{"report_id":"fd4e65bc-214a-4acd-a4f4-7c8ffdf43c56","version":0,"status":"done","tags":[],"date":"2026-10-07T05:08:57Z","url":{"schema":"http","addr":"aijrpd.payden-qt.com/","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/#/","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"title":"Payden Global Investments Ltd","dom":{"size":286545,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52496)","md5":"751a1bd78af7cbbe63a418ad5834f8cb","sha1":"eb48b7f4e426a3b944847fe760ea4882e6c9796e","sha256":"fbba329dac83119ab16df1e7bd4b7915390e1c16274df965737271f0d4921552","sha512":"dd2818d7bbc1922df1f57cc8edcec81009fad67aa71ecc51b049d2d0558faa7da243bc3baee068097c98b89b36d254e197bff67bb3bb6175d6c57c3d485ca389","ssdeep":"1536:j2SfHQ34OOb+G7gtxO4MDMczwKCBymZdKnYWsgozDrzBWYGrmVc6q1L5HJJbxaS/:F7k0F","tlshash":"e854c6706255a1deb25783cce0303d2632bbfadab6c5c1446ddc12e16f9ace46c5c8b6","dom_hash":"domhashbaeebaeed2f1d793c76d9fe41eb27233","first_seen":"2026-10-07T05:09:59.109154Z","last_seen":"2026-10-07T05:09:59.109154Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"aijrpd.payden-qt.com/","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T05:08:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-10-01T16:02:05.388646Z","alert_count":0,"request_count":1,"received_data":120062,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.payden-qt.com","ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-17","domain_rank":0,"first_seen":"2026-10-07T03:48:27.926064Z","last_seen":"2026-10-07T03:48:27.926064Z","alert_count":23,"request_count":24,"received_data":4098983,"sent_data":12918,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"aijrpd.payden-qt.com","ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-17","domain_rank":0,"first_seen":"2026-10-07T05:09:27.722115Z","last_seen":"2026-10-07T05:09:27.722115Z","alert_count":48,"request_count":48,"received_data":6422755,"sent_data":22451,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-10-04T22:46:21.559025Z","alert_count":0,"request_count":5,"received_data":150517,"sent_data":2802,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s2.coinmarketcap.com","ip":{"addr":"143.204.238.93","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-28","domain_rank":209181,"first_seen":"2018-01-12T04:47:19Z","last_seen":"2026-09-30T06:03:39.337168Z","alert_count":0,"request_count":12,"received_data":41302,"sent_data":6831,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/8Z8ZbOFoWrC-Th3cbc.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a1aa3c23f4ee70ea212f4e9c805695a","sha1":"693ba91fb77ea69d5fec36c00d8dc1a3dc6e94a7","sha256":"c485377030d27fb0683d6fe661ac8adec9b5a54a1af76312dd6d6f060cc31131","sha512":"d274466ecb0d3ec0bc24cff12d6ffcf9f12ad733bfca68fd2eca8322e103c8a2536c325b8618c8bb9bfcdb7ac48038053e32513c27253c0f77eb9f908d03b08b","ssdeep":"12288:AvPpLdkEaFYKhRvk4pVo2iHIqBmsa7ABhGpA3RWvj9StnnBQIhfGplV9SIIYJU6C:+PoeKhVkHBVzvl","tlshash":"cd7544286a1bf744e419c0d7f9373c84d599d68aa00b14d26f790bb31be2792eb9cd13","size":1653640,"data":"","first_seen":"2026-10-07T03:48:35.349155Z","last_seen":"2026-10-07T05:10:02.137022Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/vS8SUsLBZCCJl22rt_.