{"report_id":"ea42f718-05dd-440c-978a-65170bb1e19a","version":6,"status":"done","tags":[],"date":"2026-05-27T01:00:58Z","url":{"schema":"https","addr":"pay-swift.com/","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"93.127.179.64","port":0,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"pay-swift.com/","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"title":"Home - PAY-SWIFT","dom":{"size":49919,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (477)","md5":"fe7681d7d62b3e4cd07024df4aa5bf97","sha1":"353a9c726f9522cfd8fce2ba670cd4f8e61f58b5","sha256":"09745fc666cf1781b4f37aa12fac8d1cbb3aa1627a14aa264d0864d79ae7b6d9","sha512":"2aac2825f9345487be1ed4d898b8cbfa44aea9848aba44dcec5fab729b2f1d69e17958107eddbea6a26645716e50a8fd886be721fd0d1c07be05947786de1e90","ssdeep":"768:DNB6LlIttUPqn7gTSkG5MD4XL6oA+XPNJ+1UN4M:CYUPqnMSFku6oA+XPNJ+1UN4M","tlshash":"ff23623294e81437021342c53961370daaab9d37da2fc991b6ff8b586fd3c85ed1325a","dom_hash":"domhasha4d9e2a4c842e23c1008ff9606081e10","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"pay-swift.com/","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"93.127.179.64","port":0,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-01T01:00:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-24T22:42:04.857446Z","alert_count":0,"request_count":1,"received_data":111215,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-05-21T22:06:54.783266Z","alert_count":0,"request_count":1,"received_data":18549,"sent_data":418,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"3.127.10.164","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-05-21T22:08:13.135698Z","alert_count":0,"request_count":1,"received_data":379,"sent_data":519,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-24T22:18:17.447529Z","alert_count":0,"request_count":6,"received_data":280136,"sent_data":3258,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pay-swift.com","ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-12-23","domain_rank":0,"first_seen":"2025-09-22T07:38:23.397352Z","last_seen":"2026-05-26T18:08:23.373548Z","alert_count":114,"request_count":57,"received_data":3355203,"sent_data":34512,"comment":"","tags":null,"fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.6.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-05-24T23:26:38.648917Z","alert_count":0,"request_count":1,"received_data":90251,"sent_data":421,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-24T22:21:07.624228Z","alert_count":0,"request_count":2,"received_data":36044,"sent_data":1038,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pay-swift.com/hcdn-cgi/jschallenge","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"693bea2833800e7d1634a8e82de201e7","sha1":"ca4c968a9d74d483a94cfdf379f05f78682de140","sha256":"ddf9ad1e778c74864e537f701249f38ad5e76b231ebfa76f6e956be25180b41b","sha512":"a670af46c4761c17b80c293d31f6c180a08167018e33863c06716d4b252e5e56bfe21eb118ed8f86271fbfbbfca2e8ed8d2aaff36d98b394447ba8184563aa25","ssdeep":"","tlshash":"13c02b314fb380206c1087c400c3003cc4b2013e318fdde2ac8c00f186c3d47000ac04","size":135,"data":"","first_seen":"2026-05-26T18:08:25.068959Z","last_seen":"2026-05-27T01:01:04.058911Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/appear.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbbd68c06c9cdb2481b7050f6e64375e","sha1":"1ee3d2e29b6279f1986cd878072780d596250878","sha256":"4aded4f99d9aa82ccf099bfc6ddb735e25a6de44a124791c1e258cd05daee11c","sha512":"4de42f78a6ab93d9dce738e73c7dd889e7ffeea3dc01f8e09055b6eab195d1a759fbc502ecadeeeead6ec9be7fdcdededd440e154ee7e9742d77ff1a2fd48fac","ssdeep":"48:Yo3dwd2k3yV5egTkYRSdaMxlehOBOrMR6nZNBFxDNE9l92bA4FS4flyu:X3/skfRwbDOrdfFjg/2cmVflyu","tlshash":"48910e0a79eb1ab54877713e8fafa2442231503b2202d8113ceddf6c6fa1c64a597fd4","size":4228,"data":"","first_seen":"2023-03-07T12:11:58Z","last_seen":"2026-07-23T06:20:42.470089Z","times_seen":5162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/jquery.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97163,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-23T18:41:05.916981Z","times_seen":83264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/bootstrap.min.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"cabc5d07dec4c381f521bbcd41c009db","sha1":"ca329d086682a4d75b5528d326a66a6d3fffab13","sha256":"2909d4fa86cf09191e768576e1a6eab7f2635a2627549c45d29595ffac9c0da9","sha512":"66f6e36c99f2b57f526b4dff01c6cffe787d2bde6d6abe11d080314d2da08760a18889de7ebd6bec4a675429694d650437b55aaef12c1f7aaebe463587474016","ssdeep":"768:+hkw5E0MWirtTVU4t8GMqm7MT8VbdPyqzgqqqLWpeki3iMFpnkIID0Jhp6zvsv1z:+Z2TTktMqTiaDkIxIzcn","tlshash":"ef538249b254787206df747a817b460bb73a2899a046813cb97ad8dd1f7cc893173fb8","size":62411,"data":"","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-07-23T06:20:42.461173Z","times_seen":2515,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/owl.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"54428880ec8df798ac3d666f5113c7ff","sha1":"9e43e74b8677f39e87f1b11be4d536c618b14bb3","sha256":"0402874ff311f284b18af9e4c453ee5bf0916a3b7335f0be52dcb54a1a31338b","sha512":"abceb872c8942d366a533c0c572e0e6e31d1b428ad2bc6fa1e746fd31811b6f8dfcd77814723adf44e1a8585436b511097576159b8eab40706b025e3158eda24","ssdeep":"1536:/PLoreUScogMjVNPP8aLMBJk8u9hKt1o619IYj1oJ0SQIOZ:/fHNPP/qJ9BoC9XplIOZ","tlshash":"e48383c5f36c261b422a31785e9e23ce713d412ad91118af7ca4e9dc28d546c836eff9","size":85303,"data":"","first_seen":"2023-03-07T01:10:42Z","last_seen":"2026-07-23T06:20:42.468599Z","times_seen":4549,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"58d33c0a30d3a9a832064299878367c4","sha1":"b12358719996bea9d513a324e6da69d602db9e30","sha256":"e6f20629d9edda2dcf6761920e4932bc9ec299ec4df53994a76d10f8ee6cfafd","sha512":"34bbf17ca74382bcbe022200ffd46c129f60b0984603ccd021fd7b44186ce126e30f41f09a1793c0a5b9512212a2dbc7a21b08e0a149114933130617e7cfe87c","ssdeep":"","tlshash":"9111bccd389ba0a05cf672ba1f2fc047be325593404d0485b90c0a58ffd1478476ef14","size":899,"data":"","first_seen":"2023-10-19T15:47:51Z","last_seen":"2026-06-02T17:26:09.796003Z","times_seen":485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-07-23T18:48:08.468018Z","times_seen":4858,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a9267880f9832bc7374d23cbc84c963","sha1":"8d42f1c8d2d108c2bba56b2efb484bd2e8df827f","sha256":"5c1e5fbbdbf173182ef0036b7f5d20d08a04d3db414dd0225774a86b2444294a","sha512":"b06eb1c627ec255672b2b3b3f18b8b5a810f7451606115e16e0cfd9497199aa317091fd4872c3d71acb868078cae8945fc1ad81f5d9e847bca4c5781114bd490","ssdeep":"","tlshash":"ca7163c57fc270b4c73781f71e1b5962e22b9d81269d889cf111a4d8fea8b54e16bb08","size":3818,"data":"","first_seen":"2025-03-02T12:11:51.921198Z","last_seen":"2026-07-15T13:28:26.090144Z","times_seen":1102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"62cff7a4995b5ed02add5568644de082","sha1":"daeb58048ba577baa5ae5426dfcb11608159aab5","sha256":"70e6647b8d2a1d021f63f80755e29f19134204d9a937c7701f6f9c6fee74a4b1","sha512":"4206d8a4d3ea02653452be7537b3f56ce69fe4866cb6285d85a20875f8d46f8e4b1a72acc75e13216c9326db235df01fb67b8c28c85bb593e93715cf04fb56d8","ssdeep":"","tlshash":"c3e0ab7c3c34419047a251b4c0b7e1383d0a30700444d90794aacd3928f0bcaad12a94","size":418,"data":"","first_seen":"2025-09-22T07:38:29.567725Z","last_seen":"2026-05-27T01:01:04.146757Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"d087f430ad6a44ada0349e9a3de1fc3b","sha1":"c4251437bcf3aa790fd40510e80081980dd37857","sha256":"0ee5d948037d7f5a9c0017d3506f81318d9c87fa8b2536c97552f5e0c12c0ef7","sha512":"22ea5245dd4512ac456d3b04a9de4e06f6a73069d8cb3164bfc709478166d8148dc638fe97b754169d8f9158eb8bd21ba42304a68af1aa5a7fa939f62d74dbb7","ssdeep":"","tlshash":"63c080d454d135250917c22b426f45547771441700166464b05c88ccff6fa7dd5b5c76","size":168,"data":"","first_seen":"2023-08-28T02:41:19Z","last_seen":"2026-06-02T17:26:09.796687Z","times_seen":345,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/validate.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0a7fe67021f7028791330511820da17","sha1":"1716002d22dfde1c0855ad504b527864896022b7","sha256":"79e8230fcd2cc9b5362a68960c2734d6c929e52465861d47b5caa03efc1a66d2","sha512":"a13477f6164fef8cb455c1f4c29c18d498008a6aafa06409dd6da2dff8fd73c7576c4b188d58e0ab3f73c1c50a2539126b1f24c476d8518a9c58a1294e07617f","ssdeep":"384:Qt+KEKCnU0pMEdMAUZh/VL06g9B4gny+mz4CebUC3mIqNF5AzUjvNTqbrWV6r+Zm:TKCnU0XdMAUNLTwKgny+yxFMUjcz+Zm","tlshash":"3e92ba4c76c1a0575b9620f5a40b550bb1f39ab8600de02cb5bcd4e2bee4f856167fbc","size":20886,"data":"","first_seen":"2023-04-07T05:25:29Z","last_seen":"2026-07-23T06:20:42.456706Z","times_seen":2015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/jquery.mCustomScrollbar.concat.min.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"71951b246c4726520dce912a5ac7f03c","sha1":"56906b9b9f41df67063091b7a66c8584d87d748f","sha256":"dd3bda90c210c66fd618bb0c35f4b21f871ce1dae7396053cb4b3a90b3ec51b0","sha512":"ff0b38e4e02096dedcc6fb1a0899a7f8924a89e9b25bb8d712f5ffb01414641b009da55c45241ddea6440eecb7ebff11ea93318aea46ff3ff71a2e22670cb48d","ssdeep":"768:nAGHgQl8dA0unnTUOxZ5ynGi65vqjSDHR17JayK:nAGHUSnTUOxZqxjv","tlshash":"7a03f9e9370534fb12db6f5e441b010963365956a70b8870387d8cb82fb1ea622b7b6d","size":40547,"data":"","first_seen":"2023-03-07T12:05:43Z","last_seen":"2026-07-23T06:20:42.458202Z","times_seen":4169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-07-23T20:33:16.459863Z","times_seen":235738,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-07-23T20:44:46.172404Z","times_seen":731503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/wow.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"105fb3799fcf14f1ea8fcff23f2686dc","sha1":"00a8a01378a8259b38cba29dc69ddf761450053f","sha256":"704ae255ab62df5481884eb0db69b552c686e7094b21581b1cbc86a9b6c3800b","sha512":"ebdee19d8c8ab3f2d751c753ccad4a0631c1a1520821682dbcc8d9555a42d48ef9d67e333c2b9854e3452f783e5b37ecac686e287fa0f9d2ce6ce42168e87ba7","ssdeep":"96:gGqKWTAKHF/suCdaOVEE1FnePgJqg4SImYad6Q:N30suCYOVEE7ne4JqgpIwdh","tlshash":"e1d175c9b7467036d79ba1f6873f0145a23a19acb008047cb7e984e57d348699237f3c","size":6299,"data":"","first_seen":"2023-03-07T01:38:15Z","last_seen":"2026-07-23T06:20:54.971748Z","times_seen":3834,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/jquery-ui.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"45bedc12dcfee87eeec2fab0eacc4282","sha1":"a9209013b11229858c017d6fbd1ba4320a0e8b61","sha256":"73b6f5a1857f503b293bd34466cf196cc7dc8f340ce397ebc9b2a3d19b12208c","sha512":"f0786f6685be36425fef0dd42311b99f7c230942c3159b709acb6de2de57c958e28954559c87b972cc0054a724be63cfb20ed0ea80396acf68c8022179c715cf","ssdeep":"12288:1femHFgymz6DdHCcmMm/W/CCeS/QRzbrVDDdRO2:/DdHCcmMm/W/CCeSIVDDdRO2","tlshash":"58b4a6c9f39c266a867a32595c2e42cdb23c8075d600587fbc5d59dc29a883c43bbf79","size":520717,"data":"","first_seen":"2023-03-07T12:27:54Z","last_seen":"2026-07-23T06:20:42.466037Z","times_seen":2149,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/popper.min.