{"report_id":"eaf24ebf-a404-4f8a-ba26-20b9646a4b5a","version":0,"status":"done","tags":[],"date":"2026-08-26T10:39:40Z","url":{"schema":"http","addr":"paynewusd.top/","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"paynewusd.top/payment.html","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"title":"付款","dom":{"size":97754,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3661)","md5":"44bbb051e541e2ab12c9d9404374919f","sha1":"fd45f92af62fb314c1507e2499793988b0841ebe","sha256":"88bf22ccc0a4fb8d04dfa94c3cb7912da424411444f004e6b86990685a76a8f0","sha512":"ce3564e5ab6a1d23dc1a15f0571431b1e41330b42bb86980de3d1f906b9722767e85c7d15830016b5e43cbc2cf9cec62af3ce2a8234c97e4c29ce0a4469540bd","ssdeep":"1536:pqNs6XPtaPr85zBqBiBKB7Hdw4bMR0wJwFwxcCzCyOfYK24DG2q+dsUnM/Wq:pqNvPwtDMR0gEHS4DG2BzM/Wq","tlshash":"faa31bd2e35d60664279208d092b77cdb11ee0b3d8c80c7bbe9c65369fd44afc869e91","dom_hash":"domhash71da5ebeaa8ec846c8f435b45fbf6f61","first_seen":"2026-08-26T10:10:55.140209Z","last_seen":"2026-08-26T10:39:42.505178Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"paynewusd.top/","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-30T10:39:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"paynewusd.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"paynewusd.top","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-08-10","domain_rank":0,"first_seen":"2026-08-26T10:10:47.312627Z","last_seen":"2026-08-26T10:10:47.312627Z","alert_count":15,"request_count":15,"received_data":1027652,"sent_data":11057,"comment":"","tags":null,"fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Lovable","description":"Lovable is an AI-powered, no-code platform that lets users build functional web apps from natural language prompts instead of writing code.","website":"https://lovable.dev/","common_platform_enumeration":"","icon":"Lovable.png","categories":["CMS"]}]},{"fqdn":"clgfrowsysmiwbxyccag.supabase.co","ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-03T14:57:55.143082Z","last_seen":"2026-08-26T10:10:51.040236Z","alert_count":0,"request_count":3,"received_data":3362,"sent_data":2358,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"paynewusd.top/chat-widget.js","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3246462695a70a982d9a959654bb8892","sha1":"3b9f72cb29e3ce110f645f5a2970bb0cd56991ee","sha256":"642e851016340ad3164616bd4692ecc0b1a552c0c9f3f4adb783b53ef32bea6f","sha512":"64278ba7c921849eefbbee401708c3fab0b08cde788b2b058e356692da9555f7ac5eb63196bc3f237f7d01290cfc0f0b367cdab4c8f08499e62c46c2d0d72f21","ssdeep":"384:BhiGhOZQqmetQOMsVWX3uKn+ll05DEdmKX2ZNOje:BEGhOaqDtQTsVWAO5YdmKmZE6","tlshash":"f5a2f89963ab21345857e0768bafa1293677c003504ada14bd8c92147fd4aba07b6ffc","size":23149,"data":"","first_seen":"2026-08-26T10:10:55.153792Z","last_seen":"2026-08-26T10:39:42.515106Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paynewusd.top/payment_files/jquery.js","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","size":31169,"data":"","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-08-26T10:39:42.509366Z","times_seen":78353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paynewusd.top/payment.html","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d0d743bd4c8eb47f206b8d4a2e6f9334","sha1":"5990b68a6562bd7804dce7a077cb326a17e33cb8","sha256":"b4d9c292eda93a59fcf5c6b493c5e987a3b2bed663dad12b86eadbc57b86f33e","sha512":"6c24589c231b31b6f75e6e90b3ef2e6fcc2a571404c5048a604246cc9644c01485be49225c573c7bf788dd71089b4b63ac1fe2874b4f8e01168be41d5b7f251c","ssdeep":"","tlshash":"b3e0d877570d86f1aceb00826005b2c5f82c00b17a1699bb3c5cad308a05d8f8537ac0","size":389,"data":"","first_seen":"2026-08-26T10:10:55.159382Z","last_seen":"2026-08-26T10:39:42.516736Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paynewusd.top/payment.html","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e10216e7f35cb3a611ec1c68abab26c","sha1":"9f826945a888ace91ca2474be7f56aacda1d7306","sha256":"30f03661a819131863c666edae27075ab6e9427a3528c227408187dc01ba913b","sha512":"5416de84fd345ffa55b066f3b011a8b41e2d545ad825d7c9c411709b29d2e1702213ef9fbd85bbeae59c4fa41e6ca3c2a3aa5edcdedc0019f9b9d0b0cbafb14f","ssdeep":"384:tC3iXjX8XJzBwxBSnNpouA5EBxqwBqdBJ5DMzeYHjFBxB3yAO+I5dw4V:tC3iXjX8XJzBwxBSdAOB0dBJ5gzee5yZ","tlshash":"8f72f8d3e36c343547e9018a857e6b8eb12dd033b8da4cf9fdac16186996a4fc010db5","size":17286,"data":"","first_seen":"2026-08-26T10:10:55.160794Z","last_seen":"2026-08-26T10:39:42.517433Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paynewusd.top/payment.html","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8a1e8a4051f92fd91f4d8f5db4dd45d","sha1":"f91de0d25d2183deb39f7b9a28033225f859c79d","sha256":"328b25ba4fa2d41ac9b9f73e42c3ce8e9fe1a0e0993d9e7407b06f604018dc5c","sha512":"2d1a2410a4a1e90a3c00772a5568ab74294eb7f049dd7e44d38f08c60caf032ef6e1ee6b3d27db53581cf5c16370a3a4e508072ff05aab4fb2bdc6a5b4481c46","ssdeep":"768:yQEwpEEw+oZwm+DQC5BCyODZEnX9KYhkc74IRmG2qUoXlmRtu3eUN2pIO0tYsliD:ewJwFwxcCzCyOfYK24DG2q+dsUx","tlshash":"7343a7d1e79e61a64178204d0a2b73ccb10ef1b385d81d7b7e8c6537abe00afc999e51","size":57297,"data":"","first_seen":"2026-08-26T10:10:55.161973Z","last_seen":"2026-08-26T10:39:42.518108Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paynewusd.top/payment.html","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"e31f3710f999d33d5f237d31190c8ea2","sha1":"01e26619a500c67802f0459ab76b7d3cce394246","sha256":"c0cee29fb9e841317e4070b969fb45a6734262d8cbcb4898461a62fbd8d5843e","sha512":"ee1666b7498e4d77a04ed7ebbbeb37b426deb72c08124b5b07121