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d2cd75c6c0b88572d5c00b1818e9230","sha1":"30465b9fb99ffb7fc14e32e5edc7eb7b46ede43d","sha256":"845001d7d68725c802b2ab7e0de4aca73baf05c6f51405161cc2eb53d584bebe","sha512":"52913bcd262434102be03db32f1ef2f91d0e9c9532cbcd1e3ce0d9ef2223ce53f6bbcf9ad54c4bec08067096c79254d874cfc7217c56247245560a64243b8608","ssdeep":"","tlshash":"8e317298f80acfbcb07748394507c055900c4fdef226d60570e84a2217e6c39921af6c","size":1684,"data":"","first_seen":"2026-10-07T03:48:35.325569Z","last_seen":"2026-10-07T05:10:01.227754Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/mdWe31LOAPCatkchYv.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"90ec6a01f0ae58f24278212f1fd40808","sha1":"bfa67853a79e20bdb67913a089384f08e1f17cb1","sha256":"fe8f34069628d152a2b7a817b5a1be623c735c36ad6130763d3dd75dba687939","sha512":"1ace142ffaff7f4c6fd1f44f962b13ce48699531d0347dad4d821f53cbde91771db739c38d74bd3afca5807e63b78aec9b87a56ff53af805c0fda5577b654636","ssdeep":"","tlshash":"11219e5c9e9acdb19023608d0486043276d83f9cf8a5438562e37e5e7789cecb6259bc","size":1363,"data":"","first_seen":"2026-10-07T03:48:35.309577Z","last_seen":"2026-10-07T05:09:59.215839Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/cJGIrUSR6yBTqVRJnD.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"22ce91ed99c3bcd7999df6e8311a4e74","sha1":"d0d0cbf2432452d431d09ec30fc924dbdc4fee95","sha256":"319f125c2cc80ebc45c1cb2f4567920eba18b32a947854df087bd7160daba699","sha512":"cea0f978d51a836a573ff3efdb3fbff2616d4df1aa30dab8504b2a329606bbb0f4109e9e7351c68359901290f6cf3135b22e0b18fe2b930521e7467674685412","ssdeep":"","tlshash":"ff01d545a57070d073bb1c8245150dc166724b762b42d0e0b51c9e82ea7fe56d2f7f69","size":805,"data":"","first_seen":"2026-10-07T03:48:35.24117Z","last_seen":"2026-10-07T05:09:59.967213Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/9PdGyEieJ4DSTV9a5F.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48c379f7249055b38c88cd2da791b427","sha1":"582bd17d34b617a5329a95a0c527f29262724ba1","sha256":"f14012aacff1bca9c8b8e705128a9a1578900ad6b8cf0093af5fb6e8e618fc86","sha512":"692ef77ef3c7640c9f6f74bc91917ad6a6a6385a5ced78508de6c28825adf69dc17d4799607d60d79d1cc21da26c1661943caffb826e8f57c5d5c976035ca02a","ssdeep":"","tlshash":"b0f05c4df465d17c51be2c6e8441004d13324fd41292e1c8753f5e984b34de2d6a7c2d","size":464,"data":"","first_seen":"2026-10-07T03:48:35.262325Z","last_seen":"2026-10-07T05:10:00.424422Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d43360cb4e41e2f0fb69ed4fe612be4c","sha1":"0c0cfc8ad8236d13e93399756d82198283fb8737","sha256":"5311285d405215369bc6d3ad7c28e3d7290710039db1d27b2be4f7f9cf16dd25","sha512":"f3074312ce9f7c0022dbf9f42e0fb0953f5c843f2c130513be70173c207282fb7cb4bc9fdde59f97b7d577a34e4de40ba019e94f5436e77879b5ac477e379c3f","ssdeep":"","tlshash":"1d5122193ad4b7298257b0b4986fcd49f520043a02e8d8484b1cd6fae82587dabb9cdd","size":2977,"data":"","first_seen":"2024-05-10T21:13:03Z","last_seen":"2026-10-07T05:10:02.153571Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"111459594869556f10cc1e70225d7456","sha1":"ac9017ffce5eb8247c95ff0be19ed0ad8997aae1","sha256":"805904ef24dce