{"report_id":"dc4ee774-0c9b-4a6b-abaa-b00d2bc9fa2f","version":0,"status":"done","tags":["paypal","phishing","financial"],"date":"2026-07-29T14:44:08Z","url":{"schema":"https","addr":"paypal.myproccesing.com/","fqdn":"paypal.myproccesing.com","domain":"myproccesing.com","tld":"com"},"ip":{"addr":"172.67.166.34","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"paypal.myproccesing.com/anmelden","fqdn":"paypal.myproccesing.com","domain":"myproccesing.com","tld":"com"},"title":"Bei PayPal einloggen","dom":{"size":4469,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (346)","md5":"5da5abe6cff555e19df6c27d4e29530b","sha1":"bc058da60e516c0855e3fa895b31174fb483c0dc","sha256":"3125f42350eb98bf65b32943cd73482ee8e50f66b1e7f27f3549a86e1733393d","sha512":"d48aff01fd9c00704bbfaf9adc56f93998a7311ea79796e07271516717116c12a69d835e3e012d44ee2b10a235da51933e4c5390e0f932c0304f4c4982d89aa9","ssdeep":"48:zpeA0jXxyq0KN3F3A8YaRV7fHyUvugLI4rYYkzJufHni4yjQBsoQvug3:zgA0jZ1Ys7fyUvuI7YY2Ju/i4y8W","tlshash":"4e91221060f4596742428189b9906b1bbfcac613ca095e0473fc0ade4febec7dd9706a","dom_hash":"domhash4cad6648a3c4753cbe617baa8b945f48","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"paypal.myproccesing.com/","fqdn":"paypal.myproccesing.com","domain":"myproccesing.com","tld":"com"},"ip":{"addr":"172.67.166.34","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-02T14:44:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"paypal.myproccesing.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"paypal.myproccesing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"paypal.myproccesing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]},"summary":[{"fqdn":"paypal.myproccesing.com","ip":{"addr":"172.67.166.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-26","domain_rank":0,"first_seen":"2026-07-29T04:03:21.618105Z","last_seen":"2026-07-29T04:03:21.618105Z","alert_count":40,"request_count":10,"received_data":211272,"sent_data":5329,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.12","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"paypal.myproccesing.com/assets/challenge.js","fqdn":"paypal.myproccesing.com","domain":"myproccesing.com","tld":"com"},"ip":{"addr":"172.67.166.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4831e411863baf4560885d48812c586b","sha1":"77848250817782eb997949f6bd392d9fa159ef17","sha256":"ae6a2f3f5eb011e3b438f6ecaefaf0a809cd5643b9c2f97b4f331a7239f1c0be","sha512":"68ffa7b7325d17a40bfa3c2ea05c4a267b2dbb9f76ff247db91aff0f04027e6214a0e1ab0e1255a3040bd3c21ea644c229bb2e37ed296324870b98c82eb71bf1","ssdeep":"96:NKSN2mGS87GFq7jqgWmm3KbPito5ydu8EUNblmwdRll/Akmr1u5C/Nk/i4KjAiA0:wSN2J7Kq8UKt8+R7bA4LmAiAlW7Jlv","tlshash":"4e42cc9eb852216985b3b37e8fab4108ff770577048687103dac90805f71929a776fec","size":12967,"data":"","first_seen":"2026-07-29T04:03:28.462693Z","last_seen":"2026-07-29T15:03:33.255913Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypal.myproccesing.com/assets/signin.js","fqdn":"paypal.myproccesing.com","domain":"myproccesing.com","tld":"com"},"ip":{"addr":"172.67.166.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c1de04ee88820402f24b37cfe0054a8","sha1":"091524a05494ae571d5a853c4462b5a273a796ab","sha256":"2d024c3545e264e84692aa027e982ccee2b1d6d9d5ab9e3b6fbb72f150218eb8","sha512":"3e99f483b3f5cc48b4c24c05c6c0d241da4f671315479fc3ee7c52997394a1cb27cd7ba279798dc18de0831fc9ae77a27b21870d8e4731812d94b0c8ff8f2224","ssdeep":"192:v8vclj8mh23mrtUnLhwTxAro16noqoMW09rpZL9O+nksmYPxAx5xE5pkd:v80YCGnLjfPBW09rfLQJYpG3E5pu","tlshash":"473276e979e331b34aa7707d6bef5244363280130849ca117d6cc2489f90d766bb9fe9","size":11129,"data":"","first_seen":"2026-07-29T04:03:28.455761Z","last_seen":"2026-07-29T15:03:33.258898Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"paypal.myproccesing.com/paypalobjects.com/paypal-ui/fonts/PayPalPlain-Medium.woff2","fqdn":"paypal.myproccesing.com","domain":"myproccesing.com","tld":"com"},"ip":{"addr":"172.67.166.