010b5806fdf698ed9535c52a96074c18d7b3efaa96b40c81dbc5068edc1d789a75b18a1d40d","ssdeep":"96:glbfaghKHndY4oiMhfSLmqZML+MshfEqfloAarBqahlBjXdLRhLGqJ8FgVqXqit9:glDagEHdH8GXmMNoAaEUd/LJCgVExtXN","tlshash":"f8c17596376525390bce38bf119adb457a3480c268484441bdbcd8690fa5de388bebc3","size":6071,"data":"","first_seen":"2026-08-26T10:10:55.163065Z","last_seen":"2026-08-26T10:39:42.518731Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paynewusd.top/payment.html","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d34e17414fdf75ee3039ff985993d357","sha1":"37c87da3efa1fc79f9dc4c174ad1f10906f4389c","sha256":"ebd09f11f6ee18569f2d7d44a0a0f578cd5c64754d2bd70aea7e924f3fe3a9de","sha512":"a262d46ab2d5cff35525ee1944eeb926852251bf2e913fd7a4298828b6382d3128e31d11c00c36e637bf607c84535594cf714d6da34116de640a54382b8722b3","ssdeep":"","tlshash":"daf04078a245b03202b3a06a0f7b3754352341238ca9ad713fcc83222f3845fd8a4fe8","size":599,"data":"","first_seen":"2026-08-26T10:10:55.164117Z","last_seen":"2026-08-26T10:39:42.519696Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paynewusd.top/payment_files/abi.js","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6dea41a453bf98cd2bae75ff64e6d0d","sha1":"ef9f16d2479867e3eeea38a373aad0658a00b728","sha256":"73481c1594d21b66abfdaaae01169ce05478876511d5b1d034d9e592e216f218","sha512":"aa1413411ed1898f35621268c3e8ce01dfa8a25f514826052507c1fb125076fa9087378d5a44e92ac29768440b811d51cfb2aa7d029c08436ac3927e70066523","ssdeep":"192:yhmwU6t4fSiAvX+C9WDslmGlIWynkW+ZtJ6:yhdoz","tlshash":"dd823868c83b5ca70489a9d419e94b13b62081a3598d7c03368c893c6fddd2f957fb9f","size":18745,"data":"","first_seen":"2026-08-26T10:10:55.145801Z","last_seen":"2026-08-26T10:39:42.513938Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paynewusd.top/payment_files/web3.min.js","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7604fe416961712f5431e050aae95781","sha1":"1f6e1ae1263c9052eff34bd5d9af2800727c6071","sha256":"17d5b524b48e49560553fc98a898f4dd3d11f16b39ce3d5370c04c14b48a1a00","sha512":"8c788add96e46b6fdbe0c80ff05437add52d4df7d8d11eb22c79b2be3d2b5cf08165ed799df20e16e83047f9d5cfd92a42ca343b25ba86f5da5b4ec8516e56d9","ssdeep":"6144:cNlldHyLtdqCHRdPB8E1TZXhUTRbrN9C1U9UX6BUAIqET9vA6nXYUq3upl6RP:cfOZQfq/AIpv6h","tlshash":"dad45b847690f0a10bdb50d544b70002f334b965705d94a8b7ba9cebbea9ecda177f38","size":636171,"data":"","first_seen":"2024-09-21T02:16:48Z","last_seen":"2026-08-26T10:39:42.509997Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"paynewusd.top/assets/index-BD5Xn7q1.js","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paynewusd.top/","date":"2026-08-26T10:39:04.491Z","timestamp":1787740744491,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /assets/index-BD5Xn7q1.js HTTP/1.1\r\nHost: paynewusd.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paynewusd.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a; __cf_bm=6traXwfDganFIoTATyp8Fz1n9IU4q.3aBEevdK2LeHU-1787740743.5405152-1.0.1.1-wivVYTLj6MwaxrR2vR6q0ST9eElV5gvuXmC.yRcZixnrv4c_3RnkWLt0KM2A1ruhXfT3Egf13r1uxr6YMA.kVXpzYkj1JysS_f7bWSfLL6LeuaTOWqP5AR3eqOFoZPZk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T13:40:42.881751Z","times_seen":18114035,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"paynewusd.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paynewusd.top/payment.html","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-26T10:39:04.819Z","timestamp":1787740744819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paynewusd.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 23:21:26 GMT","end":"Mon, 09 Nov 2026 00:21:21 GMT"},"fingerprint":{"sha1":"D4:55:06:42:A6:A1:28:C3:E1:86:3E:AD:36:F5:BA:BE:E2:38:CE:7C","sha256":"26:B7:FD:8F:6F:60:34:78:DD:C8:73:F9:80:13:75:D9:73:BD:58:FA:B3:E5:3B:10:0F:E1:E8:20:D7:79:87:A8"}}},"request":{"raw":"GET /payment.html HTTP/1.1\r\nHost: paynewusd.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paynewusd.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a; __cf_bm=6traXwfDganFIoTATyp8Fz1n9IU4q.3aBEevdK2LeHU-1787740743.5405152-1.0.1.1-wivVYTLj6MwaxrR2vR6q0ST9eElV5gvuXmC.yRcZixnrv4c_3RnkWLt0KM2A1ruhXfT3Egf13r1uxr6YMA.kVXpzYkj1JysS_f7bWSfLL6LeuaTOWqP5AR3eqOFoZPZk\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 26 Aug 2026 10:39:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-deployment-id: 887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a31235e71e5e56a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103926,"size_decoded":26998,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (573)","md5":"5f7cb75327dc407d7f5e022208d55073","sha1":"706efe59025cfbe1aa6c843c15ae7ee990df920d","sha256":"b2d4edef19b889c05b5dacda9289f161aec6357f6aaecb5e546892f24827a051","sha512":"52fba9c98a57cbe0afaaa96883b1f9c0be69bad92d22bb98fc0ddb6e48d624d94db3af31ae75abdeb8afc4925e3be12fdccd0be195477cd77972c84529c85094","ssdeep":"1536:FqNytaPr85zBqBiBKB7Hdw4bMR0wJwFwxcCzCyOfYK24DG2q+dsUnM/mNSFxt8uM:FqNywtDMR0gEHS4DG2BzM/mNSFrgYsP","tlshash":"66a32bd2e75e60664279208d192b77cc720de173d8cc0cbb7e9c652a9fd50afc869e90","first_seen":"2026-08-26T10:10:55.152274Z","last_seen":"2026-08-26T10:39:42.506524Z","times_seen":4,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"paynewusd.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paynewusd.top/payment_files/animate.min.css","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paynewusd.top/payment.html","date":"2026-08-26T10:39:04.959Z","timestamp":1787740744959,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paynewusd.