3a96fbf8a54597a0a0dbe51bb633230e3067d775d111323c059","sha512":"09ab383a0228d98c66744bd7a845c4ebe8b9d48ce2b62f2f5636e8cac3487dcbed1b8c75456f8ecc55600d539cd1f6d0b00fa8f809c2a8ddec95bdf2e025673f","ssdeep":"","tlshash":"fbf09e1b1c47b1ae1bd6a17aa73f9d1b22112146319054137e0c80286fe083c5fe9e8c","size":500,"data":"","first_seen":"2023-10-12T05:30:40Z","last_seen":"2026-10-07T05:10:02.164977Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dffd12485a916eae51ce720b08ee638d","sha1":"315838200ac42093a6dafc5b04d6d356698e2c2f","sha256":"dae6ecb0cd45818719f7d2a2e001003663de74a31152b131a807ec282e261ae3","sha512":"ea5426b7f58105871b2a40f15d464dc3556ed8d28358a403e23ea507444e8fc77d2069134e4b74e691b8bf98b194131899c9f0061ecd9df5ee26c752df36ca81","ssdeep":"","tlshash":"ef11aa2824ea160c8117ba95b1bfff0c762c612561e4dc0c814dd079142edbed6dd9af","size":1062,"data":"","first_seen":"2026-06-07T18:22:29.81227Z","last_seen":"2026-10-07T05:10:02.174709Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b56685935f7f71b2b8ab78b429393951","sha1":"67a507d5ed6d1fa46b8b5cb9af6612c136274e0c","sha256":"d4a19c4526267ca77bc813c7589192e6ae9eb9e5d7852122219fe4d2dc1abc67","sha512":"206bad1b3d3e2656c2b5942290f665ec17c26fe55e63a824d89515ab2581757ba189c7e2c261397535f392384b2728f4f358ea5188b389a237563101bb1a513b","ssdeep":"","tlshash":"fcf0c2d95997593446eb15ff2b9e701060305002e909ffa0346f05446fdd72ae7e1be8","size":610,"data":"","first_seen":"2026-06-07T18:22:29.813319Z","last_seen":"2026-10-07T05:10:02.182008Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e0394286e034331a16624d7c91e7cd0","sha1":"ab920dd032fced2236e73697d29b412929749434","sha256":"4319010dbe429ca43f3a285840a104b4e6522f374b5b9d8aa0809eaca12e5f0a","sha512":"35724f1ab72b5c69549c9c63c4ede539701b8e21ca6f7f944658aefb2919153059e77a301c67d3cfc7530f01006afa0bc1f1e8459fdb0b5cb4f0b188e615fbbb","ssdeep":"","tlshash":"3de0c02a18ea18b99756a2b2313ffc053102300d626843727a4cc504ef90d7f87a4f88","size":380,"data":"","first_seen":"2026-06-07T18:22:29.814513Z","last_seen":"2026-10-07T05:10:02.198619Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3bcf011ebdd38a31ab4a9a50b16a082b","sha1":"cf58024c54803f38301f50557a75a5a91a52106a","sha256":"c07f4fcb61301077a2ba5f8c58b87f3071d0a73eb2cb920ef215f66afa5de645","sha512":"3da41b64567304935815551bea40b466a57143fb55576dce44ade8ce3ddcc240c1908fa8766813cb82e2cf27bb298ae6699441d1dd7db6f2c687705ee4a39984","ssdeep":"","tlshash":"d9018b531cd9549b6f2710bd6b3eaa1232a51113544ad464fc0e9720af64e7c1724adc","size":684,"data":"","first_seen":"2026-06-07T18:22:29.815556Z","last_seen":"2026-10-07T05:10:02.213924Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/Cvlm8RhJcbfkxpsqTp.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"768d9ad3d716c671e5942acd3fa086c1","sha1":"484c83303e59a94878074559c0a2d99ed608fde0","sha256":"2de8b259b5ae4d8c73d53e661081fd0c87039cb65491d6954e27ccdda1f3a2b5","sha512":"20f4e3e895eb50d584d504f1b5493b7204e3b5308b5195956c3d474ab1c199610645ebf262325106dc7a541112034519a71b49d45d1255ce036c155bf8d9df87","ssdeep":"","tlshash":"fef08b0e981282bd95ab5d452943206220487eeccb20d8c4e6e629b19782966e46ff18","size":544,"data":"","first_seen":"2026-10-07T03:48:35.324503Z","last_seen":"2026-10-07T05:10:00.761341Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/MGx0WOVcg4m-HF_3OX.