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paypal.myproccesing.com/anmelden","date":"2026-07-29T14:43:42.445Z","timestamp":1785336222445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myproccesing.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 23:24:16 GMT","end":"Sat, 24 Oct 2026 00:22:46 GMT"},"fingerprint":{"sha1":"3A:9E:BB:2F:A3:57:94:01:3D:29:B1:BF:55:4E:D8:C2:FD:B7:DB:36","sha256":"62:34:18:2D:4C:F0:5C:C6:D7:BA:86:86:94:32:79:EE:F5:FC:E7:22:D4:E0:78:29:AE:E8:7C:56:6D:EB:71:AA"}}},"request":{"raw":"GET /paypalobjects.com/paypal-ui/fonts/PayPalPlain-Medium.woff2 HTTP/1.1\r\nHost: paypal.myproccesing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal.myproccesing.com/paypalobjects.com/paypal-ui/web/fonts-and-normalize/3-0-0/fonts-and-normalize.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 14:43:42 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Jul 2026 10:28:06 GMT\r\netag: \"134df-65758d4037980\"\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A99iDk5JuhYClOiURgf%2BBvIyC4ll%2FzOQ6%2FjgiNTF2LyqysehTJbRle9wsNataCGmBJczLAo6JMCxxEULIzEqARpP61UuP5qQFHb4Tl5wrhYjTOA%2BQfw1LfVRu67e0zB5VkQuorXRODaqkA%3D%3D\"}]}\r\ncontent-type: font/woff2\r\nage: 32\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a22ce5be48825fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 79071\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79071,"size_decoded":79794,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 79071, version 3.0","md5":"f20626137a7c35b4c8139818adbedf42","sha1":"0cc4f18ccfa7069c7cc594d4b2f97040fd9978d6","sha256":"40d45ad6af6cf938faace7293792b689ec69b74fe6094d8a16937448835b2bb3","sha512":"e310439833950ae8fdf85d1b51b788f630ba0af3ce8334251487a06324f6e33b192845bff883f80778a6bf2c77252d2df8c27eb21bb60f2fbd12bdda8906f0f7","ssdeep":"1536:5LcR7mr7kDR5GnrchHDqf0hEJtjJ091AF9TM5S4J3dS24/Zg6qTLUx48851W:5LcR727kuw5Dqf0qNO2/oS454Bg6+UxL","tlshash":"fb731212504637afdf779bce4b019dbdd8835c18a7a3bc58f0c06675599a893050fe1d","first_seen":"2025-01-30T14:33:39.503197Z","last_seen":"2026-07-29T15:03:33.253451Z","times_seen":706,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"paypal.myproccesing.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"paypal.myproccesing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"paypal.myproccesing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"paypal.myproccesing.com/","fqdn":"paypal.myproccesing.com","domain":"myproccesing.com","tld":"com"},"ip":{"addr":"172.67.166.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-29T14:43:41.991Z","timestamp":1785336221991,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myproccesing.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 23:24:16 GMT","end":"Sat, 24 Oct 2026 00:22:46 GMT"},"fingerprint":{"sha1":"3A:9E:BB:2F:A3:57:94:01:3D:29:B1:BF:55:4E:D8:C2:FD:B7:DB:36","sha256":"62:34:18:2D:4C:F0:5C:C6:D7:BA:86:86:94:32:79:EE:F5:FC:E7:22:D4:E0:78:29:AE:E8:7C:56:6D:EB:71:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: paypal.myproccesing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ndate: Wed, 29 Jul 2026 14:43:42 GMT\r\nserver: cloudflare\r\nx-powered-by: PHP/8.2.12\r\nlocation: /anmelden\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uKk8L18qAttTAREsY0cu6wCsga3hQA0mon5Yi6MqZR%2B5tj65frqGHNq7ABrAQxf5G6KGMbhvld%2BBhNRe%2B3jOismjyXcbRUYyK8Gve%2FVD8bYpv%2B0Q4fHjW3RCevdsqG1o4AD%2FkLrIs%2F6XvA%3D%3D\"}]}\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a22ce5bb985e5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.12","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T17:16:36.359793Z","times_seen":17601608,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":9,"connect":15,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"paypal.myproccesing.