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0269e72ea643261447a59e685750b1cf","sha1":"89e76a70f48a2dcb5359a5b6a57badbf77cc5239","sha256":"18b80e40bb93ae5f8f1d3253b03d8e5d55b51341a27ed78cf42feadd012bcf9f","sha512":"ef203f77bf722211cfbdcad2881f12ffb4f25f43b195c714f05fe4b81f261d88cb945d4c2273db128869a2a7f3d0020ba2ae61a03ee510b6406181dbc9e1236a","ssdeep":"384:PvFHekJviNIGNi7wAjvOg/+f3+d/m5HfxoULOw/VoNnuGb/f/MgHknmjNzWN6j3Y:RBTjvZ/+msXyw9oNnuSf/MgEnmjNzWNb","tlshash":"8482a68c7a94f4a5166753b6807f550fb333a520218fb500b254d6da2c74eaba32fd3e","size":18362,"data":"","first_seen":"2023-03-07T12:22:43Z","last_seen":"2026-07-23T08:07:36.878118Z","times_seen":2311,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"00727d1d5d9c90f7de826f1a4a9cc632","sha1":"ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2","sha256":"a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74","sha512":"69528a4518bf43f615fb89a3a0a06c138c771fe0647a0a0cfde9b8e8d3650aa3539946000e305b78d79f371615ee0894a74571202b6a76b6ea53b89569e64d5c","ssdeep":"1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH","tlshash":"5393f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89664,"data":"","first_seen":"2023-03-07T01:28:27Z","last_seen":"2026-07-23T20:30:23.120572Z","times_seen":33723,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/jquery.fancybox.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"217c1667b830e818ad4e170c25d5222f","sha1":"e4baa41f4d86be0dc1b127a5d6d8901263216e10","sha256":"b52a13e34a3c8009c820a585a20add686c108104297527ba38f9c34e15d633c3","sha512":"3ae977c03fe17e1df2efc236e66fe3eb2021889b0a7921d5352330456936026ad7f50fb650a8c4efbfe0d9a21dc1c8582f3c4eb964496ae31d0a858924d5b928","ssdeep":"1536:B6Oq9WK+zQTwkt3CGmG4Pww3FS10RMo4RzP69XkVJG5ldYgbGg/06OXQeUg:BSPw0SGmGgw1b69UK5XbGg/06OXQeUg","tlshash":"41e3844a16f211218d27757e9bcf701ab67a8013a50cee213cad83885fc577942f5fea","size":146244,"data":"","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-07-23T06:20:42.4587Z","times_seen":1706,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/script.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e35777a87a72bcee5772e044ceb1893","sha1":"b536cf78e7a555ce5f6fdb035edd03969b482786","sha256":"f0fb3769cc69d61957b52c434ccace34582e351c33d877348ad09df1faf925c8","sha512":"129b8f5749355535f047d7ace778a5c53c170f970cd77d636d527b49beb0b69198b0e15f0adfa38a8c10fb9741f74264d8d1574c252c8950ce7039d0def2edb0","ssdeep":"192:AAbwxe1SS9yKONEaSMAqLUvWL/I7DylG5bBWZ7rDHdjezUVq:39ZELUvZyyUZbdqw4","tlshash":"66227390ff7c15a2007b7059a69e75c0abac4027c94294b7f8bd056d2fc436e64eeb5c","size":10744,"data":"","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-07-23T06:20:42.474098Z","times_seen":1710,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pay-swift.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 14:07:20 GMT\r\nexpires: Sat, 22 May 2027 14:07:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:23:20 GMT\r\ncontent-type: font/woff2\r\nage: 384799\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50316,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-07-23T20:37:28.174464Z","times_seen":22922,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/hcdn-cgi/jschallenge","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:35.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /hcdn-cgi/jschallenge HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pay-swift.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:35 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 19faacd0deda169264d8bfc849f487e7-srv-edge5\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\npermissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":135,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"693bea2833800e7d1634a8e82de201e7","sha1":"ca4c968a9d74d483a94cfdf379f05f78682de140","sha256":"ddf9ad1e778c74864e537f701249f38ad5e76b231ebfa76f6e956be25180b41b","sha512":"a670af46c4761c17b80c293d31f6c180a08167018e33863c06716d4b252e5e56bfe21eb118ed8f86271fbfbbfca2e8ed8d2aaff36d98b394447ba8184563aa25","ssdeep":"","tlshash":"13c02b314fb380206c1087c400c3003cc4b2013e318fdde2ac8c00f186c3d47000ac04","first_seen":"2026-05-26T18:08:25.068959Z","last_seen":"2026-05-27T01:01:04.058911Z","times_seen":4,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/favicon.ico","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:36.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pay-swift.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Wed, 27 May 2026 01:00:36 GMT\r\ncontent-type: text/html\r\npermissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncontent-security-policy: frame-ancestors *\r\ncontent-encoding: br\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: cb26f1b015a9870f2de673f5e7f9a413-srv-edge5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":6192,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (6192), with no line terminators","md5":"219f7ba9e3cb212946292df165fb65dc","sha1":"48a2ad60245e7765c8f5dfcce84b62a8ada71a6a","sha256":"fede7a249c4505a45d17c9bf3bc5f45d351314ee15ab49b5af3091e5ac1a3b3b","sha512":"ebcba2e85a1351dd29e9133d7be4941dd8b7d85c61b424359747962e804380b43059b5cf08d6cd74913c34286dd32e3e37353cbd2dfd198b145f1c043e161ae2","ssdeep":"96:TmIEZfjjhdO0yttqDbuuhiQwn1gxM5rNbKrbk7LzSpu79q/:6RZ7j7yY3uu8Qw6xIrNavs70/","tlshash":"6bd1b9927f807078c37341f7291bbb65f31a8945564984b8f49164c8ffec794d1bab48","first_seen":"2025-11-11T14:51:42.580029Z","last_seen":"2026-07-18T08:29:55.407752Z","times_seen":591,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.6.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15e40\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\nage: 2217391\r\nx-served-by: cache-lga13629-LGA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 20, 7\r\nx-timer: S1779843639.403234,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30957\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89664,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"00727d1d5d9c90f7de826f1a4a9cc632","sha1":"ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2","sha256":"a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74","sha512":"69528a4518bf43f615fb89a3a0a06c138c771fe0647a0a0cfde9b8e8d3650aa3539946000e305b78d79f371615ee0894a74571202b6a76b6ea53b89569e64d5c","ssdeep":"1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH","tlshash":"5393f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-07T01:28:27Z","last_seen":"2026-07-23T20:30:23.120572Z","times_seen":33723,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":30,"dns":19,"connect":13,"send":0,"wait":13,"receive":7,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/fonts/icofont.woff","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/fonts/icofont.woff HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 645604\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"9d9e4-69b792d4-fcaf602d1b2710a5;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: c22d1955e0362f2fc0307299d6c80d4b-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.022\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":645604,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 645604, version 1.0","md5":"f6ab04aed30a8643bf94fe00f7ff0b59","sha1":"3a6d3ab13e750d77c6b7dae1cc5365db02bbae4c","sha256":"53bbbda5480a031a71fc168352c18a81654a330c78784eb303c51e8a8dee66c4","sha512":"8e85ac4462b0beb96766e8ea2d6515b25a9b036ecd15d01e9610ad01843ed9dad1768be8362240c625253e4a8ff477eb2bd14baf77b8bbb37dca77aabb80e122","ssdeep":"12288:wru36y9tMB+L+DsFieVtbSM4XNzQxlv7prjKaYs1WxiZLbQJvB:ZrLU+CDuieVtwhQxlvxePEWabQJZ","tlshash":"32d423d138fba8db9c64633b46164e118a9c310efe2dd76552bb33c68cb645a8e13dd0","first_seen":"2023-04-18T08:58:35Z","last_seen":"2026-07-23T06:20:42.466512Z","times_seen":1654,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/fontawesome.min.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/css/fontawesome.min.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: text/css\r\ncontent-length: 12449\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"114c2-69b792d4-9d584233788d6ec0;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: db45c38b27d4db1eeaae4c81706b0176-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.023\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":70850,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"810fc89b3cb5bdad387a5bf5304c3c78","sha1":"1b0450a6db44d4479b7043ba13e92aa51d1cd59b","sha256":"7eef44924185c74fd34e071e396104940ec6a795b339e74f757c816eeb3ebdb1","sha512":"ddddd512ac0e88452aa05b1b800e714297af366778c638aef56dce2e6fab5e2bb09bd58ddf90083e59eba52e937364d735efda932258e7dc6b48006a9f000ddc","ssdeep":"768:F8spWLsWDIc5uKjCWOnqEUmPJMTytx39gKRMvF6iQDmFIY5maJF:F8spWLsWNuklOqExMGtx39gKcFeiLcab","tlshash":"f1630afce1fe18904391e4d12743a374bb2db72cac4a6d9cd2a2799db2c0658d1863dd","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-07-23T06:20:42.46957Z","times_seen":1628,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-27T01:00:35.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Wed, 27 May 2026 01:00:35 GMT\r\ncontent-type: text/html\r\npermissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncontent-security-policy: frame-ancestors *\r\ncontent-encoding: br\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 2447960e771ed4ab68193401bf9a19f8-srv-edge5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":6192,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (6192), with no line terminators","md5":"219f7ba9e3cb212946292df165fb65dc","sha1":"48a2ad60245e7765c8f5dfcce84b62a8ada71a6a","sha256":"fede7a249c4505a45d17c9bf3bc5f45d351314ee15ab49b5af3091e5ac1a3b3b","sha512":"ebcba2e85a1351dd29e9133d7be4941dd8b7d85c61b424359747962e804380b43059b5cf08d6cd74913c34286dd32e3e37353cbd2dfd198b145f1c043e161ae2","ssdeep":"96:TmIEZfjjhdO0yttqDbuuhiQwn1gxM5rNbKrbk7LzSpu79q/:6RZ7j7yY3uu8Qw6xIrNavs70/","tlshash":"6bd1b9927f807078c37341f7291bbb65f31a8945564984b8f49164c8ffec794d1bab48","first_seen":"2025-11-11T14:51:42.580029Z","last_seen":"2026-07-18T08:29:55.407752Z","times_seen":591,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":124,"dns":58,"connect":28,"send":0,"wait":29,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Heebo:wght@100;500;600;700;900\u0026family=Libre+Baskerville:wght@400;700\u0026family=Work+Sans:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Heebo:wght@100;500;600;700;900\u0026family=Libre+Baskerville:wght@400;700\u0026family=Work+Sans:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 27 May 2026 01:00:39 GMT\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32918,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"15b716697b5925d0c75dcf1fbe8df311","sha1":"c1d07f632a3193dce86b6b4df9188102610d1c2e","sha256":"ab5a092fd43f5f697f2d14587e1237db3e4e954228fcf5594ddd667bdac2393f","sha512":"56e88a25649066ccbdd0ca1087a895fac674c03ea935962cbe9d50acc5b65fe317975e48ab8ddfb26d5f5d200515a7a3209a90aa577e93454c844808283de572","ssdeep":"384:hjHchqYOzgwqYNxqY3iqYXkqYs3p6jH6tQ7uRv:hjHcJOzgANZ3WXkQp6s","tlshash":"d6e23191042b55009b831cd223ce7e36ef5ea250b044c479abfe5b8bed9ec95a37935c","first_seen":"2025-11-20T23:48:42.628994Z","last_seen":"2026-07-23T06:20:42.465534Z","times_seen":305,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/animate.