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 23:21:26 GMT","end":"Mon, 09 Nov 2026 00:21:21 GMT"},"fingerprint":{"sha1":"D4:55:06:42:A6:A1:28:C3:E1:86:3E:AD:36:F5:BA:BE:E2:38:CE:7C","sha256":"26:B7:FD:8F:6F:60:34:78:DD:C8:73:F9:80:13:75:D9:73:BD:58:FA:B3:E5:3B:10:0F:E1:E8:20:D7:79:87:A8"}}},"request":{"raw":"GET /payment_files/animate.min.css HTTP/1.1\r\nHost: paynewusd.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paynewusd.top/payment.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a; __cf_bm=6traXwfDganFIoTATyp8Fz1n9IU4q.3aBEevdK2LeHU-1787740743.5405152-1.0.1.1-wivVYTLj6MwaxrR2vR6q0ST9eElV5gvuXmC.yRcZixnrv4c_3RnkWLt0KM2A1ruhXfT3Egf13r1uxr6YMA.kVXpzYkj1JysS_f7bWSfLL6LeuaTOWqP5AR3eqOFoZPZk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 26 Aug 2026 10:39:05 GMT\r\ncontent-type: text/css; charset=utf-8\r\nx-deployment-id: 887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a31235e7ffbe56a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97538,"size_decoded":5958,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d6ba1f3c721c3d1964072fdbe58c6df1","sha1":"f4bf4e2dbdbb950fb5a1a7b4b5a198faab6c138d","sha256":"0dc4173e22e4a838a8382893ed002a7319937fb55f4aa31b796eb553eb4ef345","sha512":"b08fdfde788bd9c85d386f606b2121d38d3fda7bf9f489e3fad98b5efd860fc539f6bf9c30d4508e547f1930204a7c50448bf0caca332fe5d3cce5286e6ab65c","ssdeep":"1536:1K+roRNzXcUK9TjhP+aAfY9vcvqvXviilvEvrvhvJ:iY9vcvqvXvxvEvrvhvJ","tlshash":"76932db928e1114493270a2583df4e78663ce5a318276cf9b38f498bcf46fb857c9617","first_seen":"2025-09-22T10:26:10.345973Z","last_seen":"2026-08-26T10:39:42.507116Z","times_seen":6,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"paynewusd.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clgfrowsysmiwbxyccag.supabase.co/rest/v1/token_contracts?select=chain,address,symbol","fqdn":"clgfrowsysmiwbxyccag.supabase.co","domain":"clgfrowsysmiwbxyccag.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://paynewusd.top/payment.html","date":"2026-08-26T10:39:06.473Z","timestamp":1787740746473,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 08:31:41 GMT","end":"Sat, 26 Sep 2026 09:31:31 GMT"},"fingerprint":{"sha1":"E3:40:C1:D4:51:29:D7:08:6B:7E:FD:6A:D1:5C:3A:58:E0:77:B1:04","sha256":"E4:89:07:23:60:38:C7:FE:B0:5C:D8:62:E4:1C:D7:FC:57:28:F2:8D:A6:1B:95:E6:76:1D:9C:29:5C:5B:32:98"}}},"request":{"raw":"OPTIONS /rest/v1/token_contracts?select=chain,address,symbol HTTP/1.1\r\nHost: clgfrowsysmiwbxyccag.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: apikey,authorization,content-type\r\nReferer: https://paynewusd.top/\r\nOrigin: https://paynewusd.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 26 Aug 2026 10:39:06 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: apikey,authorization,content-type\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: clgfrowsysmiwbxyccag\r\nsb-request-id: 01a03da6-f2fc-7db2-9709-4b14d5ebf33d\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: __cf_bm=uUjOwsrN5WW40HaVg0Pxv8q1k0G6OX0IzJJGqqTg23g-1787740746.4750428-1.0.1.1-b7Br1uL4f27U2irC8f600zuo5zdcdgjbeynCEGZvYb9bG7fYFSUep6xRxLipx1pqtFSs8tIBenSaho0FGkZUB0zNHpYEIL860QuYvQCJlSc2KpEu.pDww.oMkAnMMlLm; HttpOnly; SameSite=None; Secure; Path=/; Domain=supabase.co; Expires=Wed, 26 Aug 2026 11:09:06 GMT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a31235f1788c56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"uUjOwsrN5WW40HaVg0Pxv8q1k0G6OX0IzJJGqqTg23g-1787740746.4750428-1.0.1.1-b7Br1uL4f27U2irC8f600zuo5zdcdgjbeynCEGZvYb9bG7fYFSUep6xRxLipx1pqtFSs8tIBenSaho0FGkZUB0zNHpYEIL860QuYvQCJlSc2KpEu.pDww.oMkAnMMlLm","quoted":false,"path":"/","domain":"supabase.co","expires":"2026-08-26T11:09:06Z","raw_expires":"Wed, 26 Aug 2026 11:09:06 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=uUjOwsrN5WW40HaVg0Pxv8q1k0G6OX0IzJJGqqTg23g-1787740746.4750428-1.0.1.1-b7Br1uL4f27U2irC8f600zuo5zdcdgjbeynCEGZvYb9bG7fYFSUep6xRxLipx1pqtFSs8tIBenSaho0FGkZUB0zNHpYEIL860QuYvQCJlSc2KpEu.pDww.oMkAnMMlLm; HttpOnly; SameSite=None; Secure; Path=/; Domain=supabase.co; Expires=Wed, 26 Aug 2026 11:09:06 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":948,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T13:40:42.881751Z","times_seen":18114035,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paynewusd.top/","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-26T10:39:03.503Z","timestamp":1787740743503,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paynewusd.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 23:21:26 GMT","end":"Mon, 09 Nov 2026 00:21:21 GMT"},"fingerprint":{"sha1":"D4:55:06:42:A6:A1:28:C3:E1:86:3E:AD:36:F5:BA:BE:E2:38:CE:7C","sha256":"26:B7:FD:8F:6F:60:34:78:DD:C8:73:F9:80:13:75:D9:73:BD:58:FA:B3:E5:3B:10:0F:E1:E8:20:D7:79:87:A8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: paynewusd.