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1787a3d5e6afb421d8a09eb8e5c58e31","sha1":"9a234d61d4dcff16609db9ba377f02f16b5d3e8a","sha256":"632717dda7a5219fc7c2c976e8f8e0711280092c0fad226f0eb73af4513e455c","sha512":"b074483908ffd8a2b890e00af4175f7382fa7a7376cc16f479c1a50786282ac7ececed5422917cc31a4903b42afe11c09755410b11662283f50578b2776cb172","ssdeep":"768:19NarmFp351iBFmyG5YgJnHkf+mKggY72oMIIlKRceZfvwIDT6X8wih/kfpCLBy9:BqmdUxkWcl","tlshash":"b5c2fb7060608328fed5f4a918845c466dc80beeca9691e3f1fd8dc353c2a7bed95399","size":27738,"data":"","first_seen":"2026-10-07T03:48:35.275092Z","last_seen":"2026-10-07T05:10:00.223079Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/UcvicFSn46CE-6bfQO.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a665fb7419f0f312d3ca481ad6abad41","sha1":"62a3c4b678d876d5026eb7d587a8e31600acee44","sha256":"08c1ae09713fed88aca71f2c15dd92b78cb12d8bd362bd2a5bfbf9ae260255c4","sha512":"7c0bff1e346a6e28ebb37c9d2d39b6abe29db3949a941359d2e2aecfa17d95b0983e6bd01fe06866567447bee1e58376318263d8b74b422ab6e3015283f6d8bd","ssdeep":"384:uB5Qp35LlP1819G/BC/eDk0h4SdaMCuSA:uB5Qp35Ll2EBCWTh4SdaMCuSA","tlshash":"02825684b807446ac7f3548d059d5024b2b43eca92181507fbf83d7a1bdbab067be7e6","size":19183,"data":"","first_seen":"2026-10-07T03:48:35.242422Z","last_seen":"2026-10-07T05:09:59.679076Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/#/","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"334c1df9d7cbc3519a286d40bd5ca18b","sha1":"4fdfd44666132f3539c0c90fa78b7abeff651ced","sha256":"0e24d6adc0a7c495e77fb86233ff7417053d1262b0fd0500c3e449a7ba621673","sha512":"2bf2f7bdb7821f75cd98877cf9f6066fd0c8dc2997bc9a26ec3206b8501d4cd6a189f960f8a4c8aab186a295d509eb0df47a8d13e9c73afcb90e87a1447f581d","ssdeep":"","tlshash":"b6c08cd4a0c22d002602681010af34e490244426708c1b03cc94dc983e220b48233ea8","size":141,"data":"","first_seen":"2023-09-10T00:20:07Z","last_seen":"2026-10-07T09:55:59.031179Z","times_seen":1736,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/SGbFD9geipBtbHlLUK.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6dadf741ff87139926bf18b4cf36b0f","sha1":"c4077c7ab0230982705f387769b5f05588a0a11b","sha256":"f047a7c2bd6ecfcd75596076797841c012f7df8664c7ffe93fb513bbf1c8a0ac","sha512":"672ad3371df079d57d8a00b95417ea50eb6e181a5a5efb957ec0b8d641337a78fc7f976a5a6ee8e79a65506b2ad51e6139d014d5a301c89385d4a8b4490c6b54","ssdeep":"","tlshash":"2a41849cf501dabca777463884120050620c0fdfa564dee4f1ae1f225bd6cb4a59af78","size":2253,"data":"","first_seen":"2026-10-07T03:48:35.249158Z","last_seen":"2026-10-07T05:10:00.778162Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/mInedbfRtZiFL9c6Bs.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"23d767c7621636b66276b680be6cb820","sha1":"68df23c56c517e8e6291186db320a3647d53e2c7","sha256":"ec339e24635b01065f54b34a33244ec08b1c403dd74c701dd913acfd9a725720","sha512":"178b6d66811bda8cf8a196bf0dc6977062451a18105aea4ba26a7696552dc71b1c8d701ab7d7a00dac29f211c0f79a3d6d89cb6844b31cc640240513b533e213","ssdeep":"","tlshash":"6d619398faa594708fb52cf0329440c95b0e13d0ed2784ed501b6f012babd63bee9524","size":3370,"data":"","first_seen":"2026-10-07T03:48:35.310602Z","last_seen":"2026-10-07T05:10:00.94283Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/VDLGBNwg0rDlwJHT2D.