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/css/animate.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: text/css\r\ncontent-length: 4139\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"127aa-69b792d4-f6f3be38de09a67;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 79c133fc23053169060a54cced7c6c94-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.025\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":75690,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9553df5b101bfd7910ed3637f4479e09","sha1":"180a945af9a97e3d13c481a56e935be48048bba9","sha256":"c61d53c6505e7604efa05c6ccef932f18d110d33cc7970696533e72ebdf732d3","sha512":"49ff03ab3be97d04475a1e443ca5455908ef2a977f5e15159f73aa73f111ec235248d697bc5481114f5bc05feac226af38744b44c945e5a55069ecf0b2fdb181","ssdeep":"768:truGuwpkfTf4ucuAfFfoHzfSf/fhfzSSSefZfX:QfTfsfFfoHzfSf/fhfBfZfX","tlshash":"ec735c6d2991114453738a1993df9e78263ce1631826edef73c2588bcf86fac63c9607","first_seen":"2023-04-11T06:22:36Z","last_seen":"2026-07-23T06:20:42.477574Z","times_seen":2689,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/themify-icons.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/css/themify-icons.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: text/css\r\ncontent-length: 2716\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"42c0-69b792d4-4ab91f711e161b7;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: d2aa30ec1bd17d227d87ed68f5e565b4-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.020\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":17088,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"da1a78679102863ef98740690878cc73","sha1":"a72c8cb318b70efee83c07d880b2ffa71bd8b294","sha256":"3aba6fdad68533dfcc2285e0b8572faea7a3527ad857135fb2659f2e1d266d81","sha512":"716883d7a254632f9b0f74e2db743a69c2f2104d899d5f932924ef3b2688453b376a8ac51a2e8817242baa3ad6cfab0778fd1314d8d48adfe5ed1e4eda7ff2cc","ssdeep":"192:Yw1Nw1yU1v1z1ylSYj8w357YMqrk3x2S45gnDLq+TLt4OW:iYjfpsBqn7LG","tlshash":"ac72f8e495bf2ca41315e0c163467235fb0da728da8b2c5ed2b37d9ca9d3a11d6c22dc","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-07-23T06:20:42.474621Z","times_seen":1707,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:36.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pay-swift.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 26 May 2026 17:12:36 GMT\r\nexpires: Wed, 26 May 2027 17:12:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nage: 28080\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-07-23T20:45:36.115477Z","times_seen":30847,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":16,"receive":17,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/hcdn-cgi/jschallenge-validate","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"POST /hcdn-cgi/jschallenge-validate HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pay-swift.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 74\r\nOrigin: https://pay-swift.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":74,"data":"challenge=1cbb9a2cb0e221120d1e919ba1bbe41630d3d9ad591ff9e45f2680056beac79d"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: application/octet-stream\r\nset-cookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; Path=/; SameSite=None; Secure; HttpOnly\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 5e58ada8bd4d3f954d0aa1f903a11efd-srv-edge5\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\npermissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T20:51:01.847354Z","times_seen":17484462,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/clients/2.png","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/images/clients/2.png HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2900\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 6e0476d0cd4c4e4bce5a7705548fa7a7-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.078\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":2900,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c3b39d4bfd074295b1930c29ef62021e","sha1":"470591c81be8aa24f449dfed60e6caca598d1c91","sha256":"6a0a9924589e388fa5823f46dddc23d762fc0280a392ba70283986cb9ba9cc18","sha512":"ba132929e7fc0d57d02121213c9af171163837ab179dd8ebcb0361de8a3505517c399276d69ff7d8cc64e9240120a7d371cde9353ec4f204bf91ff9e834c10e6","ssdeep":"","tlshash":"15516d906b16151aec0749369be43f2a8a00caa863618d51379902ae6cc7aec2dff841","first_seen":"2025-10-16T06:49:21.18792Z","last_seen":"2026-07-15T05:46:32.19836Z","times_seen":11,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/clients/1.png","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/images/clients/1.png HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3612\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 21f6c30f93d42a0c87a12334543db3af-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.064\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":3612,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6fb68fa23faa3a5e7dbd8498e1b29635","sha1":"79cbd16143bc2636dde397e65608b796c74095b6","sha256":"8a4f7ea8d60de12e737878c95c60f2588a42cec783f8c8e4061185cb98499154","sha512":"229655bde4878f6552cf64403eff9db18b5ec6a94c4e6c9dac361547d95913cbd779e3741a2ddc705a0a9f0e14c966c6f431a9bc156bf4bb9866856829a26e09","ssdeep":"","tlshash":"29711a2e8e6379d2eae61e3ee43047b8b087bc580614058a39061db30dce7151d86eee","first_seen":"2025-10-16T06:49:21.149068Z","last_seen":"2026-07-15T05:46:32.230465Z","times_seen":11,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/fonts/fa-brands-400.woff2","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/fonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/fontawesome.min.css\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 76612\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"12b44-69b792d4-35260dc016eecdbf;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 08584c3fe3859436d48c72495f262e66-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.019\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":76612,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76612, version 331.524","md5":"a06da7f0950f9dd366fc9db9d56d618a","sha1":"509988477da79c146cb93fb728405f18e923c2de","sha256":"5d9190292acdd48ba0fc35080f7e7448f3cdf0d79199a4d23f0f49b5341fdf29","sha512":"b53d839c5464f7a2904cabcd1e7d6456e2ed1702254450833fc586f4b3a4e6dc07c24f443415a2710e241af8d2dda1b9c17f050045e76501e9b5aa2cb4801ea8","ssdeep":"1536:y2zPXSmtLX9JNsnZVJakesPqIqI9Fz7s4HiUljj7Gu:y2zvxtLXs9e2zYa7Zj7","tlshash":"977302d0a153149af2b02645f91ea4527c19b93c97dcf2643a3aff726ed480fd294f81","first_seen":"2023-04-06T09:36:23Z","last_seen":"2026-07-23T20:55:35.454567Z","times_seen":8794,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/remixicon@2.5.0/fonts/remixicon.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/remixicon@2.5.0/fonts/remixicon.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 2.5.0\r\nx-jsd-version-type: version\r\netag: W/\"1af66-MA7aTWKCoG0FYjklj9PTw0TfSFM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\nage: 404830\r\nx-served-by: cache-fra-eddf8230094-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 13855\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110438,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a8aec561d3b9b905472b815cb2b818c2","sha1":"300eda4d6282a06d056239258fd3d3c344df4853","sha256":"13e29a29baade86f4e7a88d8e076d6a6f3ac8950757b50a0f8bbea1c33658d5c","sha512":"096467665b61140bb4e669b83eee51fe290357fda33e8e9c82692976d04559463dfe6a8d16e4e68309e9056a8388878c767e70bf534440576df36fc093ebb392","ssdeep":"1536:jncvr8vn4cYzgKvP1IqRCwNd1l3JclUaqM1:j48v4cYcKZ7clh","tlshash":"45b3c8beea4f44801702e8d66367274163b9b77d8d817c7ad413688df7c766883862ec","first_seen":"2023-04-06T15:22:09Z","last_seen":"2026-07-23T14:50:42.730745Z","times_seen":3731,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":91,"dns":63,"connect":13,"send":0,"wait":14,"receive":1,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/gallery/2.jpg","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/images/gallery/2.jpg HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21528\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 479c204e1f30e4cf9f5865ac59b77572-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.114\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":21528,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"731fa31770100bd9aa3af92c59a97fb4","sha1":"f8d21ea7acf447c0fc526398eb4e34b59844a8af","sha256":"1b2b988ad4b4e91133011758a61979f4a0e53d45fb66e667e1dd8c0ffba44265","sha512":"159505a755125d37beb11f82b9da2569dae4167c11ec4b6bf5e966d67be9479e82786b9c4e847bfc1377942d304a272c5ea4b55c8132782fd70ab6238eb83a8d","ssdeep":"384:36DPoGTq52ZyAqmk1H+UfktfXUnAFLRUfbPJFYEjWDFcPrc61GKmRf:S/q5eTi1H+bU09UfbPJ3jOGGrf","tlshash":"09a2d02370fb48377eb518e13ea10458fa86ea1de21cfb366a47c76672d60c6c460d5a","first_seen":"2026-04-11T18:33:23.05686Z","last_seen":"2026-07-15T05:46:32.190799Z","times_seen":6,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/gallery/3.jpg","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/images/gallery/3.jpg HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38746\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 040ca348bf52241e02143bb1907e5a49-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.112\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":38746,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e32ccbb2d3ca9753e7849a0c270b3f6e","sha1":"a81bbb4d384c8632518b78268c076c4cd5d563db","sha256":"27d9d755687558e3a2c6ce088f68b9950897a9a6626b64b23ed69061f3f67cf7","sha512":"229184fdcbd92d8591f27a4e85783ac20697b6f081f94152cb2382a57ecfa58101306221b2f445bfbf84b0598ce5f9903bdbf2d27c9063fd724ac6d278ae6826","ssdeep":"768:ANLXDh4f7u+ghug8QnqyTsY6g217mkpOesEXuPXEGVrJrWMOC6309:6TGT3ghPtDsXg217lOesWuvJNWMOQ","tlshash":"8603f2bc9f6f0a74abb4ac7c8c1742561c4ee09031e4429b313ac85ceedf4e98c74965","first_seen":"2026-04-11T18:33:23.030812Z","last_seen":"2026-07-15T05:46:32.239285Z","times_seen":6,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/script.