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"paypal.myproccesing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"paypal.myproccesing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"paypal.myproccesing.com/assets/signin.js","fqdn":"paypal.myproccesing.com","domain":"myproccesing.com","tld":"com"},"ip":{"addr":"172.67.166.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paypal.myproccesing.com/anmelden","date":"2026-07-29T14:43:42.408Z","timestamp":1785336222408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myproccesing.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 23:24:16 GMT","end":"Sat, 24 Oct 2026 00:22:46 GMT"},"fingerprint":{"sha1":"3A:9E:BB:2F:A3:57:94:01:3D:29:B1:BF:55:4E:D8:C2:FD:B7:DB:36","sha256":"62:34:18:2D:4C:F0:5C:C6:D7:BA:86:86:94:32:79:EE:F5:FC:E7:22:D4:E0:78:29:AE:E8:7C:56:6D:EB:71:AA"}}},"request":{"raw":"GET /assets/signin.js HTTP/1.1\r\nHost: paypal.myproccesing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal.myproccesing.com/anmelden\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 14:43:42 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 28 Jul 2026 22:58:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qlk4RnPTpSCKQqoGTKpA6423z%2BbS%2FZZ8sraK%2BgGdcjKRe%2BAs9TmRVRBHhPjyIfIUhezdxwRTfliecDa3UaPmiCAYVB1nDwh0AcKuHrW2nR9IFqMY0pdF4AtK9JbJ8Oq86RHAmM4ndWAvKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\netag: W/\"2b79-657b3c7bbcc80\"\r\ncontent-type: text/javascript\r\nage: 32\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a22ce5be087e5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11129,"size_decoded":3468,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"5c1de04ee88820402f24b37cfe0054a8","sha1":"091524a05494ae571d5a853c4462b5a273a796ab","sha256":"2d024c3545e264e84692aa027e982ccee2b1d6d9d5ab9e3b6fbb72f150218eb8","sha512":"3e99f483b3f5cc48b4c24c05c6c0d241da4f671315479fc3ee7c52997394a1cb27cd7ba279798dc18de0831fc9ae77a27b21870d8e4731812d94b0c8ff8f2224","ssdeep":"192:v8vclj8mh23mrtUnLhwTxAro16noqoMW09rpZL9O+nksmYPxAx5xE5pkd:v80YCGnLjfPBW09rfLQJYpG3E5pu","tlshash":"473276e979e331b34aa7707d6bef5244363280130849ca117d6cc2489f90d766bb9fe9","first_seen":"2026-07-29T04:03:28.455761Z","last_seen":"2026-07-29T15:03:33.258898Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"paypal.myproccesing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"paypal.myproccesing.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"paypal.myproccesing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"paypal.myproccesing.com/paypalobjects.com/paypal-ui/logos/svg/paypal-wordmark-color.svg","fqdn":"paypal.myproccesing.com","domain":"myproccesing.com","tld":"com"},"ip":{"addr":"172.67.166.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paypal.myproccesing.com/anmelden","date":"2026-07-29T14:43:42.427Z","timestamp":1785336222427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myproccesing.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 23:24:16 GMT","end":"Sat, 24 Oct 2026 00:22:46 GMT"},"fingerprint":{"sha1":"3A:9E:BB:2F:A3:57:94:01:3D:29:B1:BF:55:4E:D8:C2:FD:B7:DB:36","sha256":"62:34:18:2D:4C:F0:5C:C6:D7:BA:86:86:94:32:79:EE:F5:FC:E7:22:D4:E0:78:29:AE:E8:7C:56:6D:EB:71:AA"}}},"request":{"raw":"GET /paypalobjects.com/paypal-ui/logos/svg/paypal-wordmark-color.svg HTTP/1.1\r\nHost: paypal.myproccesing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal.myproccesing.com/anmelden\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 14:43:42 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Jul 2026 10:32:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WPKFK0mLHC8PE78YFH18rNJ6GuA2LBoOIlfmoHE%2BvtOoCk%2FzSGYM0BshKbLlDU4Jjpb%2Ft5Zmzje408GKacA3bSr7bcwpihD1z4qx75Z5D19lBA735hyh4wxKVIsoXjfX4gqbPzsytCmS7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncontent-encoding: zstd\r\netag: W/\"8f3-65758e3fcd480\"\r\ncontent-type: image/svg+xml\r\nage: 32\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a22ce5be28805fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2291,"size_decoded":1508,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b40b8498ed9de0b5cc68df968183c833","sha1":"276409ef0de6ff80af749877a5f650db78f7804a","sha256":"f766ba6d9471acc787c0808b8c30f38494d12b287ccfb2ff610fd617cfa2a432","sha512":"a79c51326b7c6bb1e694f5c85041b6ee014e8a7fb123996d070f8acd744529f06420d5d751bf1d808e40a833ed9b21c48e2a6ad8b9d340e46e9cf2a293915d45","ssdeep":"","tlshash":"c241f2e2a214e39829178a54ce7250e0165ff4fef7af33a191bf5b70a0425e0ca11e74","first_seen":"2024-09-19T18:53:11Z","last_seen":"2026-07-29T15:03:33.256665Z","times_seen":644,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"paypal.myproccesing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"paypal.myproccesing.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"paypal.myproccesing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"paypal.myproccesing.com/paypalobjects.com/paypal-ui/fonts/PayPalPlain-Regular.woff2","fqdn":"paypal.myproccesing.com","domain":"myproccesing.com","tld":"com"},"ip":{"addr":"172.67.166.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paypal.myproccesing.com/anmelden","date":"2026-07-29T14:43:42.443Z","timestamp":1785336222443,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myproccesing.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 23:24:16 GMT","end":"Sat, 24 Oct 2026 00:22:46 GMT"},"fingerprint":{"sha1":"3A:9E:BB:2F:A3:57:94:01:3D:29:B1:BF:55:4E:D8:C2:FD:B7:DB:36","sha256":"62:34:18:2D:4C:F0:5C:C6:D7:BA:86:86:94:32:79:EE:F5:FC:E7:22:D4:E0:78:29:AE:E8:7C:56:6D:EB:71:AA"}}},"request":{"raw":"GET /paypalobjects.com/paypal-ui/fonts/PayPalPlain-Regular.woff2 HTTP/1.1\r\nHost: paypal.myproccesing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal.myproccesing.com/paypalobjects.com/paypal-ui/web/fonts-and-normalize/3-0-0/fonts-and-normalize.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 14:43:42 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Jul 2026 10:28:06 GMT\r\netag: \"1346b-65758d4037980\"\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2BE%2F3yewW30%2FHMY%2F%2BQrUlXH7ujmIxRu%2FLrvTuQfgoN6bmWKwobVnyef09R9YDcdWMdREPPZNUjvAe9FVNUa3lWZLOmxhWk05PV7RX3wL04jLSe88ERS9%2FL1SVZ36VnEbGOKaRAE7iLPWBA%3D%3D\"}]}\r\ncontent-type: font/woff2\r\nage: 32\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a22ce5be48815fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 78955\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78955,"size_decoded":79684,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78955, version 3.0","md5":"afe2ea4593d557778a6745189d105813","sha1":"96f1146d3c3701cf9e8766116fba86208e790cfc","sha256":"a20a102a390a5bb64688bb61f6545f2732ed64d8c9543deaea16152c61e6db51","sha512":"43a0aebf7bde4a7785e9628b229ff85e103b2cbe1424cca03b424ba1d71ae49050241eb1832a1b1cfb26808cf8ed96214613e0d08ed93627627a0917bd8b9965","ssdeep":"1536:fMxzqeba6YkqPemHTL+9BVct6agiDI+UfY+PNSRzKQZjnSPATt:fMQ6YAknMXPNbQZewt","tlshash":"0e73126cbb4a05221cc52c7141573613032d369ef0e1b6d6838e25cfeeaa04df45aeaf","first_seen":"2025-01-30T14:33:39.512477Z","last_seen":"2026-07-29T15:03:33.259467Z","times_seen":719,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"paypal.myproccesing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"paypal.myproccesing.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"paypal.myproccesing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"paypal.myproccesing.com/paypalobjects.com/en_US/i/icon/pp_favicon_x.ico","fqdn":"paypal.myproccesing.com","domain":"myproccesing.com","tld":"com"},"ip":{"addr":"172.67.166.