{"report_id":"d88b208b-4320-43a3-a60a-74a85718b755","version":0,"status":"done","tags":[],"date":"2026-08-07T11:55:24Z","url":{"schema":"https","addr":"cashpogo.com/","fqdn":"cashpogo.com","domain":"cashpogo.com","tld":"com"},"ip":{"addr":"104.21.36.159","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cashpogo.com/","fqdn":"cashpogo.com","domain":"cashpogo.com","tld":"com"},"title":"Cash Pogo","dom":{"size":105548,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7427)","md5":"19d07217fe2f6258cf2d1c99f389230b","sha1":"10328792dca73ce407c2cd371221f947fd1ec071","sha256":"b637ddc24ff7f28a2ad22d549b82aa719bbe8fa2700858badb5eb3a3549b5961","sha512":"3b1b67e9cfe63302e1167960829fb6e096ce1e503171a24d1c084e7ee9917243e6724925654c2bc97c8fb13089a09de86d69cc167d6dd6bcfccace5ad04e4e7f","ssdeep":"1536:kd/ghobRO0sb8wd/wPSBwbjkVljR9YRt68XjlwPI6yDyCtbQSGvnliHYk:kBght9/1Yk7I/dTyCtbtSiHh","tlshash":"73a32923b290113d70b38196a6a777ad35b99003e70689b4b56cb2688fc5ed70777fc8","dom_hash":"domhashc219b86ebd296ffb73bb1c0e404a2a78","first_seen":"2026-08-07T11:55:25.436757Z","last_seen":"2026-08-07T11:55:25.436757Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"cashpogo.com/","fqdn":"cashpogo.com","domain":"cashpogo.com","tld":"com"},"ip":{"addr":"104.21.36.159","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-11T11:55:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"cashpogo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashpogo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashpogo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cashpogo.com","ip":{"addr":"104.21.36.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-14","domain_rank":0,"first_seen":"2026-08-07T11:39:50.555448Z","last_seen":"2026-08-07T11:39:50.555448Z","alert_count":15,"request_count":5,"received_data":234985,"sent_data":2793,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":[{"level":"log","text":"[Аналитика] Сессия инициализирована: uid=анон | 2026-08-07T11:54:57.990Z","filename":"https://cashpogo.com/","line_number":991,"column_number":439},{"level":"log","text":"[Трекинг] Загрузка страницы: / (2026мс)","filename":"https://cashpogo.com/","line_number":991,"column_number":558}]},"http":[{"url":{"schema":"https","addr":"cashpogo.com/","fqdn":"cashpogo.com","domain":"cashpogo.com","tld":"com"},"ip":{"addr":"104.21.36.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-07T11:54:55.979Z","timestamp":1786103695979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashpogo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Jul 2026 18:27:04 GMT","end":"Mon, 12 Oct 2026 19:25:55 GMT"},"fingerprint":{"sha1":"AC:A8:3A:3E:6F:EF:11:EE:ED:DF:CA:45:2B:96:4F:B3:45:27:CF:25","sha256":"94:20:54:38:32:D0:3D:10:68:97:BE:71:86:D8:CD:24:2A:7A:F5:BE:6B:68:28:85:91:B6:6B:DA:9C:1D:83:BC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cashpogo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 11:54:57 GMT\r\npriority: u=0,i\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nset-cookie: _vid=msiw0xgyd17a9c69486d; Path=/; Max-Age=31536000; SameSite=Lax\n_fbc=fb.1.1786103697778.1586991651; Path=/; Max-Age=63072000; SameSite=Lax\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PYuTMo8tYdD3JX2ZndEnKaEBfnoZogyVH%2FPMXXY467n2ryjadAGRz5RddrxYY%2FGrE6u0uxwuXlqOIb0T19hxwht%2F1ck%2F5y3dU4JgwxRCnMptHqJbItI6Y%2BjWmLzMAqQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a27616e40bf056a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105369,"size_decoded":31734,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7373)","md5":"f97f8387f171cc45bdc2e4cf4a394ec8","sha1":"a8a5349b7cc5f7d2e17ae9adde75b0d94177c82c","sha256":"4eaf6a3a09e6427ef9bbf1b107dbd3b7f4a4a5e4d7a81bbb55ac1d644954d16e","sha512":"bdefa963d40a74e3c28732142d637f60a936c812777e9f58b1ff0c7e3c387e5dc34ce66ef55cc144ad4579ebedef2e8ac5ba5e2b59eb79a427b57e24503a348c","ssdeep":"1536:Bd/ghobAO0sb8wl/wPSBJbjkVljR9YRt68XjlwPI6yDyCtbQSGvnliHYy:BBghuF/1bk7I/dTyCtbtSiH/","tlshash":"0fa32923b290113d70b38196a6a777ad35b99013e30689b4b56cb2688fc5ed70777fc8","first_seen":"2026-08-07T11:55:25.437865Z","last_seen":"2026-08-07T11:55:25.437865Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1817,"timings":{"blocked":-1,"dns":8,"connect":16,"send":0,"wait":1789,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"cashpogo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashpogo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashpogo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashpogo.com/assets/InterVariable-subset.woff2","fqdn":"cashpogo.com","domain":"cashpogo.com","tld":"com"},"ip":{"addr":"104.21.36.