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/js/script.js HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 2565\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:17 GMT\r\netag: \"29f8-69b792d5-828fbe2e58bbd3c9;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 6c72ae4a16769916979d97c8ecd7b0e1-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.074\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":10744,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"2e35777a87a72bcee5772e044ceb1893","sha1":"b536cf78e7a555ce5f6fdb035edd03969b482786","sha256":"f0fb3769cc69d61957b52c434ccace34582e351c33d877348ad09df1faf925c8","sha512":"129b8f5749355535f047d7ace778a5c53c170f970cd77d636d527b49beb0b69198b0e15f0adfa38a8c10fb9741f74264d8d1574c252c8950ce7039d0def2edb0","ssdeep":"192:AAbwxe1SS9yKONEaSMAqLUvWL/I7DylG5bBWZ7rDHdjezUVq:39ZELUvZyyUZbdqw4","tlshash":"66227390ff7c15a2007b7059a69e75c0abac4027c94294b7f8bd056d2fc436e64eeb5c","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-07-23T06:20:42.474098Z","times_seen":1710,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/jquery-ui.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/css/jquery-ui.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: text/css\r\ncontent-length: 7791\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"8d99-69b792d4-c1c08764c914569;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 2a8f3a0b637499d40625e1c216e7da0b-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.026\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":36249,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2363)","md5":"ac79a49731d732cc8f28a691d88ac743","sha1":"35b060071041620f3a886adfcc812fa82385661b","sha256":"b904a75d7ec761c670bdc67cb92247bf9116522bf685b19af1e9d2836a41c232","sha512":"811e4949cd14cf5a2e643fc0fbc4b09db6bad4d514603751e77839f23e78af07ef9be01d82a4d1b08fd6212d4c7d39e2a99848c08b5a0b0e5942d388a821613a","ssdeep":"192:10OW02ANbMb6lOn+brGtUQnSMfps3+eYQY+h572hk//r8Y5Y6BjSmMErEURHllPF:xMbF+vaW1e07/PiF5fy/EhDS25qL","tlshash":"14f20c316b432919ba1bd1a425a11bf7d32e1342ee2b6e7f64aa345cc3d54e0c0bf5b4","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-07-23T06:20:42.473607Z","times_seen":1692,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/assets/images/logo/pay-swift-home.png","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /assets/images/logo/pay-swift-home.png HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: text/html\r\ncontent-length: 1759\r\ncontent-encoding: br\r\netag: W/\"119f-68074818-3623a38cedc58683;;;\"\r\nlast-modified: Tue, 22 Apr 2025 07:41:12 GMT\r\npanel: hpanel\r\nplatform: hostinger\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 1f8b95897ba5ff8c50215b9e0cfb2c70-srv-edge5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":4511,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (371)","md5":"b16e9097fc7d3af8ebfcfce7aba0a42d","sha1":"2af3c8408b8445fe81d9a7c8d7cc8e8a05bf80f5","sha256":"e7db95c97a5d45787cc3e40cbcb93b748fefc65bc14e162c746e37f979861729","sha512":"53a7a2c276fbc5159231c162eb863504448515f1a078832b81f1bffeedb1c82932810b66748fd4111d1b8fb866622a5cc63e79e497227b611c90886ba45d3f3b","ssdeep":"96:tr+ulojsBwJG8YqVcqHL/GSrrLc1VhrJuzeK:tyoasBwJG8nVjaSeVhrJgeK","tlshash":"0891f88f25f381452603c99037f9b61499554007f685eca8bdee9228cfc4b8a41e3bdc","first_seen":"2025-04-22T08:45:29.599713Z","last_seen":"2026-07-23T18:36:26.558208Z","times_seen":37465,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pay-swift.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 14:07:20 GMT\r\nexpires: Sat, 22 May 2027 14:07:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:23:20 GMT\r\ncontent-type: font/woff2\r\nage: 384799\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50316,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-07-23T20:37:28.174464Z","times_seen":22922,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/fonts/Linearicons-Free.woff2_w118d","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/fonts/Linearicons-Free.woff2_w118d HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/linearicons.css\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: text/plain\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: W/\"5514-69b792d4-11559c43670a4aec;gz\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 6497ede895575c1f82215eaf34aeadbf-srv-edge5\r\nx-hcdn-cache-status: DYNAMIC\r\nx-hcdn-upstream-rt: 0.057\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":21780,"size_decoded":0,"mime_type":"text/plain","magic":"Web Open Font Format (Version 2), TrueType, length 21780, version -15485.1","md5":"d0b0e0e5e4c7cc222b3cbfbcf46f5c07","sha1":"f93df62d5a4fbde71b4a2e4f32fa049efcac530d","sha256":"42de40c3f769353044141286b5aed23266dc7774c7dfdf945c240f006ede8bbc","sha512":"93034023cc97c9eb338d9029f6c519d7bc84604557ec1e4c7912f262fa1add839a834d7016617d51c38503831340a651cd51e100f97282fd7b840eda1f005f03","ssdeep":"768:OXeBrYh4LBf/VLxw3Z7dSl2Uy11575UcLEMJur:18OfR+mTyHTUcLEMe","tlshash":"b5e2d0312345f774c2b644e82a429af4a34a1fb294e1ae10c9b482616eef05533fdcf3","first_seen":"2024-04-04T14:41:29Z","last_seen":"2026-07-21T10:54:28.260509Z","times_seen":158,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:wght@400;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:35.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=DM+Sans:wght@400;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pay-swift.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 27 May 2026 01:00:35 GMT\r\ndate: Wed, 27 May 2026 01:00:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1774,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2c0515d26c02511950af0c6320b5fa6d","sha1":"b48f92a7a9c36c0c9ee5932b74d4d1a5cde39a1f","sha256":"9508a73ecd92ddeb402c0af1407e6c9883ffe50ccbdd0d5679171eed73501efe","sha512":"fe0f1708da30f0b1ff323bfb79ff0aa353e9738b8ef2f28c9d5fa63f12402b4a1dfa17b2022737d41c47b309f009734a2d54df3e9e515d64a1fdf910b3eb8d05","ssdeep":"","tlshash":"6b319b81046ba550e7931cc422cdbe62ef1fa15424549c74abfe188cac6ac3e5362b8d","first_seen":"2025-09-14T19:53:40.292943Z","last_seen":"2026-07-15T13:28:26.085781Z","times_seen":580,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":101,"dns":1,"connect":15,"send":0,"wait":18,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/fonts/SignericaMedium.woff","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/fonts/SignericaMedium.woff HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 69832\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"110c8-69b792d4-b3c86163ecf04fc5;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 5b901147fa79303b7b3b5db78e9052c7-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.021\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":69832,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 69832, version 0.0","md5":"fe8345ade4b69c50b69d31638cb495f2","sha1":"7923c45e6008c01790b4e2df7a5ddf0eff4a60c5","sha256":"23f02d3c3eca3daf85b5af7f31c1bc943c0b188773f883a8afe8383c74dcdd6b","sha512":"06378f29860298dac4a4541702332d983b4a12d0b8b615c91269170369b9927f36a3944d9ca46e8e6b4735d2c9e907dd8d0e4e59a24091c4915e2be213929f80","ssdeep":"1536:PVSbVz3qgJqFpGSpJee4jg5v5UjDcTWLyteokA45ldj8F4mR:kbVz3qeqFpdd4I5UjQWLAk3llmBR","tlshash":"1b6302494c35bcc0cb3d643bc24111ae4719bb1c6e7269d9ce8b92f6a9e44f81b07a5f","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-07-23T06:20:42.467089Z","times_seen":1622,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/favicon.png","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:40.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/images/favicon.png HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 13255\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:40 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:17 GMT\r\netag: \"33c7-69b792d5-632a7b6a2ddbfa86;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 4d82560776cad8f4d10038e716357138-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.061\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":13255,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 28 x 36, 8-bit/color RGBA, non-interlaced","md5":"31b384fe74cb1e6efc24aba97e054fd2","sha1":"6ee09b3ce22692617cd3807d6e97bd3b227f403f","sha256":"ac4b8a8b395115919ca6fd546ccf5fa5012892dfbc95aa764f1cd0b8f751418a","sha512":"557f65bd4d867c8599f7db8ccda538f5cd88d14f7f88979549bf226d8f3a868bfeda679c5018c12b5131df0cfb0bf4de2d3d06c20c35209d677a5113ddae7762","ssdeep":"192:y2+EuL9IVYk4kK99sv9+PdZsOevRA8F7ocgeU6G78fPiZjG7PFQpMN1QO+d6OSLQ:J3O9zL+msPSFQfPYjaQ6MOfxL9oVlF","tlshash":"6352af53c2de645fed4c23f6884ee9bf8f0a50d5ab9148c6b4400147269b7fb03e189e","first_seen":"2023-09-16T07:22:00Z","last_seen":"2026-07-22T14:21:24.049627Z","times_seen":1041,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:36.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pay-swift.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 26 May 2026 17:12:36 GMT\r\nexpires: Wed, 26 May 2027 17:12:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nage: 28080\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-07-23T20:45:36.115477Z","times_seen":30847,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":116,"dns":2,"connect":28,"send":0,"wait":15,"receive":8,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/clients/4.png","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/images/clients/4.png HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2156\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 4eb545c25d0d992bb3e83c5b2e4e5c48-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.063\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":2156,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1cf2bdb034eba0b767a6cc6891a1e997","sha1":"d23f4eae4bc75d1fcaa97c744c124645ab140035","sha256":"4be4ca4b05178cb0ab755f169b9fca40547ee91dc752a5a51c605af10ad874ba","sha512":"549846f47b24a0c34bfcb0cbbe625f87defe5df4cde8a27c873d4326ab660d56fdd68ea342fa582c98a1491604deee77b7b1ef3e248f4b55c9f30d5566c12e83","ssdeep":"","tlshash":"fd411a06f6f82cc0f069727458394bd280f9f1e01a77f3391231a545ad92b1bac45dc4","first_seen":"2026-04-11T18:33:23.035711Z","last_seen":"2026-07-15T05:46:32.240419Z","times_seen":7,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/jquery.fancybox.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/js/jquery.fancybox.js HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 33369\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:17 GMT\r\netag: \"23b44-69b792d5-20f0201008791655;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: feaff941951ff103430a64f69e14287b-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.086\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":146244,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"217c1667b830e818ad4e170c25d5222f","sha1":"e4baa41f4d86be0dc1b127a5d6d8901263216e10","sha256":"b52a13e34a3c8009c820a585a20add686c108104297527ba38f9c34e15d633c3","sha512":"3ae977c03fe17e1df2efc236e66fe3eb2021889b0a7921d5352330456936026ad7f50fb650a8c4efbfe0d9a21dc1c8582f3c4eb964496ae31d0a858924d5b928","ssdeep":"1536:B6Oq9WK+zQTwkt3CGmG4Pww3FS10RMo4RzP69XkVJG5ldYgbGg/06OXQeUg:BSPw0SGmGgw1b69UK5XbGg/06OXQeUg","tlshash":"41e3844a16f211218d27757e9bcf701ab67a8013a50cee213cad83885fc577942f5fea","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-07-23T06:20:42.4587Z","times_seen":1706,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/elegenticon.