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 26 Aug 2026 10:39:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nx-deployment-id: 887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __dpl=887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a; Path=/; Max-Age=86400; SameSite=Lax; Secure\n__cf_bm=6traXwfDganFIoTATyp8Fz1n9IU4q.3aBEevdK2LeHU-1787740743.5405152-1.0.1.1-wivVYTLj6MwaxrR2vR6q0ST9eElV5gvuXmC.yRcZixnrv4c_3RnkWLt0KM2A1ruhXfT3Egf13r1uxr6YMA.kVXpzYkj1JysS_f7bWSfLL6LeuaTOWqP5AR3eqOFoZPZk; HttpOnly; SameSite=None; Secure; Path=/; Domain=paynewusd.top; Expires=Wed, 26 Aug 2026 11:09:04 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a31235df1b8056a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a","quoted":false,"path":"/","max_age":86400,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"__dpl=887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a; Path=/; Max-Age=86400; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"6traXwfDganFIoTATyp8Fz1n9IU4q.3aBEevdK2LeHU-1787740743.5405152-1.0.1.1-wivVYTLj6MwaxrR2vR6q0ST9eElV5gvuXmC.yRcZixnrv4c_3RnkWLt0KM2A1ruhXfT3Egf13r1uxr6YMA.kVXpzYkj1JysS_f7bWSfLL6LeuaTOWqP5AR3eqOFoZPZk","quoted":false,"path":"/","domain":"paynewusd.top","expires":"2026-08-26T11:09:04Z","raw_expires":"Wed, 26 Aug 2026 11:09:04 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=6traXwfDganFIoTATyp8Fz1n9IU4q.3aBEevdK2LeHU-1787740743.5405152-1.0.1.1-wivVYTLj6MwaxrR2vR6q0ST9eElV5gvuXmC.yRcZixnrv4c_3RnkWLt0KM2A1ruhXfT3Egf13r1uxr6YMA.kVXpzYkj1JysS_f7bWSfLL6LeuaTOWqP5AR3eqOFoZPZk; HttpOnly; SameSite=None; Secure; Path=/; Domain=paynewusd.top; Expires=Wed, 26 Aug 2026 11:09:04 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Lovable","description":"Lovable is an AI-powered, no-code platform that lets users build functional web apps from natural language prompts instead of writing code.","website":"https://lovable.dev/","common_platform_enumeration":"","icon":"Lovable.png","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3224,"size_decoded":2413,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"e848d74d74c36c6f8d4d29dcb5a144e7","sha1":"fa9cf9f6fbedb0377236ea34322842242e199ef2","sha256":"e7a11d93de7cb92a4a221d82d9907d3424ba68c22c136008a8d34527f02a8e85","sha512":"e4a32bc4446f5cf76476525c4a588e17ac11001cd33ef6e956215e14e90f8bc608b4279c08a66eae764027d0bed77feb58ff92438a56dcf7a4dd8c3e8fa080fa","ssdeep":"","tlshash":"b56184ab8c104939d2fca9b1d862f21481716507e6c9d868f97cd8ad1989fc780abd31","first_seen":"2026-08-26T10:39:42.508022Z","last_seen":"2026-08-26T10:39:42.508022Z","times_seen":1,"resource_available":false,"data":null}},"time_used":755,"timings":{"blocked":-1,"dns":4,"connect":2,"send":0,"wait":727,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"paynewusd.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paynewusd.top/payment_files/jquery.js","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paynewusd.top/payment.html","date":"2026-08-26T10:39:04.965Z","timestamp":1787740744965,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paynewusd.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 23:21:26 GMT","end":"Mon, 09 Nov 2026 00:21:21 GMT"},"fingerprint":{"sha1":"D4:55:06:42:A6:A1:28:C3:E1:86:3E:AD:36:F5:BA:BE:E2:38:CE:7C","sha256":"26:B7:FD:8F:6F:60:34:78:DD:C8:73:F9:80:13:75:D9:73:BD:58:FA:B3:E5:3B:10:0F:E1:E8:20:D7:79:87:A8"}}},"request":{"raw":"GET /payment_files/jquery.js HTTP/1.1\r\nHost: paynewusd.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paynewusd.top/payment.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a; __cf_bm=6traXwfDganFIoTATyp8Fz1n9IU4q.3aBEevdK2LeHU-1787740743.5405152-1.0.1.1-wivVYTLj6MwaxrR2vR6q0ST9eElV5gvuXmC.yRcZixnrv4c_3RnkWLt0KM2A1ruhXfT3Egf13r1uxr6YMA.kVXpzYkj1JysS_f7bWSfLL6LeuaTOWqP5AR3eqOFoZPZk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 26 Aug 2026 10:39:05 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a31235e80fd356a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31169,"size_decoded":11202,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31169), with no line terminators","md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-08-26T10:39:42.509366Z","times_seen":78353,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"paynewusd.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paynewusd.top/payment_files/web3.min.js","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paynewusd.top/payment.html","date":"2026-08-26T10:39:04.969Z","timestamp":1787740744969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paynewusd.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 23:21:26 GMT","end":"Mon, 09 Nov 2026 00:21:21 GMT"},"fingerprint":{"sha1":"D4:55:06:42:A6:A1:28:C3:E1:86:3E:AD:36:F5:BA:BE:E2:38:CE:7C","sha256":"26:B7:FD:8F:6F:60:34:78:DD:C8:73:F9:80:13:75:D9:73:BD:58:FA:B3:E5:3B:10:0F:E1:E8:20:D7:79:87:A8"}}},"request":{"raw":"GET /payment_files/web3.min.js HTTP/1.1\r\nHost: paynewusd.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paynewusd.top/payment.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a; __cf_bm=6traXwfDganFIoTATyp8Fz1n9IU4q.3aBEevdK2LeHU-1787740743.5405152-1.0.1.1-wivVYTLj6MwaxrR2vR6q0ST9eElV5gvuXmC.yRcZixnrv4c_3RnkWLt0KM2A1ruhXfT3Egf13r1uxr6YMA.kVXpzYkj1JysS_f7bWSfLL6LeuaTOWqP5AR3eqOFoZPZk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 26 Aug 2026 10:39:05 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a31235e80fdc56a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":636171,"size_decoded":165309,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65470)","md5":"7604fe416961712f5431e050aae95781","sha1":"1f6e1ae1263c9052eff34bd5d9af2800727c6071","sha256":"17d5b524b48e49560553fc98a898f4dd3d11f16b39ce3d5370c04c14b48a1a00","sha512":"8c788add96e46b6fdbe0c80ff05437add52d4df7d8d11eb22c79b2be3d2b5cf08165ed799df20e16e83047f9d5cfd92a42ca343b25ba86f5da5b4ec8516e56d9","ssdeep":"6144:cNlldHyLtdqCHRdPB8E1TZXhUTRbrN9C1U9UX6BUAIqET9vA6nXYUq3upl6RP:cfOZQfq/AIpv6h","tlshash":"dad45b847690f0a10bdb50d544b70002f334b965705d94a8b7ba9cebbea9ecda177f38","first_seen":"2024-09-21T02:16:48Z","last_seen":"2026-08-26T10:39:42.509997Z","times_seen":15,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"paynewusd.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clgfrowsysmiwbxyccag.supabase.co/rest/v1/page_settings?select=site_id,push_enabled,chains_enabled,notice_text,support_url\u0026id=eq.true","fqdn":"clgfrowsysmiwbxyccag.supabase.co","domain":"clgfrowsysmiwbxyccag.