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cashpogo.com/","date":"2026-08-07T11:54:57.973Z","timestamp":1786103697973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashpogo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Jul 2026 18:27:04 GMT","end":"Mon, 12 Oct 2026 19:25:55 GMT"},"fingerprint":{"sha1":"AC:A8:3A:3E:6F:EF:11:EE:ED:DF:CA:45:2B:96:4F:B3:45:27:CF:25","sha256":"94:20:54:38:32:D0:3D:10:68:97:BE:71:86:D8:CD:24:2A:7A:F5:BE:6B:68:28:85:91:B6:6B:DA:9C:1D:83:BC"}}},"request":{"raw":"GET /assets/InterVariable-subset.woff2 HTTP/1.1\r\nHost: cashpogo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashpogo.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _vid=msiw0xgyd17a9c69486d; _fbc=fb.1.1786103697778.1586991651\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 11:54:58 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g7HnqBKU8WAp4d2Jz2kWnpfcTh0MUK7bqKrqCanOTqr1pgFHykgNmG0WB%2Bt%2FB0yAdnL3SqhGkUrSz8ti4LLZEBqXHtOwJMjHvA%2BNQN9XQFazs2v3m5YYuQ5QJzxfu%2FU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a27616f05c3956a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 99732\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99732,"size_decoded":100363,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 99732, version 4.66","md5":"004dd38d15eda8a9214c41994beb8e97","sha1":"e40dfc111f30fc2a8f6160136625f020aecd5ca1","sha256":"6729dfb89cf8331936bba17c452d74207b5850c96d550e5ad8351db4aa97b287","sha512":"0b0d6d623ade27c159bcfb4882d523b403111171580f36f13cfec7fc0f4399818238305e9f116422e269bdff936deb20cc8a10ef6d45a25ed891ec5a4cff38f3","ssdeep":"3072:RPONyuVp0bPAs2JMNVxLSgISn4xiQoIaD:RkmAs2C31SgfyiQolD","tlshash":"92a312931c3ec6b06a61222580d8fffb858598aeb355f395c54c52e14baa394b423f73","first_seen":"2025-11-17T13:12:04.960091Z","last_seen":"2026-08-07T12:00:50.269614Z","times_seen":30,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"cashpogo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashpogo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashpogo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashpogo.com/assets/rock_back_compressedn43.webp","fqdn":"cashpogo.com","domain":"cashpogo.com","tld":"com"},"ip":{"addr":"104.21.36.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashpogo.com/","date":"2026-08-07T11:54:58.177Z","timestamp":1786103698177,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashpogo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Jul 2026 18:27:04 GMT","end":"Mon, 12 Oct 2026 19:25:55 GMT"},"fingerprint":{"sha1":"AC:A8:3A:3E:6F:EF:11:EE:ED:DF:CA:45:2B:96:4F:B3:45:27:CF:25","sha256":"94:20:54:38:32:D0:3D:10:68:97:BE:71:86:D8:CD:24:2A:7A:F5:BE:6B:68:28:85:91:B6:6B:DA:9C:1D:83:BC"}}},"request":{"raw":"GET /assets/rock_back_compressedn43.webp HTTP/1.1\r\nHost: cashpogo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashpogo.com/\r\nCookie: _vid=msiw0xgyd17a9c69486d; _fbc=fb.1.1786103697778.1586991651\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 11:54:58 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i\r\ncf-ray: a27616f19c4556a3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 936\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 07 Aug 2026 11:39:21 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JpTY6L0W%2FNJ%2FadBlfeSnekBIVk%2B6QCmS6hnbPUGg%2Bx5Cq0aI4WlvMW5ydqkNCRZkjfn0WQUYd%2B3KhVT7e6hFi%2FFTuMJSVJORNKN1h5YFakA7Xo0qI1T2gd3luSWO63I%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25064\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25064,"size_decoded":25796,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 950x475, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"13612f18018e0295c79d2642d620b6a3","sha1":"78dc58296f91cc57d5cf670703333f5b9b58b378","sha256":"e300c4cacd1c4da9a04c51ed2dc3526f226492b1b21848ebad66274b3568c0b7","sha512":"4b8e3da31ec759d21770b8707b817e1c23cf8a051cce42fb92354c7451c12a9b7056e948d077e2771c41d231739e34f9a02a632793bc3e3194fb2eac0b4b976c","ssdeep":"768:LuX+oqS6Y9z9oVb5QhG9a8Amw7IbEWA+jN0euS/4:SNqUz9thWAmSIo5+R0euS/4","tlshash":"8eb2e03252b94210fc933b68dd0a1d90d91fe813496b332f8f911d36999b9af541bcbb","first_seen":"2026-08-07T11:37:25.26655Z","last_seen":"2026-08-07T12:00:50.268945Z","times_seen":24,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashpogo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashpogo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"cashpogo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashpogo.com/api/analytics/event","fqdn":"cashpogo.com","domain":"cashpogo.com","tld":"com"},"ip":{"addr":"104.21.36.