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/css/elegenticon.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: text/css\r\ncontent-length: 4189\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"63c8-69b792d4-74b0f95a5e3c2737;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 63447f69cad59c7408cf98d7c6a567e1-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.023\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":25544,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2ff2aec2ac74d1d10d260da41250638b","sha1":"9cefb332dc7c7b610d9a62a02d89d261b7c23c27","sha256":"a982c5727d6726a230f1f288b0f67c0811eabbceb902e40f87384da02eec91d7","sha512":"f3620083d24449cb440ee4c58e298f3f31c18cf7d315b05474141d418bf75dc7f141ff9ceee0eea621a04989188df9ad26b16ca10348bb6e573dcd4c056a30bc","ssdeep":"384:DDKGaQZNxtAWkx6qFuTZOpLRb1JhO2SdJbrTubeqTu7fIqTfXshW6EciwK8F6p:cWkxXNRuu6qTsshWIzF6p","tlshash":"30b242e09dfc68855721d8c162166370ef0da3398e9f6d0ae263788ca3e1652d5d77cc","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-07-23T06:20:42.46338Z","times_seen":1627,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/animation.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/css/animation.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: text/css\r\ncontent-length: 843\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"2dd6-69b792d4-a5eb52dcf11c6965;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: fdbe13f0ea330960f99cba810f1d5e04-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.017\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":11734,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"283a999ced8386b4eccf27cf8714fb30","sha1":"a40459fc7fac6656335d708cce9c9de87594b9d0","sha256":"d39a8775a6fa3b47a46d8962aa270de02cdd10f303f39c44d3e158dfbc5f07ae","sha512":"346a84db8ba075a12546f055b7e3560912859564477ba8ce94ade5296de525684cca142ecf5f99e3d30a81b5d029ba147290deecd98ba58bc8de0d9a0411dd30","ssdeep":"96:5RSb9scSZM1AlGXb9s9SMM1xuqSxsscD5xSQssc6uKS9ssc/yqSx0scDoujQR5vV:dujQR5v8hF4IZnqIJzq9zqpOLCS4vS4C","tlshash":"a732b1ea5082654547370a3317dfaa049c744ce3a622bcbd71ef950e9f187683387a7b","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-07-23T06:20:42.463974Z","times_seen":1719,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/simple-line-icons.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/css/simple-line-icons.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: text/css\r\ncontent-length: 2529\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"32a8-69b792d4-3e1d5e03daf1882e;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: dc9985a1ba44f3d68b129656df4ffc1f-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.019\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":12968,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b59f8965dfca3963a8ac681b859aaa05","sha1":"a8bf6b10fc99c4de59e0977c1232b5fdcf9c443a","sha256":"c440ab5fef47b932087fe156a3b715a0033607533f9f7a4553b0e8612fa2ae0a","sha512":"89cbcecdb4eccc94322132c3964f4fee9e7dbfd2e90fe7a54032f329a0b536da4cae3dbb6890398acdaf088ece738c8439557f883a3e8f61f508b44be6eb0b19","ssdeep":"96:4jj9ryhGNBj2HtkmHaTdmVCOrMBv20tJSyxdSB4HIHWGkTgU0r6v8pZc35:4jjA6Bj2HGXTm0l2UJndZHokcU0VE","tlshash":"a4424fe49dbc19801721e4d162466620ef18a3298dcf6c1bf2a3788ca7f2b11d4d3bdc","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-07-23T06:20:42.469105Z","times_seen":1617,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/responsive.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/css/responsive.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: text/css\r\ncontent-length: 3182\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"5959-69b792d4-2cc72457a64a696c;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: a617df9ea5e6469a3771b78bac9798fa-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.077\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":22873,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1fe653ef8db1036a373977da05622595","sha1":"97c49a44650525ec2848832feec7f71f1884d3ec","sha256":"2d5275f25b5c88598632488e56e10d3a91892dd4f9d2f6833307e3af7db5c315","sha512":"21c596b760f2eaf2ac7bc902d36e1b1fca97de04f44806ea6bec8afa6f9d910a51b877de0566eef2aa1927897625c3eb6c71a09da8d267b3c60f9cba6deb4ebd","ssdeep":"384:AnDhYAiIg7u8dFzgFa5nJHu9JQ3UdDHFfZmX3CjGhg:6hYATuu8dF0Fa5JHu9JQ3UdDHFfZmX3o","tlshash":"17a2ae8f7de224043416727aadfb27a072b3d413d74edd9679f1a128cf482e14d92a8d","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-07-23T06:20:42.480612Z","times_seen":1710,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/resource/news-2.jpg","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/images/resource/news-2.jpg HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22602\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 82a7af4ff6f52cb4395d331e3c83e9df-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.091\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":22602,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e438a4836d5dbbe5882c114e04038275","sha1":"2f5b0a9fc4613a346e954e8efeb6866bbdf0390b","sha256":"92261b780e09ffbfbaa48e26abdee00ee727824dfedcd5f13008c894c03a6950","sha512":"ba0d5e325abc4e1a4339932a905abf10d8f3265d6d975aa4e38a24d172b4a0727b2bb3e2f7b9eefd37ba79ca146c162c6b0ae7cb57af20d8cd6cae6055c8dd5e","ssdeep":"384:BAvHbScuq1FhlQuqIdktxTN/gf43LBSVY1pYBBe4EL0SunfUsl5lS2jZiiKO5eG:e2i/otc2xJy43LB1a/z+0rH5l996Ox","tlshash":"3ca2e1558688b51ecea8dc3b482a3038682eed3755303a005bc0d69dcf9bb50f64a6c4","first_seen":"2026-04-11T18:33:23.074288Z","last_seen":"2026-07-15T05:46:32.222306Z","times_seen":6,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/owl.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/js/owl.js HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 17512\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:17 GMT\r\netag: \"14d37-69b792d5-4b0f969cd248b34;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 2c20c458db6acca33cec150af5a5d2ab-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.071\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":85303,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (360)","md5":"54428880ec8df798ac3d666f5113c7ff","sha1":"9e43e74b8677f39e87f1b11be4d536c618b14bb3","sha256":"0402874ff311f284b18af9e4c453ee5bf0916a3b7335f0be52dcb54a1a31338b","sha512":"abceb872c8942d366a533c0c572e0e6e31d1b428ad2bc6fa1e746fd31811b6f8dfcd77814723adf44e1a8585436b511097576159b8eab40706b025e3158eda24","ssdeep":"1536:/PLoreUScogMjVNPP8aLMBJk8u9hKt1o619IYj1oJ0SQIOZ:/fHNPP/qJ9BoC9XplIOZ","tlshash":"e48383c5f36c261b422a31785e9e23ce713d412ad91118af7ca4e9dc28d546c836eff9","first_seen":"2023-03-07T01:10:42Z","last_seen":"2026-07-23T06:20:42.468599Z","times_seen":4549,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/jquery.fancybox.min.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/css/jquery.fancybox.min.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: text/css\r\ncontent-length: 2905\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"35a7-69b792d4-3290bb4f234b07df;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: f417770cef33f1ce81b523a2ab6981c7-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.019\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":13735,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13734), with no line terminators","md5":"35d290afd71a6053d8195ea13170b4e9","sha1":"a64676403bb5c23f9800963b0b8f0475b532601f","sha256":"e467f75601e845da217ae845b688b227a19fbf1e8fc776a42a4905869496d2e2","sha512":"0136028681f47450835a9bd6345bb647c95f2be3e963980e5b5e355f3cdc602772313640c5d9b72ae71252bbe8099b11de5663f3fde49b71a5170e42959f7788","ssdeep":"96:tGA07/mPQRZa6f3sNGzssDH7jGSWWf8+WDJT53RjRuCicfMAJpEbyZh5fN2WdZ:tVQfXcVa7KWdMT539MCeAL55fJ","tlshash":"b0524e63a140311c903bce21d7df8948e279d55266221affe68cf919cbc7be912d62c6","first_seen":"2023-04-05T04:47:26Z","last_seen":"2026-07-23T13:49:58.207449Z","times_seen":6788,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pay-swift.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 14:07:20 GMT\r\nexpires: Sat, 22 May 2027 14:07:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:23:20 GMT\r\ncontent-type: font/woff2\r\nage: 384799\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50316,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-07-23T20:37:28.174464Z","times_seen":22922,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":17,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/main.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/css/main.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: text/css\r\ncontent-length: 11416\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"18d22-69b792d4-a93dd23607104067;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: fc039a697b44397889941e8bdef7096c-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.072\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":101666,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"dbc47cffc3d32605f01a227ed790023e","sha1":"a463258b408559fef4bbe718824d6669e5f9dee0","sha256":"dc10e64c8f9318269786adda86cc11c5d381a95e24d2b1d51c7b88e6ddb85648","sha512":"bbe592ad95089dff2531f36b43892641863ee41700fca0203d15242b2ecef30f8032be5f2b63b7c3b412ab1f145a6a71729ba17b937ce5439d73ff25c3d35d7e","ssdeep":"1536:K5z50jif15WnN8e3Mcn+UmvE3bHgZqmgNa38e3MPnpJVwDdZaycVIUJRGaAvttrV:K8W3zy2t","tlshash":"42a3fdde42312500742b97ad36c3676a673ca182f93bc46c77d26528de8a79d1133f8b","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-07-23T06:20:42.496007Z","times_seen":1432,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/admin/assets/images/logo/pay-swift-home.png","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /admin/assets/images/logo/pay-swift-home.png HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9506\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 5c22546b71ebf64dd27c26cbc4804fb6-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.098\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":9506,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ea814bc6cd2eb5fc770030108ccebfd3","sha1":"a2884c45d1ea667724a769c7e2c64477a7cf40af","sha256":"277f4974502f1f3f811afb24db82cdf71cb0809073c4dafa748310329c8b7aa9","sha512":"14f7ec6d771e46bd23be0be153203920a158d9c2b8776f4c363e7fadb5325bd177fb2363dec2758a1e665c59c35b8d8961fa7b5861631a3845585a942fc63970","ssdeep":"192:D6Q1xlsBG0ksw4l07rpN+McbGUzCup7dBtl/jU6TtJiBpP5BA2+jXom/uIhLNCvD:DDYXw4lArpN9cbGUzCM7jU4aBphJ6Ym6","tlshash":"7812b075a2230927f82e0e741d7e3eb756dd2446e8c5a899f12a632d5c0c4e4fdd052d","first_seen":"2026-04-11T18:33:23.032777Z","last_seen":"2026-05-27T01:01:04.130684Z","times_seen":5,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/resource/news-1.jpg","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/images/resource/news-1.jpg HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 63094\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: ac677e4d9d331098748dc9d2099d09ef-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.145\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":63094,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bc2192e4419eafabfab668418d0dce5d","sha1":"467f343ca308a517bd45081b81fb94ee6f6cbf29","sha256":"c3e3e284e6d856913865d66d9a9ec3d08592f5565400295c6781cd4f72d79524","sha512":"1a74635272534d1ee2ec017359811c2c0d0e29b65f1044a270bfd365c0d71561b71ae48574f7f4d3fc95c9e3b59291636cac2d2461fb9bb44e36806f752b738e","ssdeep":"1536:yzHNLDhypv1JaqOlgXJHhJWdlNTyt4WQI6/hmLG:yzdhy/8qmgLuqchm6","tlshash":"c45312dd84e05364522c467b759af4a53027f5142b19f9221cb367360fdcb488bbbbca","first_seen":"2026-04-11T18:33:23.038456Z","last_seen":"2026-07-15T05:46:32.220902Z","times_seen":6,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/whatsapp.png","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /whatsapp.png HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15034\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 0f425957ad08ab1554f8dd78e7dcb1b3-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.103\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":15034,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fd5306d49619f0da0e6b3c67f2e53f02","sha1":"0e9b5b58856e6f7ea9393c8bdb15e701295399a5","sha256":"674d124a1b0d91a77a494a34468ebb28e2442bd4b4a8676e80d8326ee4e5f133","sha512":"7cfee42e3dc5bae106ba3b0bf4df18280b2cfba6ccb55ba5a85e0248a3a19017e18affb8b77350d8db32c4a0ceedbc438ddcca7bdc8bdd67dc265d25ca5bb553","ssdeep":"384:JKNBWmCr8rfBfvDfyUXZF4Hnoceg8E11qGvcjq5tXboPS:JEwQrxdEjvNrsK","tlshash":"a062d09dc1d741a0c8296d37f43e9bb696efe947210d01a48865df34870925b3e0fdea","first_seen":"2026-03-18T17:26:51.098532Z","last_seen":"2026-05-27T01:01:04.132051Z","times_seen":5,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/popper.min.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/js/popper.min.js HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 6164\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:17 GMT\r\netag: \"47ba-69b792d5-53eea0bf08d30923;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: feb9e66c0c180e72f19b60a4523826f3-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.075\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":18362,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (18274)","md5":"0269e72ea643261447a59e685750b1cf","sha1":"89e76a70f48a2dcb5359a5b6a57badbf77cc5239","sha256":"18b80e40bb93ae5f8f1d3253b03d8e5d55b51341a27ed78cf42feadd012bcf9f","sha512":"ef203f77bf722211cfbdcad2881f12ffb4f25f43b195c714f05fe4b81f261d88cb945d4c2273db128869a2a7f3d0020ba2ae61a03ee510b6406181dbc9e1236a","ssdeep":"384:PvFHekJviNIGNi7wAjvOg/+f3+d/m5HfxoULOw/VoNnuGb/f/MgHknmjNzWN6j3Y:RBTjvZ/+msXyw9oNnuSf/MgEnmjNzWNb","tlshash":"8482a68c7a94f4a5166753b6807f550fb333a520218fb500b254d6da2c74eaba32fd3e","first_seen":"2023-03-07T12:22:43Z","last_seen":"2026-07-23T08:07:36.878118Z","times_seen":2311,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/validate.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/js/validate.js HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 5957\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:17 GMT\r\netag: \"5198-69b792d5-81cfae9de1c30dbd;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: eb10b7a10642ebe1508ff4166c531824-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.092\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":20888,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20730)","md5":"e0a7fe67021f7028791330511820da17","sha1":"1716002d22dfde1c0855ad504b527864896022b7","sha256":"79e8230fcd2cc9b5362a68960c2734d6c929e52465861d47b5caa03efc1a66d2","sha512":"a13477f6164fef8cb455c1f4c29c18d498008a6aafa06409dd6da2dff8fd73c7576c4b188d58e0ab3f73c1c50a2539126b1f24c476d8518a9c58a1294e07617f","ssdeep":"384:Qt+KEKCnU0pMEdMAUZh/VL06g9B4gny+mz4CebUC3mIqNF5AzUjvNTqbrWV6r+Zm:TKCnU0XdMAUNLTwKgny+yxFMUjcz+Zm","tlshash":"3e92ba4c76c1a0575b9620f5a40b550bb1f39ab8600de02cb5bcd4e2bee4f856167fbc","first_seen":"2023-04-07T05:25:29Z","last_seen":"2026-07-23T06:20:42.456706Z","times_seen":2015,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/jquery-ui.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/js/jquery-ui.js HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 117978\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:17 GMT\r\netag: \"7f20d-69b792d5-8b22392ba71b55fe;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 9b3ea01ab0822b27c1a70bd84035d071-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.101\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":520717,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1002)","md5":"45bedc12dcfee87eeec2fab0eacc4282","sha1":"a9209013b11229858c017d6fbd1ba4320a0e8b61","sha256":"73b6f5a1857f503b293bd34466cf196cc7dc8f340ce397ebc9b2a3d19b12208c","sha512":"f0786f6685be36425fef0dd42311b99f7c230942c3159b709acb6de2de57c958e28954559c87b972cc0054a724be63cfb20ed0ea80396acf68c8022179c715cf","ssdeep":"12288:1femHFgymz6DdHCcmMm/W/CCeS/QRzbrVDDdRO2:/DdHCcmMm/W/CCeSIVDDdRO2","tlshash":"58b4a6c9f39c266a867a32595c2e42cdb23c8075d600587fbc5d59dc29a883c43bbf79","first_seen":"2023-03-07T12:27:54Z","last_seen":"2026-07-23T06:20:42.466037Z","times_seen":2149,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/jquery.mCustomScrollbar.min.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/css/jquery.mCustomScrollbar.min.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: text/css\r\ncontent-length: 3706\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"a7d2-69b792d4-9978031904e4725b;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 4790cea92c9aff5f0aa347485c29f234-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.021\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":42962,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (42962), with no line terminators","md5":"e315766f9faba131997b2eede211089a","sha1":"9a9dd5c15e387bce7e771c4f993be55c0719f4d7","sha256":"1bb652d030aa77242a2e7eb0626a3e95576f817a85c6a10445c0a27c2dc5f7a4","sha512":"4e66bcfcbe78e1e435ca6cefe27b0a952c98ad833b7e977c5e480bcacedd8dfaac6f8d595b52e628f9a300e51cceffe571a8ff765b9c02d10f8c6548c8c7421d","ssdeep":"768:VStyRbNRmYdFZwt6vw7R01rnk6BcxL+zhRNxA5l2ng7ytcKaWDxQ:VStyRnmYdFZwt6+R9","tlshash":"9f13179a2a4336dffb4f447dbb81379a11fc37834552166cb0d758a4ab88bf7a439402","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-07-23T06:20:42.494323Z","times_seen":1719,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/bootstrap.min.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/css/bootstrap.min.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: text/css\r\ncontent-length: 19454\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"25623-69b792d4-2126b07c51671035;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: adb70f392c09bde30d2f6e35390f6102-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.070\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":153123,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65300)","md5":"22392817c7c85f71231b55d89f7cdc5f","sha1":"9aed24a179a656eeaac2d9796a8daaa7504d6b10","sha256":"49911016ed3edb968ac5b0ed5431d025766354a593e7d8a14ac8c9740b851cf9","sha512":"7667aafb74c337041e47929b1179ecf5722dc5f76e208dceb6ff55b4f01ab30c106a90cbe97681af2f3e9560f33533bb018804519da3f25d17328f76c088fcf2","ssdeep":"1536:TtfJxYrkplD+sEBpy0cuJcH22DWg5SNVUpz600I4fS:TtfJ8NVUpz600I4fS","tlshash":"12e383dbf581241dd4a7c219a4d1bffd052f5686e3025eabb0277bb88b492c70963e4c","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-07-23T06:20:42.495057Z","times_seen":1620,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/gallery/4.jpg","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/images/gallery/4.jpg HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 41894\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 2a8f0ade211a3d75e07a1987ab036ccb-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.125\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":41894,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f1371df21946ebd9edad070c4774db0e","sha1":"23afa1c529d97dfaaaef48570dc88483c4bb784b","sha256":"edd32d2eda46c5d5cc576ca747bdbfb005c765ac5a9cc0e670050a0696f749f3","sha512":"3c725d077d5c40877c138a4662b9c8216f21eb6d2668dc1ace3ebd0f67d11dcce6f23c1dc47f100ff4581b7e4ab4b8d2abcb5d628eadd99153bff26e3c472801","ssdeep":"768:BzKUTL+2wS7rJfXumteWnovSbY/vfYqLzdTRz+2qkVc7npSojDl:0UTS2wCrhXum4vSboYqLrzUmc77Hl","tlshash":"0f13f1d9555e1e30f8e43ae8f90c96a8c71decad2189cd52f078bde6253117492cb2e3","first_seen":"2026-04-11T18:33:23.042985Z","last_seen":"2026-07-15T05:46:32.225537Z","times_seen":6,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pay-swift.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 14:07:20 GMT\r\nexpires: Sat, 22 May 2027 14:07:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:23:20 GMT\r\ncontent-type: font/woff2\r\nage: 384799\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50316,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-07-23T20:37:28.174464Z","times_seen":22922,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/main-slider/a.jpg","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/images/main-slider/a.jpg HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20090\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: e2ce2fd040ef0e3585b0ff3c37c314ca-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.104\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":20090,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"afdb519b1d91f3fdafd810a1860f4bb0","sha1":"7a43a143e5f7858c135cbb5b648579cd510e52de","sha256":"48a580a7d754a5ab4a1e0d31f8d12937f5bc4f10b0caf352ec005bd92065fb42","sha512":"c38d37f6802eaee406927c5633a403ba4a64060705167eee313c2bfe809de1cbc1591fa1d74c86be44a3875d6f520337e300b9dee54fe768b46d15f1d4b93c97","ssdeep":"384:QZ3incIzK5Iktj/2IwywWV45i1SgSBnIyf0RmBE4SHV1XWW:QQncIzK5rtDLwQuminF0Ra6n3","tlshash":"7292d1de4b5b3cd8e05d70300589abab422bc4c91f1b4a143eb4ee1b7db6566b10bdd2","first_seen":"2026-04-11T18:33:23.027825Z","last_seen":"2026-05-27T01:01:04.136064Z","times_seen":5,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-27T01:00:39.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pay-swift.