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://paynewusd.top/payment.html","date":"2026-08-26T10:39:05.639Z","timestamp":1787740745639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 08:31:41 GMT","end":"Sat, 26 Sep 2026 09:31:31 GMT"},"fingerprint":{"sha1":"E3:40:C1:D4:51:29:D7:08:6B:7E:FD:6A:D1:5C:3A:58:E0:77:B1:04","sha256":"E4:89:07:23:60:38:C7:FE:B0:5C:D8:62:E4:1C:D7:FC:57:28:F2:8D:A6:1B:95:E6:76:1D:9C:29:5C:5B:32:98"}}},"request":{"raw":"GET /rest/v1/page_settings?select=site_id,push_enabled,chains_enabled,notice_text,support_url\u0026id=eq.true HTTP/1.1\r\nHost: clgfrowsysmiwbxyccag.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paynewusd.top/\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImNsZ2Zyb3dzeXNtaXdieHljY2FnIiwicm9sZSI6ImFub24iLCJpYXQiOjE3Nzg0MDU2NzIsImV4cCI6MjA5Mzk4MTY3Mn0.iSnoUg8dXDYRZ4LnmhsigH_iUzazEBTZF9vBYfT5nus\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImNsZ2Zyb3dzeXNtaXdieHljY2FnIiwicm9sZSI6ImFub24iLCJpYXQiOjE3Nzg0MDU2NzIsImV4cCI6MjA5Mzk4MTY3Mn0.iSnoUg8dXDYRZ4LnmhsigH_iUzazEBTZF9vBYfT5nus\r\nContent-Type: application/json\r\nOrigin: https://paynewusd.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 26 Aug 2026 10:39:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-range: 0-0/*\r\ncf-ray: a31235ed3a2056a5-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://paynewusd.top\r\ncontent-encoding: gzip\r\ncontent-location: /page_settings?id=eq.true\u0026select=site_id%2Cpush_enabled%2Cchains_enabled%2Cnotice_text%2Csupport_url\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: clgfrowsysmiwbxyccag\r\nsb-request-id: 01a03da6-f05c-7714-bc14-ee729386618d\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 3\r\nset-cookie: __cf_bm=K.LlMbCO3EuUZmweHpSTRYTnXYqj3tpAWF_o1d4l_tU-1787740745.7994397-1.0.1.1-nQSnwIeyJFLO0b7kljemCaGd_vFBpuWBfoy2VBDLbvAbDBJg9zy2veaHlymGknA1w2ZPozN8qeW2bGrzR5aQi7SRIaY5aTqmaLyKEA7m0IMUE_HSp022mHRe0GK.vVvf; HttpOnly; SameSite=None; Secure; Path=/; Domain=supabase.co; Expires=Wed, 26 Aug 2026 11:09:06 GMT\r\npriority: u=4,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"K.LlMbCO3EuUZmweHpSTRYTnXYqj3tpAWF_o1d4l_tU-1787740745.7994397-1.0.1.1-nQSnwIeyJFLO0b7kljemCaGd_vFBpuWBfoy2VBDLbvAbDBJg9zy2veaHlymGknA1w2ZPozN8qeW2bGrzR5aQi7SRIaY5aTqmaLyKEA7m0IMUE_HSp022mHRe0GK.vVvf","quoted":false,"path":"/","domain":"supabase.co","expires":"2026-08-26T11:09:06Z","raw_expires":"Wed, 26 Aug 2026 11:09:06 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=K.LlMbCO3EuUZmweHpSTRYTnXYqj3tpAWF_o1d4l_tU-1787740745.7994397-1.0.1.1-nQSnwIeyJFLO0b7kljemCaGd_vFBpuWBfoy2VBDLbvAbDBJg9zy2veaHlymGknA1w2ZPozN8qeW2bGrzR5aQi7SRIaY5aTqmaLyKEA7m0IMUE_HSp022mHRe0GK.vVvf; HttpOnly; SameSite=None; Secure; Path=/; Domain=supabase.co; Expires=Wed, 26 Aug 2026 11:09:06 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":199,"size_decoded":1438,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"10d51321301c5f195479d61c8c1380a1","sha1":"5b025465bee12b8fbb629561e216486326f70def","sha256":"4907acf53889669f24496a7e47bfe42c9c6dfa35a8efb161d7aa792e21104b5f","sha512":"df7d09677f8019ccbc29d5e3b2037f9af409db25ba1cef8e6b1aaed0a641e07ebac5e0182e315762982e5a97cc2b0b7d13ead46f45773eeb243cec95760bbfc6","ssdeep":"","tlshash":"29d023d3410e24c780c6d08d021416433845d575d1cda43793717518015f0b56641d35","first_seen":"2026-08-26T10:26:34.027774Z","last_seen":"2026-08-26T10:39:42.510581Z","times_seen":2,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":664,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paynewusd.top/cdn-cgi/rum?","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paynewusd.top/payment.html","date":"2026-08-26T10:39:05.656Z","timestamp":1787740745656,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paynewusd.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 23:21:26 GMT","end":"Mon, 09 Nov 2026 00:21:21 GMT"},"fingerprint":{"sha1":"D4:55:06:42:A6:A1:28:C3:E1:86:3E:AD:36:F5:BA:BE:E2:38:CE:7C","sha256":"26:B7:FD:8F:6F:60:34:78:DD:C8:73:F9:80:13:75:D9:73:BD:58:FA:B3:E5:3B:10:0F:E1:E8:20:D7:79:87:A8"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: paynewusd.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paynewusd.top/payment.html\r\ncontent-type: application/json\r\nContent-Length: 665\r\nOrigin: https://paynewusd.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a; __cf_bm=6traXwfDganFIoTATyp8Fz1n9IU4q.3aBEevdK2LeHU-1787740743.5405152-1.0.1.1-wivVYTLj6MwaxrR2vR6q0ST9eElV5gvuXmC.yRcZixnrv4c_3RnkWLt0KM2A1ruhXfT3Egf13r1uxr6YMA.kVXpzYkj1JysS_f7bWSfLL6LeuaTOWqP5AR3eqOFoZPZk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":665,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"https://paynewusd.top/\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":317,\"startTime\":1787740744811,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.2.0\",\"timings\":2},\"pageloadId\":\"7f15e6a7-c2a1-4ccc-b716-6dd4ec021f0a\",\"location\":\"https://paynewusd.top/payment.html\",\"nt\":\"navigate\",\"timingsV2\":{\"nextHopProtocol\":\"h2\",\"domainLookupStart\":0,\"domainLookupEnd\":0,\"connectStart\":0,\"connectEnd\":0,\"requestStart\":8,\"responseStart\":116,\"responseEnd\":116,\"domInteractive\":830,\"domComplete\":839,\"loadEventStart\":839,\"loadEventEnd\":840,\"transferSize\":26882,\"decodedBodySize\":103926},\"siteToken\":\"c25be5dd93084b70b389b8c61e310446\",\"st\":2}"}},"response":{"raw":"HTTP/2 404 \r\ndate: Wed, 26 Aug 2026 10:39:05 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a31235ec5d3f56a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":495,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"45efc4779b2e6b43ed200755328af518","sha1":"badb6097a3c8fad00517f38352ba72b9f7b6637b","sha256":"d66dd0f2f24c4343661a5396e1ba76782fe651f7d422209eded956ebf90900fc","sha512":"862ceb668672d90ed3da9419ca69bf0214b5c34dec2353fea792a75fb1c0c2e5fd54e6e56cf1e9d4d60c4eaa7d98411f5cb5e128be2661d9bbd084d0dbd085e0","ssdeep":"","tlshash":"a1c02b3d35637e0c8563303522c3b190d0c6833774ba00220500c00330cb2e9cac33d7","first_seen":"2023-09-18T10:37:28Z","last_seen":"2026-08-26T10:39:42.511303Z","times_seen":19453,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"paynewusd.