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paypal.myproccesing.com/anmelden","date":"2026-07-29T14:43:42.463Z","timestamp":1785336222463,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myproccesing.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 23:24:16 GMT","end":"Sat, 24 Oct 2026 00:22:46 GMT"},"fingerprint":{"sha1":"3A:9E:BB:2F:A3:57:94:01:3D:29:B1:BF:55:4E:D8:C2:FD:B7:DB:36","sha256":"62:34:18:2D:4C:F0:5C:C6:D7:BA:86:86:94:32:79:EE:F5:FC:E7:22:D4:E0:78:29:AE:E8:7C:56:6D:EB:71:AA"}}},"request":{"raw":"GET /paypalobjects.com/en_US/i/icon/pp_favicon_x.ico HTTP/1.1\r\nHost: paypal.myproccesing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal.myproccesing.com/anmelden\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 14:43:42 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 25 Jul 2026 18:35:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e4fXi4uHIlmT23INKBuhS3aNJlCJDxcMKX0XJsEodwBpCOc3DO5Z1TrvRnpka5VBNefm23eYhSGuDzCnaLFUXPjyEki0SyoKJVZxPDxCKa3LQuM1rAEsBw6oQu9Mik%2B8T5RO%2Bs2l1VyUxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncontent-encoding: zstd\r\netag: W/\"1536-65773c0d05c00\"\r\ncontent-type: image/x-icon\r\nage: 32\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a22ce5be68845fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5430,"size_decoded":2157,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 32x32, 32 bits/pixel, 16x16, 32 bits/pixel","md5":"e1528b5176081f0ed963ec8397bc8fd3","sha1":"ff60afd001e924511e9b6f12c57b6bf26821fc1e","sha256":"1690c4e20869c3763b7fc111e2f94035b0a7ee830311dd680ac91421daad3667","sha512":"acf71864e2844907752901eeeaf5c5648d9f6acf3b73a2fb91e580bee67a04ffe83bc2c984a9464732123bc43a3594007691653271ba94f95f7e1179f4146212","ssdeep":"48:++/pSKnJ/3cCXndBlr9aPZ0M0V+2hDTGlpFRlcPgCOfU:+ASKJPcCXjgZ03Gre9","tlshash":"18b1dc641694e0d8d690567ed3bcd9fbc415de02e9a50bcf078dfdba77340a0a0c6887","first_seen":"2023-04-06T18:53:38Z","last_seen":"2026-07-29T15:03:33.257249Z","times_seen":1574,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"paypal.myproccesing.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"paypal.myproccesing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"paypal.myproccesing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"paypal.myproccesing.com/anmelden","fqdn":"paypal.myproccesing.com","domain":"myproccesing.com","tld":"com"},"ip":{"addr":"172.67.166.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-29T14:43:42.107Z","timestamp":1785336222107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myproccesing.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 23:24:16 GMT","end":"Sat, 24 Oct 2026 00:22:46 GMT"},"fingerprint":{"sha1":"3A:9E:BB:2F:A3:57:94:01:3D:29:B1:BF:55:4E:D8:C2:FD:B7:DB:36","sha256":"62:34:18:2D:4C:F0:5C:C6:D7:BA:86:86:94:32:79:EE:F5:FC:E7:22:D4:E0:78:29:AE:E8:7C:56:6D:EB:71:AA"}}},"request":{"raw":"GET /anmelden HTTP/1.1\r\nHost: paypal.myproccesing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 14:43:42 GMT\r\nserver: cloudflare\r\nx-powered-by: PHP/8.2.12\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z2z2PhLs3SLDEo2erPzqJKIuqS9XU74YPPhwU1ghx4LBNx55S9yn%2B5hEVLG6taWffk7yzpB54FmU4CkuPokrbKvyy213%2BtPdpkm0O6yE8tY3J75UBSp3ZdZ4y8qwl2myLD2SYlaucGrwWw%3D%3D\"}]}\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a22ce5bc28685fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.12","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":4505,"size_decoded":2112,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"535022b70ef9e369e498a6bd504f27da","sha1":"d82c72fcda3d689b0243e86356f082d4e514db34","sha256":"0c97cd637ff454bc88532c381561870594aebbad426b410c9a588e5d1141d505","sha512":"fb4ecff8f747b9e02fc0161938a9d03933ada9553a37412bbf4325dde4a9caebc0be088a424580e6d914ef9cfd95f9c2ea4d72dfdd067df64ab511bd945e1df2","ssdeep":"48:tup0AhPBER4N3F3A8Yqw3Q7fHyUvugLI4hpJufH+i4yjQBsoQvumiTq:o+AhPJ1Yk7fyUvuIRpJuWi4y8S","tlshash":"0891211050f45c6b439181997d916a1abf8ad253c60a2a0473fc0adf0ffbfc78d9706a","first_seen":"2026-07-29T04:03:28.471027Z","last_seen":"2026-07-29T15:03:33.254151Z","times_seen":6,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"paypal.myproccesing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"paypal.myproccesing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"paypal.myproccesing.