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecd6457abc1aa76082bb5b35bf8fbdcf","sha1":"0c0cac461dae65cab092b15554c8d22fa82c5221","sha256":"afa609957fad12ba291b7b9a7141fc7c288342f7f93d0ed27489edcf16a2ea50","sha512":"dd37bebb6261a570ed3c772f38a8080d03d7417d30b8a10613042570fadb21baa2473740e4101f362584209c0311205370ca403ab64b838b93d80eb941a4a2bb","ssdeep":"","tlshash":"6321215d7802db79cc57496cd0981c02618c3feb9778c8a1f0eead266ad1eb0863e734","size":1237,"data":"","first_seen":"2026-10-07T03:48:35.30304Z","last_seen":"2026-10-07T05:10:00.813273Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/yS21SIz21EB3733qgv.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0228e59b05ec9b2da9e1c0bc5bace41d","sha1":"be999c80cbf5796caf46a5561a0204708b7d4475","sha256":"67214b3da80b306d3f05d21e05f2bf582cee6600cae3a62c143c8234f0173723","sha512":"ca2bd14b5b88315b552c80c7bca683ba11aa9c38b0765f49f8abdeb7a48de6ff937804f8389da84662adf9cbd01e4760f77d87fdd6f0f56aa6d0559f85437bbf","ssdeep":"3072:jI27UnZY5kWoH6J+2JfnSId3BoqTz0Fe4aOeHVSlO3G5H:X7Unm5AH6J+2JfndU5","tlshash":"ca443b51740beb3ee5a3588d68491800340d4feed41d9966f2fcb626afc6cb0573e7a8","size":259508,"data":"","first_seen":"2026-10-07T03:48:35.266455Z","last_seen":"2026-10-07T05:10:01.653522Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/CqeTqDPge6BDwLrjOo.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cccedce0f072f52bbee5ac828928034","sha1":"dbdff0f76c5ce605e0feae87cef9d69ae5d70183","sha256":"49bc9aa94a1c1bb0229bddb27e809d06237cbbc98f7b0c6b51c659bb100b0335","sha512":"11a8d415d658f35307d5aeb07e7309fe960752dede359eadf66317ca88d7f6d3ee75b129aa1053640737a7080ae5c8faa7e76aa3b40cd013cb27e774e33f7277","ssdeep":"192:2/TyGZyULAS9T5BjOG2L+VpJl++xxcf8g6Gwctfj5ZTc913wl3wFoP9NRe:2B5LA25bA+VLQ+DY7wKfj5Zojwxw89NM","tlshash":"c902124c385a8dbcd8fe4a01e8475490b69e1fdd802945a5f1fdd8231ad3ee09b46bec","size":8705,"data":"","first_seen":"2026-10-07T03:48:35.263317Z","last_seen":"2026-10-07T05:09:59.695599Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/#/","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0ed7511cd3b7281935b501081af2b243","sha1":"7ce7c1685cb501be190aabcf6be8dd99cfbf124e","sha256":"4247c7e1fc2e29b0428ce5ddb331bde55d7a2240cdfe739e78d856349a36e99b","sha512":"792f1b064e558413e24df0cdf3b12c29725a76345b048c7b3ee9b3745d708b482d7b4fefd118be667b4a4a8a6976784b63847f7f225d44b9045c73cbc8bd2ca1","ssdeep":"","tlshash":"9bc08cc4a0c63d002603655110af24e4a0244026704c1b22add4e8483e230b08233e9c","size":141,"data":"","first_seen":"2023-09-24T22:56:46Z","last_seen":"2026-10-08T09:37:11.759065Z","times_seen":859,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/#/","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c415610d1c6998f83128a020e5b1df43","sha1":"440ad3fb20204ec67535de835556117be6cd50c4","sha256":"27c032af12b21b46398803d2f32b25ae3ef69e8eaa650da845ed64b360e91515","sha512":"0d201917b22aad7c3b0fe53f92789cff808a11d3a88df5c9dfb1e9793