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paynewusd.top/favicon.ico","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paynewusd.top/payment.html","date":"2026-08-26T10:39:05.876Z","timestamp":1787740745876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paynewusd.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 23:21:26 GMT","end":"Mon, 09 Nov 2026 00:21:21 GMT"},"fingerprint":{"sha1":"D4:55:06:42:A6:A1:28:C3:E1:86:3E:AD:36:F5:BA:BE:E2:38:CE:7C","sha256":"26:B7:FD:8F:6F:60:34:78:DD:C8:73:F9:80:13:75:D9:73:BD:58:FA:B3:E5:3B:10:0F:E1:E8:20:D7:79:87:A8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: paynewusd.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paynewusd.top/payment.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a; __cf_bm=6traXwfDganFIoTATyp8Fz1n9IU4q.3aBEevdK2LeHU-1787740743.5405152-1.0.1.1-wivVYTLj6MwaxrR2vR6q0ST9eElV5gvuXmC.yRcZixnrv4c_3RnkWLt0KM2A1ruhXfT3Egf13r1uxr6YMA.kVXpzYkj1JysS_f7bWSfLL6LeuaTOWqP5AR3eqOFoZPZk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Wed, 26 Aug 2026 10:39:06 GMT\r\ncontent-type: text/html; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a31235edbef656a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Lovable","description":"Lovable is an AI-powered, no-code platform that lets users build functional web apps from natural language prompts instead of writing code.","website":"https://lovable.dev/","common_platform_enumeration":"","icon":"Lovable.png","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2652,"size_decoded":1532,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"5abdfa610be8f73d76c6b25d70a0bb3a","sha1":"24f2a9ace518e239bbe41d31f2bcfb5580564071","sha256":"d48381ee3d20e35cc473daa96ee9f33440b920dd349650b24f050f9ad846058b","sha512":"35534abbb3a4e5b773ea2b54ec7d0fa892c2052edce9a7b1dd05fefcce3cdf1654d537d92f01505bb6abeb18f3edcafe7f7281e53c6409c8f25b3094868abe61","ssdeep":"","tlshash":"ca5187a74c146b1e5266aa70d862f214c0b5d60bc697dd7df6fce0df0a82ec1807ba30","first_seen":"2026-08-26T10:39:42.511817Z","last_seen":"2026-08-26T10:39:42.511817Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"paynewusd.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paynewusd.top/~flock.js","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paynewusd.top/","date":"2026-08-26T10:39:04.494Z","timestamp":1787740744494,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paynewusd.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 23:21:26 GMT","end":"Mon, 09 Nov 2026 00:21:21 GMT"},"fingerprint":{"sha1":"D4:55:06:42:A6:A1:28:C3:E1:86:3E:AD:36:F5:BA:BE:E2:38:CE:7C","sha256":"26:B7:FD:8F:6F:60:34:78:DD:C8:73:F9:80:13:75:D9:73:BD:58:FA:B3:E5:3B:10:0F:E1:E8:20:D7:79:87:A8"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: paynewusd.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paynewusd.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a; __cf_bm=6traXwfDganFIoTATyp8Fz1n9IU4q.3aBEevdK2LeHU-1787740743.5405152-1.0.1.1-wivVYTLj6MwaxrR2vR6q0ST9eElV5gvuXmC.yRcZixnrv4c_3RnkWLt0KM2A1ruhXfT3Egf13r1uxr6YMA.kVXpzYkj1JysS_f7bWSfLL6LeuaTOWqP5AR3eqOFoZPZk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 26 Aug 2026 10:39:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a31235e51bbb56a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21296,"size_decoded":8694,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-08-26T13:22:38.916945Z","times_seen":16051,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"paynewusd.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paynewusd.top/payment_files/all.min.css","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paynewusd.top/payment.html","date":"2026-08-26T10:39:04.961Z","timestamp":1787740744961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paynewusd.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 23:21:26 GMT","end":"Mon, 09 Nov 2026 00:21:21 GMT"},"fingerprint":{"sha1":"D4:55:06:42:A6:A1:28:C3:E1:86:3E:AD:36:F5:BA:BE:E2:38:CE:7C","sha256":"26:B7:FD:8F:6F:60:34:78:DD:C8:73:F9:80:13:75:D9:73:BD:58:FA:B3:E5:3B:10:0F:E1:E8:20:D7:79:87:A8"}}},"request":{"raw":"GET /payment_files/all.min.css HTTP/1.1\r\nHost: paynewusd.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paynewusd.top/payment.