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"paypal.myproccesing.com/paypalobjects.com/paypal-ui/web/fonts-and-normalize/3-0-0/fonts-and-normalize.min.css","fqdn":"paypal.myproccesing.com","domain":"myproccesing.com","tld":"com"},"ip":{"addr":"172.67.166.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paypal.myproccesing.com/anmelden","date":"2026-07-29T14:43:42.400Z","timestamp":1785336222400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myproccesing.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 23:24:16 GMT","end":"Sat, 24 Oct 2026 00:22:46 GMT"},"fingerprint":{"sha1":"3A:9E:BB:2F:A3:57:94:01:3D:29:B1:BF:55:4E:D8:C2:FD:B7:DB:36","sha256":"62:34:18:2D:4C:F0:5C:C6:D7:BA:86:86:94:32:79:EE:F5:FC:E7:22:D4:E0:78:29:AE:E8:7C:56:6D:EB:71:AA"}}},"request":{"raw":"GET /paypalobjects.com/paypal-ui/web/fonts-and-normalize/3-0-0/fonts-and-normalize.min.css HTTP/1.1\r\nHost: paypal.myproccesing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal.myproccesing.com/anmelden\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 14:43:42 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 25 Jul 2026 18:35:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nckMUi5uB4N5yC5hoX0uQe2XqSgpDG85gSt4xCWCAZWB%2F5xHrjx01qN4pcc%2Bm6RZP41iTPBqgHVVpmZ0Z%2BqrpKQ3PCHUMuMx5r7Nh1rSseFvn0RIxfa1lUWgILlT7HWc5DcVrr%2Bp1Xd74A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\netag: W/\"c09-65773c0b1d780\"\r\ncontent-type: text/css\r\nage: 32\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a22ce5be087b5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3081,"size_decoded":1765,"mime_type":"text/css","magic":"ASCII text","md5":"4c1501078f7e1ed146d15edfa19baeb1","sha1":"b30414f3ac6bb8baab53832e89131f425eb3cf14","sha256":"8bb2ff8421cf8c3bf5ba02e4d8667d26855f7d5b8a1fa1d4c36954f488376e39","sha512":"a28ba268277475e163df3a43cdf2f2ec54ecbee09e1a6271e62b723096d5651e89fd78fd0fcfcbd5f85cbfbe645ee51f2f3e13e288dcbb76b158cb24b9580de2","ssdeep":"","tlshash":"d4511da845e21e80b7924d1d77cf6f107a240027091dfcb5baa5a698cfdb97356c238f","first_seen":"2026-07-29T04:03:28.47386Z","last_seen":"2026-07-29T15:03:33.258235Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"paypal.myproccesing.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"paypal.myproccesing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"paypal.myproccesing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"paypal.myproccesing.com/assets/signin.css","fqdn":"paypal.myproccesing.com","domain":"myproccesing.com","tld":"com"},"ip":{"addr":"172.67.166.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paypal.myproccesing.com/anmelden","date":"2026-07-29T14:43:42.405Z","timestamp":1785336222405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myproccesing.