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cashpogo.com/","date":"2026-08-07T11:54:58.194Z","timestamp":1786103698194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashpogo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Jul 2026 18:27:04 GMT","end":"Mon, 12 Oct 2026 19:25:55 GMT"},"fingerprint":{"sha1":"AC:A8:3A:3E:6F:EF:11:EE:ED:DF:CA:45:2B:96:4F:B3:45:27:CF:25","sha256":"94:20:54:38:32:D0:3D:10:68:97:BE:71:86:D8:CD:24:2A:7A:F5:BE:6B:68:28:85:91:B6:6B:DA:9C:1D:83:BC"}}},"request":{"raw":"POST /api/analytics/event HTTP/1.1\r\nHost: cashpogo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 93\r\nOrigin: https://cashpogo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashpogo.com/\r\nCookie: _vid=msiw0xgyd17a9c69486d; _fbc=fb.1.1786103697778.1586991651\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":93,"data":"{\"event\":\"page_view\",\"userId\":\"\",\"properties\":{\"page\":\"/\",\"referrer\":\"\",\"title\":\"Cash Pogo\"}}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 11:54:58 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: application/json\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zmjS%2FEJ82GCa2SaxqScSagX57%2F94pyCktuiOF0cXEhJgwyAn0sDmUV1xExCYTKCDSaegGtu5JRl4uE3hx13TU3OPsqMSvP9mDDDKUKkHGyH9eotuPeVjxXNg2oXo%2Fx4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a27616f1bc4756a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":559,"mime_type":"application/json","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-08-11T17:59:15.878387Z","times_seen":18173,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashpogo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"cashpogo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashpogo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashpogo.com/assets/favicon.svg","fqdn":"cashpogo.com","domain":"cashpogo.com","tld":"com"},"ip":{"addr":"104.21.36.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashpogo.com/","date":"2026-08-07T11:54:58.209Z","timestamp":1786103698209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashpogo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Jul 2026 18:27:04 GMT","end":"Mon, 12 Oct 2026 19:25:55 GMT"},"fingerprint":{"sha1":"AC:A8:3A:3E:6F:EF:11:EE:ED:DF:CA:45:2B:96:4F:B3:45:27:CF:25","sha256":"94:20:54:38:32:D0:3D:10:68:97:BE:71:86:D8:CD:24:2A:7A:F5:BE:6B:68:28:85:91:B6:6B:DA:9C:1D:83:BC"}}},"request":{"raw":"GET /assets/favicon.svg HTTP/1.1\r\nHost: cashpogo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashpogo.com/\r\nCookie: _vid=msiw0xgyd17a9c69486d; _fbc=fb.1.1786103697778.1586991651\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TiLYMsnB%2Fn3mKzBr%2FN6I4gMa57bq%2B21kO%2BGSbf6RQQO80Y6hF8qszq0q9xDOVWh0Qha8lP9QePqX8Bg4T%2B1UQ07ENr3HLjKk0cCWFD9t9wSepm5a4dPfy53J2Sxj428%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 11:54:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a27616f1cc4956a3-OSL\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\naccess-control-allow-origin: *\r\nage: 936\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 07 Aug 2026 11:39:22 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1468,"size_decoded":1490,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50679c0c5e3ed56d05c1d0ed312419a7","sha1":"f9ea27ac71a78da2d61e14b84ea77ce447920d9d","sha256":"c164e1ea36438d14fea9b88996d154275a4c92fd80bfa082c7e00a343f241147","sha512":"163d4097d60ecdcf58cd01ea828e74491b0e27fcf3d40a2e7c56e6c90042d6d9a9b6cb18825052caf8799836ad35a44c1c88ffd2c35ce5d888d23716c27dd0f4","ssdeep":"","tlshash":"a4312e9e77fea185f448e7f8023999b932d36cd33a04d8282bc00c02e98091e9c9588b","first_seen":"2025-09-26T11:40:39.971586Z","last_seen":"2026-08-11T05:02:09.235311Z","times_seen":22146,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashpogo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"cashpogo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"cashpogo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}