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a; __cf_bm=6traXwfDganFIoTATyp8Fz1n9IU4q.3aBEevdK2LeHU-1787740743.5405152-1.0.1.1-wivVYTLj6MwaxrR2vR6q0ST9eElV5gvuXmC.yRcZixnrv4c_3RnkWLt0KM2A1ruhXfT3Egf13r1uxr6YMA.kVXpzYkj1JysS_f7bWSfLL6LeuaTOWqP5AR3eqOFoZPZk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 26 Aug 2026 10:39:05 GMT\r\ncontent-type: text/css; charset=utf-8\r\nx-deployment-id: 887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a31235e80fc656a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83981,"size_decoded":18107,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65311)","md5":"3d5ef2bf867c4054a2f336cdbad9e1dc","sha1":"07228d1fa3245ee156a27a353f45758a3207849f","sha256":"a361e7885c36bacb3fd9cb068da207c3b9329962cac022d06e28923939f575e8","sha512":"168deb96b663fe4eee8d39c78380864760fb912b34bf82cb6a7c36aa4b18b91944ccefad71a10f428810d0a6a818ddbaff3ae7db42264750dfb8b5a73a8eda04","ssdeep":"1536:YlMVM6MVM9MVMKMVMRsVMNdhwJHQ9Kll3ITRUHrt+z:sdhgw9kITRULt+z","tlshash":"458376e8e44c05d56732c44baf55b378a1b6f73cd5810da9f02f590c29d26a822c6f7a","first_seen":"2023-04-09T08:23:50Z","last_seen":"2026-08-26T10:39:42.513351Z","times_seen":21777,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"paynewusd.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paynewusd.top/payment_files/abi.js","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paynewusd.top/payment.html","date":"2026-08-26T10:39:04.967Z","timestamp":1787740744967,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paynewusd.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 23:21:26 GMT","end":"Mon, 09 Nov 2026 00:21:21 GMT"},"fingerprint":{"sha1":"D4:55:06:42:A6:A1:28:C3:E1:86:3E:AD:36:F5:BA:BE:E2:38:CE:7C","sha256":"26:B7:FD:8F:6F:60:34:78:DD:C8:73:F9:80:13:75:D9:73:BD:58:FA:B3:E5:3B:10:0F:E1:E8:20:D7:79:87:A8"}}},"request":{"raw":"GET /payment_files/abi.js HTTP/1.1\r\nHost: paynewusd.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paynewusd.top/payment.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a; __cf_bm=6traXwfDganFIoTATyp8Fz1n9IU4q.3aBEevdK2LeHU-1787740743.5405152-1.0.1.1-wivVYTLj6MwaxrR2vR6q0ST9eElV5gvuXmC.yRcZixnrv4c_3RnkWLt0KM2A1ruhXfT3Egf13r1uxr6YMA.kVXpzYkj1JysS_f7bWSfLL6LeuaTOWqP5AR3eqOFoZPZk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 26 Aug 2026 10:39:05 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a31235e80fd756a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18795,"size_decoded":1996,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"b6dea41a453bf98cd2bae75ff64e6d0d","sha1":"ef9f16d2479867e3eeea38a373aad0658a00b728","sha256":"73481c1594d21b66abfdaaae01169ce05478876511d5b1d034d9e592e216f218","sha512":"aa1413411ed1898f35621268c3e8ce01dfa8a25f514826052507c1fb125076fa9087378d5a44e92ac29768440b811d51cfb2aa7d029c08436ac3927e70066523","ssdeep":"192:yhmwU6t4fSiAvX+C9WDslmGlIWynkW+ZtJ6:yhdoz","tlshash":"dd823868c83b5ca70489a9d419e94b13b62081a3598d7c03368c893c6fddd2f957fb9f","first_seen":"2026-08-26T10:10:55.145801Z","last_seen":"2026-08-26T10:39:42.513938Z","times_seen":4,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"paynewusd.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paynewusd.top/chat-widget.js","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paynewusd.top/payment.html","date":"2026-08-26T10:39:04.970Z","timestamp":1787740744970,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paynewusd.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 23:21:26 GMT","end":"Mon, 09 Nov 2026 00:21:21 GMT"},"fingerprint":{"sha1":"D4:55:06:42:A6:A1:28:C3:E1:86:3E:AD:36:F5:BA:BE:E2:38:CE:7C","sha256":"26:B7:FD:8F:6F:60:34:78:DD:C8:73:F9:80:13:75:D9:73:BD:58:FA:B3:E5:3B:10:0F:E1:E8:20:D7:79:87:A8"}}},"request":{"raw":"GET /chat-widget.js HTTP/1.1\r\nHost: paynewusd.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paynewusd.top/payment.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a; __cf_bm=6traXwfDganFIoTATyp8Fz1n9IU4q.3aBEevdK2LeHU-1787740743.5405152-1.0.1.1-wivVYTLj6MwaxrR2vR6q0ST9eElV5gvuXmC.yRcZixnrv4c_3RnkWLt0KM2A1ruhXfT3Egf13r1uxr6YMA.kVXpzYkj1JysS_f7bWSfLL6LeuaTOWqP5AR3eqOFoZPZk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 26 Aug 2026 10:39:05 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a31235e81fe056a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23261,"size_decoded":7934,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (358)","md5":"3246462695a70a982d9a959654bb8892","sha1":"3b9f72cb29e3ce110f645f5a2970bb0cd56991ee","sha256":"642e851016340ad3164616bd4692ecc0b1a552c0c9f3f4adb783b53ef32bea6f","sha512":"64278ba7c921849eefbbee401708c3fab0b08cde788b2b058e356692da9555f7ac5eb63196bc3f237f7d01290cfc0f0b367cdab4c8f08499e62c46c2d0d72f21","ssdeep":"384:BhiGhOZQqmetQOMsVWX3uKn+ll05DEdmKX2ZNOje:BEGhOaqDtQTsVWAO5YdmKmZE6","tlshash":"f5a2f89963ab21345857e0768bafa1293677c003504ada14bd8c92147fd4aba07b6ffc","first_seen":"2026-08-26T10:10:55.153792Z","last_seen":"2026-08-26T10:39:42.515106Z","times_seen":4,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"paynewusd.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clgfrowsysmiwbxyccag.supabase.co/rest/v1/page_settings?select=site_id,push_enabled,chains_enabled,notice_text,support_url\u0026id=eq.true","fqdn":"clgfrowsysmiwbxyccag.supabase.co","domain":"clgfrowsysmiwbxyccag.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://paynewusd.top/payment.html","date":"2026-08-26T10:39:05.642Z","timestamp":1787740745642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 08:31:41 GMT","end":"Sat, 26 Sep 2026 09:31:31 GMT"},"fingerprint":{"sha1":"E3:40:C1:D4:51:29:D7:08:6B:7E:FD:6A:D1:5C:3A:58:E0:77:B1:04","sha256":"E4:89:07:23:60:38:C7:FE:B0:5C:D8:62:E4:1C:D7:FC:57:28:F2:8D:A6:1B:95:E6:76:1D:9C:29:5C:5B:32:98"}}},"request":{"raw":"OPTIONS /rest/v1/page_settings?select=site_id,push_enabled,chains_enabled,notice_text,support_url\u0026id=eq.true HTTP/1.1\r\nHost: clgfrowsysmiwbxyccag.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: apikey,authorization,content-type\r\nReferer: https://paynewusd.top/\r\nOrigin: https://paynewusd.