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.1.34\r\nset-cookie: PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 9373574802dd2a8bd4dd28a51a8c2b28-srv-edge5\r\nx-hcdn-cache-status: DYNAMIC\r\nx-hcdn-upstream-rt: 0.169\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":40975,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (418), with CRLF line terminators","md5":"5cd20d71f4fa00bb07a18a51361fe80e","sha1":"f9639af47b8ef39a419c557dfb2157c03b6ea14e","sha256":"a6fb7adcbed94e0f11da3ec1a836a87b5b3c9ded022a8ca7ca345604515d6b5b","sha512":"d8ad7f22d83fc375a9cb6b46db5f4377374fe63578ed98444854cf3d8e684d1ae40a7fa0f4751b7d482491ee45784829f0c9b2313e652e2e0d4cb86cb628abbd","ssdeep":"384:K8QVgsRqLdsRqLwsRqLnA3iJiLrlPIVRq3aj1qIP7LMqHIqq5qiqnqIyL1J1WfsG:K8QVAyQw79D2BqKBikS","tlshash":"10030d2278c91037423342875972274deaabc937db2b8496bafc576b2ff3c44a903559","first_seen":"2026-05-26T18:08:25.05188Z","last_seen":"2026-05-27T01:01:04.136551Z","times_seen":4,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/assets/images/logo/pay-swift-home.png","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /assets/images/logo/pay-swift-home.png HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: text/html\r\ncontent-length: 1759\r\ncontent-encoding: br\r\netag: W/\"119f-68074818-3623a38cedc58683;;;\"\r\nlast-modified: Tue, 22 Apr 2025 07:41:12 GMT\r\npanel: hpanel\r\nplatform: hostinger\r\nx-turbo-charged-by: LiteSpeed\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 2e719d7cb5a1d8305beefe0b67d4e35c-srv-edge5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":4511,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (371)","md5":"b16e9097fc7d3af8ebfcfce7aba0a42d","sha1":"2af3c8408b8445fe81d9a7c8d7cc8e8a05bf80f5","sha256":"e7db95c97a5d45787cc3e40cbcb93b748fefc65bc14e162c746e37f979861729","sha512":"53a7a2c276fbc5159231c162eb863504448515f1a078832b81f1bffeedb1c82932810b66748fd4111d1b8fb866622a5cc63e79e497227b611c90886ba45d3f3b","ssdeep":"96:tr+ulojsBwJG8YqVcqHL/GSrrLc1VhrJuzeK:tyoasBwJG8nVjaSeVhrJgeK","tlshash":"0891f88f25f381452603c99037f9b61499554007f685eca8bdee9228cfc4b8a41e3bdc","first_seen":"2025-04-22T08:45:29.599713Z","last_seen":"2026-07-23T18:36:26.558208Z","times_seen":37465,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/resource/news-3.jpg","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/images/resource/news-3.jpg HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16812\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 7a4d42aa24247573f0eb2062c8abbcec-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.093\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":16812,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df4a9907e48589945d830c881296ba4e","sha1":"a81bb4ca2b323afe367073a1e58f0a90ad7451de","sha256":"06d06114c9b1af72bc37391a9583c2db83eebc4e5e9722db2efcf7ac7ec20ae5","sha512":"99713bf6760df3bb71b966707a976869dac0a8523a35ff76a85ef5e26b2eaab2a1bc623f32cef84f55844f30a765ba931aabd70100cb081b062fef7803387797","ssdeep":"384:QeXNa9J/zY2YXcJBLx9sCldyFcTBN5ZcC4YUvg1yNux7ffQ:/XNKJ028cJBLx9sCldpN5ZcCtUdNuxzo","tlshash":"ed72e06b29c1087ee11d41fb0873caf61be403c2f4451a1988c642b8da7be6d7479ba4","first_seen":"2026-04-11T18:33:23.024054Z","last_seen":"2026-07-15T05:46:32.199781Z","times_seen":6,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/bootstrap.min.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/js/bootstrap.min.js HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 15168\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:17 GMT\r\netag: \"f3cb-69b792d5-10eb7c7042538f19;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: cd1f90b109c8bbc71453cbd82d6016ce-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.066\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":62411,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (62126)","md5":"cabc5d07dec4c381f521bbcd41c009db","sha1":"ca329d086682a4d75b5528d326a66a6d3fffab13","sha256":"2909d4fa86cf09191e768576e1a6eab7f2635a2627549c45d29595ffac9c0da9","sha512":"66f6e36c99f2b57f526b4dff01c6cffe787d2bde6d6abe11d080314d2da08760a18889de7ebd6bec4a675429694d650437b55aaef12c1f7aaebe463587474016","ssdeep":"768:+hkw5E0MWirtTVU4t8GMqm7MT8VbdPyqzgqqqLWpeki3iMFpnkIID0Jhp6zvsv1z:+Z2TTktMqTiaDkIxIzcn","tlshash":"ef538249b254787206df747a817b460bb73a2899a046813cb97ad8dd1f7cc893173fb8","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-07-23T06:20:42.461173Z","times_seen":2515,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/jquery.mCustomScrollbar.concat.min.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/js/jquery.mCustomScrollbar.concat.min.js HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 11668\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:17 GMT\r\netag: \"9e63-69b792d5-db5202062c9c6c1;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 555d1eb28f7d3410452da10d35f1d4d3-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.083\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":40547,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32009)","md5":"71951b246c4726520dce912a5ac7f03c","sha1":"56906b9b9f41df67063091b7a66c8584d87d748f","sha256":"dd3bda90c210c66fd618bb0c35f4b21f871ce1dae7396053cb4b3a90b3ec51b0","sha512":"ff0b38e4e02096dedcc6fb1a0899a7f8924a89e9b25bb8d712f5ffb01414641b009da55c45241ddea6440eecb7ebff11ea93318aea46ff3ff71a2e22670cb48d","ssdeep":"768:nAGHgQl8dA0unnTUOxZ5ynGi65vqjSDHR17JayK:nAGHUSnTUOxZqxjv","tlshash":"7a03f9e9370534fb12db6f5e441b010963365956a70b8870387d8cb82fb1ea622b7b6d","first_seen":"2023-03-07T12:05:43Z","last_seen":"2026-07-23T06:20:42.458202Z","times_seen":4169,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/fonts/fa-solid-900.woff2","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/fontawesome.min.css\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 79444\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"13654-69b792d4-cc89fe0431419b88;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 01b19cad0379df020acd768b0ae9f867-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.018\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":79444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 79444, version 331.524","md5":"b15db15f746f29ffa02638cb455b8ec0","sha1":"75a88815c47a249eadb5f0edc1675957f860cca7","sha256":"7f4d3fd0a705dbf8403298aad91d5de6972e6b5d536068eba8b24954a5a0a8c7","sha512":"84e621ac534c416cf13880059d76ce842fa74bb433a274aa5d106adbda20354fa5ed751ed1d13d0c393d54ceb37fe8dbd2f653e4cb791e9f9d3d2a50a250b05f","ssdeep":"1536:ogXevisOzyu5r4HjEIe9vyJFdiTCHnegAZ64RPmF17k+GbpJ0VxZrtbz:oTvissyu5eb0ciORAZ64Qrk+0Mzbz","tlshash":"6b7302c68d4ae504c87e0daa36b5a96651be9fc5720e4df6e8700cbcf1f12dc0266d19","first_seen":"2023-04-05T14:18:50Z","last_seen":"2026-07-23T18:18:47.35309Z","times_seen":27607,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/jquery.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/js/jquery.js HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 32576\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:17 GMT\r\netag: \"17b8b-69b792d5-5328acd3c4f0761c;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: a429e3489609617a9b0d250a645af557-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.069\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":97163,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32077)","md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-23T18:41:05.916981Z","times_seen":83264,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/appear.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/js/appear.js HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1217\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:17 GMT\r\netag: \"1084-69b792d5-52b3659e0789d9b6;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 2e7a4194ee1e497b1bc818ff1abfd4fe-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.091\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":4228,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"cbbd68c06c9cdb2481b7050f6e64375e","sha1":"1ee3d2e29b6279f1986cd878072780d596250878","sha256":"4aded4f99d9aa82ccf099bfc6ddb735e25a6de44a124791c1e258cd05daee11c","sha512":"4de42f78a6ab93d9dce738e73c7dd889e7ffeea3dc01f8e09055b6eab195d1a759fbc502ecadeeeead6ec9be7fdcdededd440e154ee7e9742d77ff1a2fd48fac","ssdeep":"48:Yo3dwd2k3yV5egTkYRSdaMxlehOBOrMR6nZNBFxDNE9l92bA4FS4flyu:X3/skfRwbDOrdfFjg/2cmVflyu","tlshash":"48910e0a79eb1ab54877713e8fafa2442231503b2202d8113ceddf6c6fa1c64a597fd4","first_seen":"2023-03-07T12:11:58Z","last_seen":"2026-07-23T06:20:42.470089Z","times_seen":5162,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/linearicons.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/css/linearicons.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: text/css\r\ncontent-length: 1495\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"208e-69b792d4-b4949333e759ae36;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: a060353c798c469daac4839381b85a93-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.024\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":8334,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c7bfd6b68aa6ff3a7d355ecb83508265","sha1":"35bb6dbdc842921aee1940641c1af050043ecbd3","sha256":"05b4f1bfb6c8050752c208bf4ff7b0811a466d23d1f0fe1d8bf28ef5d4fd242b","sha512":"6350d0cea7670dba55acf938fee1be22c1a91cada3cd3b095703d93c935670222aa5963d78e2ee44ae13ad45f98e12709af788f2678c3c06efede0ef042bec74","ssdeep":"96:0w76u+LfH/7Z8iFRSyUxOyUiBjiBk2652bSBQzE2p/ylzUfhTZJ3kLbPzzUhF5YY:jW972YYXO6Te7AxJ9M","tlshash":"5b020fa4ed4d3c825382e4d23b443e802b2ef7389d012d59d417bd2eb7e32569da07da","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-07-23T06:20:42.460134Z","times_seen":1552,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/clients/5.png","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/images/clients/5.png HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3526\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 540ff339ca538c6370b8a741cf20aa3d-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.078\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":3526,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6cbc2fca002f18f4b1b3b7156d76e68a","sha1":"8ecefafcb306a368bf9284f1322ea0290b994a7e","sha256":"af110c74c72577edce40d8985cf55d34018614b6a794d1521205c4979b2f9cb8","sha512":"028d85efd0aabee9ee6839e5bac3b5fb267938743a111c2094a6b7e608de67a711132674bac9c9a07f71a585300b262f87ef67d30d17d0bed60405f8d7834441","ssdeep":"","tlshash":"fa716c175d798237f06803f92d39338b4990335a35d4171aba8b8e07eeb59d6bee4c06","first_seen":"2025-10-16T06:49:21.110786Z","last_seen":"2026-07-15T05:46:32.230992Z","times_seen":11,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/owl.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/css/owl.