:95:E8:CE","sha256":"C2:BD:98:98:5C:15:0B:2B:D3:84:87:09:1C:CC:82:02:30:49:BC:CF:9D:D0:2E:09:AB:2E:F0:97:F1:4D:14:AF"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: api.trustpayenergy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustpayenergy.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 575\r\nOrigin: https://trustpayenergy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":575,"data":"v=150725\u0026s=1\u0026r=2d310220117b1a382a7a7c21072102242a261a242b24717b121f023229101a2401213f212c1006242b247138120b017e0122117a01213f212c0f243c121b017e01220530042209300422013f0522113b010c0d7a0722017d0722013f01213f21120f713c111f243d012227212c0002792b7b1a3f111024242a251e31127b233d117a713c01213f212c7a7131297a1e31107a24230122383d2c1f303b040b023c12100632111f2c24107b1a32012227300632117d070c2b7a071c113f051c0d30040b0222290f0e78107a1a202c0f0d21072512202a000624040b027b111f303b12101a2e111f1a232b251e322b31017e2a261e3b2a0b3f212b0f0e312c0f7d242b247120120f1a311210063201223825111f303212107875"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 31 Jan 2026 16:29:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"28-9SyjTZ9YygvFu4m3Hjestt1MDI0\"\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q3DJN83bd%2FqVNhiLPu7dfHficWjJ4IUi4utF5RggTJxs46o02k1pFPIRv9tuG%2BuOGNudCnC3GmWjPSaQjCxP6KI6AGiryDhUlDgqJhMXJ85hSgL9srU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c6a9658bfe91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"5bcda070e202a53d29b7b7df54772c34","sha1":"f52ca34d9f58ca0bc5bb89b71e37acb6dd4c0c8d","sha256":"b30654aaf0650f637a163dedf41c277d797ba6f1c002e0fab260f594787dc9fb","sha512":"77de56ca33944d9033dbded9fdfa5c206c8e7ffffe47c11b1429c63ba18f0f07fff294f567b018920c0f56288ea2f23dc77edf9452b80085ea1de4a51bbc37ce","ssdeep":"","tlshash":"6790040015500410404530043541fc7c741405350f451f1c341047544cc07130304357","first_seen":"2024-08-19T22:20:02.239435Z","last_seen":"2026-01-31T16:29:44.081144Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1073,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1073,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"api.trustpayenergy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"trustpayenergy.com/","fqdn":"trustpayenergy.com","domain":"trustpayenergy.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-31T16:29:17.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpayenergy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 13:22:31 GMT","end":"Sun, 12 Apr 2026 14:19:14 GMT"},"fingerprint":{"sha1":"3B:CD:AD:77:57:E9:25:10:80:5C:B2:A6:D4:2A:FF:38:35:95:E8:CE","sha256":"C2:BD:98:98:5C:15:0B:2B:D3:84:87:09:1C:CC:82:02:30:49:BC:CF:9D:D0:2E:09:AB:2E:F0:97:F1:4D:14:AF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trustpayenergy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 31 Jan 2026 16:29:17 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 22 Jan 2026 18:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GyimwhXZPkmGdEikF8wWvHMq%2BWftk9i3th4QKdI9wnC4ALRJhgvZBrb2CKVE%2FPJswEYPo89X5spJ3WhnlINN%2BDU75VHqJDIB3jeGhapwpTR4Ew%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c6a964928900daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1324,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"21380d86e7bcedc32df48615b7554d27","sha1":"e3e38d456e5ca144692f91312cdc27eacd9e2a78","sha256":"e943e44bcdce84a018b9f8c1421ca7609672d8faca6ccd827fe28e1b8311102a","sha512":"9a3c97c9acee7423f6c51efeaa99261d00fce72350364253fe2797dbb68a9a723a44f80d111e0f71a79665b582f2794d39ac19d46a60e913b9d1b15c472395ee","ssdeep":"","tlshash":"642180229ddae8ca0032916a60a1f30eb490c03e6b936e0631ec14732fe27a4cd77c90","first_seen":"2026-01-31T13:48:43.350539Z","last_seen":"2026-01-31T16:29:44.075847Z","times_seen":2,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":19,"dns":0,"connect":1,"send":0,"wait":107,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"trustpayenergy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"trustpayenergy.com/assets/modules.js","fqdn":"trustpayenergy.com","domain":"trustpayenergy.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustpayenergy.com/","date":"2026-01-31T16:29:17.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpayenergy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 13:22:31 GMT","end":"Sun, 12 Apr 2026 14:19:14 GMT"},"fingerprint":{"sha1":"3B:CD:AD:77:57:E9:25:10:80:5C:B2:A6:D4:2A:FF:38:35:95:E8:CE","sha256":"C2:BD:98:98:5C:15:0B:2B:D3:84:87:09:1C:CC:82:02:30:49:BC:CF:9D:D0:2E:09:AB:2E:F0:97:F1:4D:14:AF"}}},"request":{"raw":"GET /assets/modules.js HTTP/1.1\r\nHost: trustpayenergy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustpayenergy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 31 Jan 2026 16:29:18 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 22 Jan 2026 18:05:57 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=soABdSp7qaOhIlJcM5IrtnuW5mOIOZS%2Fq%2BefhRZiZiKykrfrQ6OHEeSk3i%2FbANRd3IAnBQw7nr8GPqupuXi88NoeYi3e9ohfvrC9nqq5uEf%2FVA%3D%3D\"}]}\r\netag: W/\"69726705-5d1a20\"\r\ncontent-encoding: br\r\ncf-ray: 9c6a964b4bc11525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6101536,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"3b213a32f63e7967e9c2a5535806df09","sha1":"2198e24da34b883543f6b2bb3b3e315cfc5452b0","sha256":"1c56392da634c53a1450bcebb75428d63339a9bdc0e7e4602c0b674dbf27696f","sha512":"1a44f17a2865c14c3570dffb931bdcf07e5d8b7670fcb5154d1088d6fd10d4406acab0e00d666528882f9d91abc635f96b139f64a467c540b695c2c69a70f8a3","ssdeep":"12288:BMGk0Eqoh8EYL7qjs30amseucfju2ZAyppl:BZk0EJGEYL7v0F7Payppl","tlshash":"c9254a8473a1f076439725a4543f100af239b86c384d446cf768eceb7da9989963bf39","first_seen":"2025-07-27T10:34:55.50581Z","last_seen":"2026-07-16T06:14:34.078883Z","times_seen":160,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"trustpayenergy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"trustpayenergy.com/assets/main.js","fqdn":"trustpayenergy.com","domain":"trustpayenergy.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustpayenergy.com/","date":"2026-01-31T16:29:17.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpayenergy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 13:22:31 GMT","end":"Sun, 12 Apr 2026 14:19:14 GMT"},"fingerprint":{"sha1":"3B:CD:AD:77:57:E9:25:10:80:5C:B2:A6:D4:2A:FF:38:35:95:E8:CE","sha256":"C2:BD:98:98:5C:15:0B:2B:D3:84:87:09:1C:CC:82:02:30:49:BC:CF:9D:D0:2E:09:AB:2E:F0:97:F1:4D:14:AF"}}},"request":{"raw":"GET /assets/main.js HTTP/1.1\r\nHost: trustpayenergy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustpayenergy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 31 Jan 2026 16:29:18 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 22 Jan 2026 18:05:57 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2U%2FFb2%2BOy8dsl63yO%2Bsux3FoBvCbuMCmGk4fkOrdsFAS2tZSBarWvS1k4bv8JpimSEUm6zx5t4svvFLNNYkW5EVWmu80vd%2BYin4GNJJfw8wtSA%3D%3D\"}]}\r\netag: W/\"69726705-41bd9\"\r\ncontent-encoding: br\r\ncf-ray: 9c6a964b5bcb1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":269273,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (4614), with CRLF line terminators","md5":"804616e867b3165a3662ec4f1cfa58c8","sha1":"f29da82578563f20e8dbda74c87babf269c7a323","sha256":"df17f352d986b631d3a65c76c23bc1d04dea1e3feefc836870b24b9e97a06f44","sha512":"349e0ca285f489377baac9765d03fabdd6772ca1a3153082f3faacf1e009fe462d917a4fcb9e8361a6257dae78069e0c6d3cd303483c5927e0ab00d9416f1f37","ssdeep":"1536:uIIWVqoZrdqnvIIL0vSqc3c84B4U3S+ithPdDj8ZVB7FZ6g8aLQfROhTo:dIWVq7vIILQ36U396g8WZc","tlshash":"ac44d8a85427553c84ba377d9a135100fd31b397a188cab639bc8811affdd90c6d2fad","first_seen":"2026-01-31T13:48:43.353964Z","last_seen":"2026-01-31T16:29:44.083238Z","times_seen":2,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"trustpayenergy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"min-api.cryptocompare.com/data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD","fqdn":"min-api.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"20.4.130.154","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustpayenergy.com/","date":"2026-01-31T16:29:19.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"min-api.cryptocompare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 17:08:03 GMT","end":"Tue, 10 Mar 2026 17:08:02 GMT"},"fingerprint":{"sha1":"73:C7:4E:56:88:E5:CF:72:0E:94:F3:06:6D:8A:AF:FC:88:8A:F9:CD","sha256":"B6:54:2C:1C:36:F9:45:9B:A3:52:B9:CE:D7:F8:5D:38:C1:E3:7D:B8:C4:02:10:DD:4F:FE:6B:9C:3B:ED:4F:2A"}}},"request":{"raw":"GET /data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD HTTP/1.1\r\nHost: min-api.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trustpayenergy.com/\r\nOrigin: https://trustpayenergy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 31 Jan 2026 16:29:19 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Security-Policy: frame-ancestors 'none'\r\nAccess-Control-Allow-Origin: https://trustpayenergy.com\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type, Cookie, Set-Cookie, Authorization\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: public, max-age=10\r\nX-CryptoCompare-Cache-HIT: false\r\nX-CryptoCompare-Server-Id: cc-api-min-v2-09\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":151,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1799027eb971e59f42130a61e51052ae","sha1":"0cf1225d90a115f48d985c0fe5dd8e55d55333de","sha256":"c5323269c8c1199255f237e0b092f238a182b01999a9bba40cd0d38e5cf4bf10","sha512":"195d929ce9a0d2ac1e521df4089b9e0a18554ea78efae5b946fa14151a4e54908f607518021cb5061026585f8220fb9759b9359344149105f1dccee4baf14f75","ssdeep":"","tlshash":"27c09b889ddda1a463166d5738d4f5f1e4825424d7900544d0144d5decd815e59ce156","first_seen":"2026-01-31T16:29:44.084503Z","last_seen":"2026-01-31T16:29:44.084503Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":86,"dns":23,"connect":18,"send":0,"wait":29,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}