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 26 Aug 2026 10:39:05 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: apikey,authorization,content-type\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: clgfrowsysmiwbxyccag\r\nsb-request-id: 01a03da6-f001-70e2-ac78-31b025a7c866\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: __cf_bm=zxDEWtpyYWafhMxSDlDBKHoxTdzVzNyqkAxv6TAhZC4-1787740745.678447-1.0.1.1-U8Jui2bebFTd6zNGcx1IATKxo8B_5P0f78gaxyoC_5vKZBuTrdyi2bO9VjWFezDyx6pprmL9hpajp4UwR_eRaF3q1jWgBxf_jFb0.JnCvYRb48Te97cnc8Ne6nHUZEQ.; HttpOnly; SameSite=None; Secure; Path=/; Domain=supabase.co; Expires=Wed, 26 Aug 2026 11:09:05 GMT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a31235ec78f156a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"zxDEWtpyYWafhMxSDlDBKHoxTdzVzNyqkAxv6TAhZC4-1787740745.678447-1.0.1.1-U8Jui2bebFTd6zNGcx1IATKxo8B_5P0f78gaxyoC_5vKZBuTrdyi2bO9VjWFezDyx6pprmL9hpajp4UwR_eRaF3q1jWgBxf_jFb0.JnCvYRb48Te97cnc8Ne6nHUZEQ.","quoted":false,"path":"/","domain":"supabase.co","expires":"2026-08-26T11:09:05Z","raw_expires":"Wed, 26 Aug 2026 11:09:05 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=zxDEWtpyYWafhMxSDlDBKHoxTdzVzNyqkAxv6TAhZC4-1787740745.678447-1.0.1.1-U8Jui2bebFTd6zNGcx1IATKxo8B_5P0f78gaxyoC_5vKZBuTrdyi2bO9VjWFezDyx6pprmL9hpajp4UwR_eRaF3q1jWgBxf_jFb0.JnCvYRb48Te97cnc8Ne6nHUZEQ.; HttpOnly; SameSite=None; Secure; Path=/; Domain=supabase.co; Expires=Wed, 26 Aug 2026 11:09:05 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":947,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T13:40:42.881751Z","times_seen":18114035,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":18,"connect":12,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paynewusd.top/assets/styles-CtqwvUEl.css","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paynewusd.top/","date":"2026-08-26T10:39:04.489Z","timestamp":1787740744489,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /assets/styles-CtqwvUEl.css HTTP/1.1\r\nHost: paynewusd.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paynewusd.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a; __cf_bm=6traXwfDganFIoTATyp8Fz1n9IU4q.3aBEevdK2LeHU-1787740743.5405152-1.0.1.1-wivVYTLj6MwaxrR2vR6q0ST9eElV5gvuXmC.yRcZixnrv4c_3RnkWLt0KM2A1ruhXfT3Egf13r1uxr6YMA.kVXpzYkj1JysS_f7bWSfLL6LeuaTOWqP5AR3eqOFoZPZk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T13:40:42.881751Z","times_seen":18114035,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"paynewusd.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paynewusd.top/assets/index-Dcll7-W5.js","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paynewusd.top/","date":"2026-08-26T10:39:04.493Z","timestamp":1787740744493,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /assets/index-Dcll7-W5.js HTTP/1.1\r\nHost: paynewusd.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paynewusd.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a; __cf_bm=6traXwfDganFIoTATyp8Fz1n9IU4q.3aBEevdK2LeHU-1787740743.5405152-1.0.1.1-wivVYTLj6MwaxrR2vR6q0ST9eElV5gvuXmC.yRcZixnrv4c_3RnkWLt0KM2A1ruhXfT3Egf13r1uxr6YMA.kVXpzYkj1JysS_f7bWSfLL6LeuaTOWqP5AR3eqOFoZPZk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T13:40:42.881751Z","times_seen":18114035,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"paynewusd.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paynewusd.top/api/public/chat-config","fqdn":"paynewusd.top","domain":"paynewusd.top","tld":"top"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://paynewusd.top/payment.html","date":"2026-08-26T10:39:05.644Z","timestamp":1787740745644,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paynewusd.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 23:21:26 GMT","end":"Mon, 09 Nov 2026 00:21:21 GMT"},"fingerprint":{"sha1":"D4:55:06:42:A6:A1:28:C3:E1:86:3E:AD:36:F5:BA:BE:E2:38:CE:7C","sha256":"26:B7:FD:8F:6F:60:34:78:DD:C8:73:F9:80:13:75:D9:73:BD:58:FA:B3:E5:3B:10:0F:E1:E8:20:D7:79:87:A8"}}},"request":{"raw":"GET /api/public/chat-config HTTP/1.1\r\nHost: paynewusd.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://paynewusd.top/payment.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a; __cf_bm=6traXwfDganFIoTATyp8Fz1n9IU4q.3aBEevdK2LeHU-1787740743.5405152-1.0.1.1-wivVYTLj6MwaxrR2vR6q0ST9eElV5gvuXmC.yRcZixnrv4c_3RnkWLt0KM2A1ruhXfT3Egf13r1uxr6YMA.kVXpzYkj1JysS_f7bWSfLL6LeuaTOWqP5AR3eqOFoZPZk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 26 Aug 2026 10:39:06 GMT\r\ncontent-type: application/json\r\ncontent-length: 37\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, OPTIONS\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 887bb296ca1a448ca98f127acabc8ad35de0c519b38a50aac60b781621e8510a\r\nserver: cloudflare\r\ncf-ray: a31235ec4d2956a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37,"size_decoded":561,"mime_type":"application/json","magic":"JSON text data","md5":"6c26d2065bbb0e34629b13b81d5067b1","sha1":"b1af2d3c949d6efaf3a724525429e06f9cbbe2ef","sha256":"1b80a11cc3e8525ec32ccb7c96a5b5f7b086bacc8c89cd4aa8d8a1d5f9e9dd8d","sha512":"2ad6fbb5d8887ee729374d4c94752b36f97a7f86052bd45afc786fd82f601a39ec08ba3628969abcbc0d42ef98fef33fcf81a70eb3c5a49aa4dc5012478b14df","ssdeep":"","tlshash":"d58004d351d07040535001fc304c741dc01df75514f4300540411c10043c0fd405300c","first_seen":"2026-08-26T10:10:55.14709Z","last_seen":"2026-08-26T10:39:42.516124Z","times_seen":4,"resource_available":false,"data":null}},"time_used":761,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":761,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"paynewusd.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}