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: text/css\r\ncontent-length: 1060\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"1046-69b792d4-91dea901da03b2e5;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 937e65f92ba49ca716d8685bff0a27a3-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.020\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":4166,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9e5b4a71d17785de854224c2284b06b5","sha1":"f468c847a146b389adc1f7b2aa97b6dfa8dd46e0","sha256":"adc69ed1b3f5da2a8874da014b3e14f98e9ceaa85fdc947737c1e57c454e3260","sha512":"4145be2234e4f6525879a73803fda084ee355f66492b05eae50fc794dc7c10a0fca2a7f8bcdd10dca897b29321ae8d76454316b9ef374f0e2c31713592181957","ssdeep":"96:OTgJdduXehkNbIAIhIL4NV5mVrKWT+8FjFE9pgrB147gBuU4X:OTgJ/upNbIAIOoV5mVrKWT+39pgd147j","tlshash":"6481dee72567010e381b93e01aae2a56393d8443d81d8c58b6fb5609cf8ef88215ff5f","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-07-23T06:20:42.46302Z","times_seen":1613,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/fonts/themify.woff_-fvbane","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/fonts/themify.woff_-fvbane HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: text/plain\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: W/\"db2c-69b792d4-e4d9765faf47b297;gz\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 1ada947b8e0d10f747e3e07ce04ec690-srv-edge5\r\nx-hcdn-cache-status: DYNAMIC\r\nx-hcdn-upstream-rt: 0.018\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":56108,"size_decoded":0,"mime_type":"text/plain","magic":"Web Open Font Format, CFF, length 50075, version -25917.-23552","md5":"671fc2da191d9aeea954ac886c863684","sha1":"8366c792be7dc11ccf13b4bd3bbeb6fc5fb05b66","sha256":"3436575e7280c6e7cba9ca5ca2e5df72cf38fcc63bcd1f8332393b0585fc232c","sha512":"b69ead9cc2bc28b469bd16556d222d71063a8f5c231dc7fdcc0dd773a2d6c4a521a3bd2623482e6da72710d30e69a2a2ddb3e1d7601335ce30d099eb334d139b","ssdeep":"1536:hTUmbqB4qj0KJkg4T7B6FSH9cACgcj9xHim6OxJTG/Hwue:hFqiqpqnR63g2fbxJs","tlshash":"5d93430342a5cbffa48b6be010435ef999fa7b757720dbb2ca71d4ca1d296405dde0a0","first_seen":"2023-11-19T00:43:04Z","last_seen":"2026-07-15T05:46:32.228272Z","times_seen":124,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:34:08 GMT","end":"Wed, 24 Jun 2026 10:34:07 GMT"},"fingerprint":{"sha1":"C2:80:24:A2:B9:B5:FE:08:D5:9C:54:4B:3A:9A:8B:58:11:03:59:30","sha256":"4F:89:7D:DE:1D:14:7D:79:28:01:77:E4:A2:61:C6:AD:B2:D5:1B:97:99:F3:76:01:2B:E0:9D:C7:39:4A:42:7C"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"69cac7a9-4668\"\r\nexpires: Mon, 30 Mar 2026 19:03:15 GMT\r\nlast-modified: Mon, 30 Mar 2026 18:57:45 GMT\r\nx-77-nzt: k2842nIJZMLZzNKeNzgNPG/950HktaSDp3Yk5d7FUMuNaEdzcHxHOZOSfzgAr0f7AE28jG8\r\nx-77-nzt-ray: e2f754203f9f52213742166adada9733\r\nx-77-cache: HIT\r\nx-77-age: 31\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-07-23T18:48:08.468018Z","times_seen":4858,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":41,"dns":19,"connect":7,"send":0,"wait":8,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/about/home-about.png","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/images/about/home-about.png HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36522\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 558abc625309449b13f80772c63507c6-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.216\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":36522,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7c53f5f25dfe9c3fa2862a40c016ebfc","sha1":"4c08436cd94f46bfc2867515013decdbb19e5966","sha256":"b0cffd888fa6a79a3c71064212013e0f018c1a7b48f28ee013e265bc87d510b4","sha512":"42deefceaeb8cb002ddf2e626b2bdc8aef6675945cbeb308488025f30fe50854de5ffe992b56734812750df87914fa9cfa9b4d08af32b8aea9a5616051fa1ef9","ssdeep":"768:mzv6vC2D5oQ/g79KqpguuMU41nkCGm4gkRmqNNZ+uMa3+:1CAoEaKqSuua4ggmqNNZ+Q+","tlshash":"f6f2f1e2352dd3f592b0063f847e5e84a755d242d36afd71ae8f4fb5880740b21ca68b","first_seen":"2025-10-16T06:49:21.034221Z","last_seen":"2026-05-27T01:01:04.143101Z","times_seen":9,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/8726e6e139cb946202390fd707658e1cb5924b3f.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"3.127.10.164","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:40.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/8726e6e139cb946202390fd707658e1cb5924b3f.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://pay-swift.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Wed, 27 May 2026 01:00:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 57\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":57,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"471ad8674b65ae0302f71602143789ca","sha1":"8cbb927ffa584a95af053f00149b47d8295719f3","sha256":"1e3f60d29de08e299aa39aadee4c5c47414c0e6108298deb9ec78d14d62ed238","sha512":"717b067945c9b8d6fed624f98c70d1e534d76801934db5975cc13ebd86b1f1b592fb4e7f377e996893b4a7e78cd111044f49990a427bc5c42f2ebce6fa6bf7a9","ssdeep":"","tlshash":"fe90022f05291cba7f3245053c6851cc025404a1518074d6ccec917d064f540c022112","first_seen":"2023-04-19T00:11:12Z","last_seen":"2026-07-23T13:38:20.409452Z","times_seen":3263,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":92,"dns":15,"connect":21,"send":0,"wait":22,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/main-slider/2.jpg","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:43.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/images/main-slider/2.jpg HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21528\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 0c2e505e8ef744e3fc6e5d3ef1c40e17-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.106\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":21528,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"731fa31770100bd9aa3af92c59a97fb4","sha1":"f8d21ea7acf447c0fc526398eb4e34b59844a8af","sha256":"1b2b988ad4b4e91133011758a61979f4a0e53d45fb66e667e1dd8c0ffba44265","sha512":"159505a755125d37beb11f82b9da2569dae4167c11ec4b6bf5e966d67be9479e82786b9c4e847bfc1377942d304a272c5ea4b55c8132782fd70ab6238eb83a8d","ssdeep":"384:36DPoGTq52ZyAqmk1H+UfktfXUnAFLRUfbPJFYEjWDFcPrc61GKmRf:S/q5eTi1H+bU09UfbPJ3jOGGrf","tlshash":"09a2d02370fb48377eb518e13ea10458fa86ea1de21cfb366a47c76672d60c6c460d5a","first_seen":"2026-04-11T18:33:23.05686Z","last_seen":"2026-07-15T05:46:32.190799Z","times_seen":6,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":134,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/icofont.min.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/css/icofont.min.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: text/css\r\ncontent-length: 15604\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"1ac79-69b792d4-3ab96b118b8e8607;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 116a66459f245f823179a21277466d46-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.021\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":109689,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4ec323d45eddd092db34adae046326d9","sha1":"c482734e626450e8c5a21dd0937811b330a80d9f","sha256":"495078a407a12d308b30715a0d3563dc3046414328d0a3ca2c4e3512c27facac","sha512":"c7481afe6bc93b47b514367bd3782146da520cfd29ee2b83a642a8e8d9dabea10979389a23617ef7707d9f38403307d3bebbd56154f3b3af7fa28b81e5ed4563","ssdeep":"768:dIq5EItckQfe31Ucktek45IZWR7bwmqhIfCHbEYqZMLr+qZXcpYVXJzMjdPLWN4e:dIMUckwk45KWBC3XLZzMj7Egu","tlshash":"70b3ccd4dbbd0c845721d8d532426630fb1dbb2a880f2e58e2a3799ca1f3615e6d27dc","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-07-23T06:20:42.478965Z","times_seen":1689,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/main-slider/1.jpg","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:47.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/images/main-slider/1.jpg HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 130136\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 61530fa49aa5cc5ad6b85fe65c4564d4-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.224\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":130136,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec9745f5b7c4c29fe90d6ffc349f9776","sha1":"5e56226d1aaa3479b30aa1ce2c340cfb19e4f984","sha256":"2717265450f78085ef57b66e41ff39955eca776bdf18d88e36802241dad1c782","sha512":"38efa96ecaa124c85c0c811c8f784a0493a67c40d681d76f07551b71e686e1a3f18e2b1fda04ecf0b25039277a5a76b90ab356fcc79c7142378cbe131109ae02","ssdeep":"3072:z+q4pe+JZWXGkqX8VD2xo/y9Mpexy9Fs9j2M9GEo5cwoBwiwLxAw:iVQ+fWXIY2H9MXM95o5NooLxAw","tlshash":"e3d3129ac3d4d2a7e4dcdefe942c4e733a90f9a21c97a0fe57f605c16d428349948838","first_seen":"2026-04-11T18:33:23.034078Z","last_seen":"2026-05-27T01:01:04.14469Z","times_seen":5,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":253,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/gallery/1.jpg","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/images/gallery/1.jpg HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 130136\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: ae0db6b113d84384c4f1973dde39da7b-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.206\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":130136,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec9745f5b7c4c29fe90d6ffc349f9776","sha1":"5e56226d1aaa3479b30aa1ce2c340cfb19e4f984","sha256":"2717265450f78085ef57b66e41ff39955eca776bdf18d88e36802241dad1c782","sha512":"38efa96ecaa124c85c0c811c8f784a0493a67c40d681d76f07551b71e686e1a3f18e2b1fda04ecf0b25039277a5a76b90ab356fcc79c7142378cbe131109ae02","ssdeep":"3072:z+q4pe+JZWXGkqX8VD2xo/y9Mpexy9Fs9j2M9GEo5cwoBwiwLxAw:iVQ+fWXIY2H9MXM95o5NooLxAw","tlshash":"e3d3129ac3d4d2a7e4dcdefe942c4e733a90f9a21c97a0fe57f605c16d428349948838","first_seen":"2026-04-11T18:33:23.034078Z","last_seen":"2026-05-27T01:01:04.14469Z","times_seen":5,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/wow.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.53.240","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-05-27T01:00:39.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:11:03 GMT","end":"Thu, 13 Aug 2026 03:11:02 GMT"},"fingerprint":{"sha1":"DD:EB:8A:DF:6B:35:2E:E9:63:CD:F2:6D:CF:71:E8:BC:A4:BA:A2:71","sha256":"B1:5A:6C:59:87:97:24:33:81:89:DD:EE:98:B1:11:FD:C8:13:FF:2A:62:B7:47:30:C7:90:17:C2:FE:03:E3:16"}}},"request":{"raw":"GET /front/js/wow.js HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: hcdn=AQEA8P1TaeZ32iUPKNoUM5BkegHIsc-miwzRjD8A-uk-L9Y3QhZqAAAAAADeAAC1BxKXuL-59uJBFOxHi07HAAAA2K6wFeD_Ny7LiHknLrtkmw; PHPSESSID=1dclvrvv1p2p4vmm2s2sv48cc4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:00:39 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 2023\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Jun 2026 01:00:39 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:17 GMT\r\netag: \"189b-69b792d5-b8ddd3ccbd1c4572;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 713582078608fdb7b57d3070cfc7b0ee-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.091\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":6299,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (6269)","md5":"105fb3799fcf14f1ea8fcff23f2686dc","sha1":"00a8a01378a8259b38cba29dc69ddf761450053f","sha256":"704ae255ab62df5481884eb0db69b552c686e7094b21581b1cbc86a9b6c3800b","sha512":"ebdee19d8c8ab3f2d751c753ccad4a0631c1a1520821682dbcc8d9555a42d48ef9d67e333c2b9854e3452f783e5b37ecac686e287fa0f9d2ce6ce42168e87ba7","ssdeep":"96:gGqKWTAKHF/suCdaOVEE1FnePgJqg4SImYad6Q:N30suCYOVEE7ne4JqgpIwdh","tlshash":"e1d175c9b7467036d79ba1f6873f0145a23a19acb008047cb7e984e57d348699237f3c","first_seen":"2023-03-07T01:38:15Z","last_seen":"2026-07-23T06:20:54.971748Z","times_seen":3834,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}