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 23:24:16 GMT","end":"Sat, 24 Oct 2026 00:22:46 GMT"},"fingerprint":{"sha1":"3A:9E:BB:2F:A3:57:94:01:3D:29:B1:BF:55:4E:D8:C2:FD:B7:DB:36","sha256":"62:34:18:2D:4C:F0:5C:C6:D7:BA:86:86:94:32:79:EE:F5:FC:E7:22:D4:E0:78:29:AE:E8:7C:56:6D:EB:71:AA"}}},"request":{"raw":"GET /assets/signin.css HTTP/1.1\r\nHost: paypal.myproccesing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal.myproccesing.com/anmelden\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 14:43:42 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 28 Jul 2026 22:58:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Su3odyOOXg6dZAVD1bHsJuODU%2B7g%2Bysm%2Bs3Vrtz9DLZMfV4NhztWjocapeO5yB5fcxtIzkuzCF8y3qcuHeBfcvaHISWKN1csYOVOG%2BEbPjgtt28J7lRraX%2BBZm1%2BuOKvkckfNZi11Iz%2B7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\netag: W/\"1af0-657b3c7bbcc80\"\r\ncontent-type: text/css\r\nage: 32\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a22ce5be087c5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6896,"size_decoded":2339,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6769f34e5ee6b214e3022f9fe297c474","sha1":"f2aa52f01a9cb5f7bbcf643b64b0a784811d2b2e","sha256":"cca2985e65f9094a664f0d8a775c9f495879e3b84d29a540b2cd23adc7b1318e","sha512":"20e91199c2746b0a1b794264faba49177e8319da17a3cc3cc362a9e808bb5df43246de22ecab8eca570501292a76bd170549e9323339192f1032fd3c4a96023c","ssdeep":"96:jiz+rocRPoR//Nj3oPFyExoS+wzogOus/pS5I7ugtR0oMnoU:j8+khVNMtyECS+wcgOus/QI7xtRvMoU","tlshash":"bee1bb34e6453187a33b8ab5bba25655fb4450136343923cbbcd2240cffa27957a2f9c","first_seen":"2026-07-29T04:03:28.476188Z","last_seen":"2026-07-29T15:03:33.254901Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"paypal.myproccesing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"paypal.myproccesing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"paypal.myproccesing.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"paypal.myproccesing.com/assets/challenge.js","fqdn":"paypal.myproccesing.com","domain":"myproccesing.com","tld":"com"},"ip":{"addr":"172.67.166.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paypal.myproccesing.com/anmelden","date":"2026-07-29T14:43:42.406Z","timestamp":1785336222406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myproccesing.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 23:24:16 GMT","end":"Sat, 24 Oct 2026 00:22:46 GMT"},"fingerprint":{"sha1":"3A:9E:BB:2F:A3:57:94:01:3D:29:B1:BF:55:4E:D8:C2:FD:B7:DB:36","sha256":"62:34:18:2D:4C:F0:5C:C6:D7:BA:86:86:94:32:79:EE:F5:FC:E7:22:D4:E0:78:29:AE:E8:7C:56:6D:EB:71:AA"}}},"request":{"raw":"GET /assets/challenge.js HTTP/1.1\r\nHost: paypal.myproccesing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal.myproccesing.com/anmelden\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 14:43:42 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 28 Jul 2026 22:58:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4cc6Tr4L36DE2nvqQYbErhO8fh%2F1qzNkAcerRTFq8e24RU47YPUxG38SNJiZSJ1E6YRR%2Fns3MCU%2FdE5N5olgFLsoHfr3y%2F2D2lnBgb%2B74Rivj56QzJ6yTiGFdlpgZBr%2F%2BCeXt%2FadARFayQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\netag: W/\"32ad-657b3c7bbcc80\"\r\ncontent-type: text/javascript\r\nage: 32\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a22ce5be087d5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12973,"size_decoded":4093,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"4831e411863baf4560885d48812c586b","sha1":"77848250817782eb997949f6bd392d9fa159ef17","sha256":"ae6a2f3f5eb011e3b438f6ecaefaf0a809cd5643b9c2f97b4f331a7239f1c0be","sha512":"68ffa7b7325d17a40bfa3c2ea05c4a267b2dbb9f76ff247db91aff0f04027e6214a0e1ab0e1255a3040bd3c21ea644c229bb2e37ed296324870b98c82eb71bf1","ssdeep":"96:NKSN2mGS87GFq7jqgWmm3KbPito5ydu8EUNblmwdRll/Akmr1u5C/Nk/i4KjAiA0:wSN2J7Kq8UKt8+R7bA4LmAiAlW7Jlv","tlshash":"4e42cc9eb852216985b3b37e8fab4108ff770577048687103dac90805f71929a776fec","first_seen":"2026-07-29T04:03:28.462693Z","last_seen":"2026-07-29T15:03:33.255913Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"paypal.myproccesing.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"paypal.myproccesing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"paypal.myproccesing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}}]}