ad069d9aa8d1110cb37fd796917a6bbd97aefabcda27326a8b46a31f1e1f3d93d48d455","ssdeep":"","tlshash":"e2c08cc9a0cb2e101a4265a419bf25e4a024442a704c9b038cd8ec5c3e230b4d233eac","size":151,"data":"","first_seen":"2023-05-23T01:00:35Z","last_seen":"2026-10-07T05:10:02.268895Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca4a8297c04185dcabadf889be3e89f9","sha1":"4b834315fb35f05b82e744159c6ad18d6e29d513","sha256":"124bdff7ba3fe86c8ba5143467afec21e020405e74abdb92cfdda6c0ee3b5908","sha512":"a2a2e6820fe904d6c5a86f50c5947c3782398d3e670b2a0a4f1bd47689b942eb2a4969e7063c46be13b426dc60615f97bce41ec4c143baa2e7a51358c318bead","ssdeep":"1536:pdpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYlb7p/xHK8IT:TpTpRdfcKFy7Rxgv","tlshash":"07c33d4d6cb3612285b3b1bf8b5f9251b2719883305def20794d5b606f80e7c53eaad8","size":119731,"data":"","first_seen":"2026-10-06T10:22:47.792071Z","last_seen":"2026-10-08T09:37:11.47433Z","times_seen":439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/7kzbrYkQYzC8_OHTL3.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c185b39976b88870041d0ea821423996","sha1":"720a808a1e9953cebe1b80598ebc8f6e64f92ef4","sha256":"7fbda92d31c13990a979948e8113ce36f2f5153415f97f1313c2196ac6c0a460","sha512":"26452ef0f09207c117d66ba361bf624c069c08b9765cd51d2a7a9ae3136a2050df22dc202dd27145296d8ff1266d47263d7a42eaf4774fdcb92b9e69273c3441","ssdeep":"","tlshash":"d2213296f08df17d42fe3d76a85b1006c3211bd0236041dc77ab058e0b269c19567e1f","size":1269,"data":"","first_seen":"2026-10-07T03:48:35.302004Z","last_seen":"2026-10-07T05:10:00.154694Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/NLtX3pkfvmCgbaCrTc.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"81b9693cfedf4011edd84a8806f88033","sha1":"7f8a216a7024c46c19a4d687c170d555d2998084","sha256":"83dcff0b80d0f30f7f3e6d9d57dc1c86b4eb4a95c61737deb5dd7ad93bc9408a","sha512":"af0f492edac8ae9d56849b093054583d763581ec2d4525cd460664ebd8beaad4afe56b660abd2cc55637eae1220dc98b164a003d979583dcae87e52d8084dfec","ssdeep":"","tlshash":"dd014eafbc9eeeb8606348b14486186a310a8f3dba7989c0f2b25f3015d2800d01bb4d","size":707,"data":"","first_seen":"2026-10-07T03:48:35.294882Z","last_seen":"2026-10-07T05:10:01.814432Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/mgdib9uIG5BZ1Sf_ug.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eaab6ea495e8b2bc45c6cd62ff0a81a1","sha1":"29c21d9dd986880606cfb55e7c5a127ae9668686","sha256":"8272597e03e8724a111c1166f009a00eb4f30a524c560bddad1e09c97f678e70","sha512":"be835b22da4daeef9b273425369a1192d175d3d013821ca57cafe94c3785a38414634952c924d46f0f03b1f1a51596e46375f0569b6902051def8b3ea1a6eb6d","ssdeep":"192:y054mYG47jY4G3Pcb5ACbqQ/pU1ra9gX+EHoYoX85b8H17FZ9UN6e3+ZKc8IRW7z:nkX7dG305WKQ+EDoX85b8H7ZqNNgg7aI","tlshash":"52321c9678447074877798c4c0a909a19229378cf229c6d1f16e2c2a3b6d5b4f0fef1e","size":11238,"data":"","first_seen":"2026-10-07T03:48:35.305114Z","last_seen":"2026-10-07T05:10:01.278728Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/q7yzwVwl8hDvIbGRLV.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f615f8981b33453695fe336b6919189","sha1":"b3c2f3cb4a1bed91df8afce7d76090a5e7d5f222","sha256":"f0d6ac48fef45910880651e653a55a06b300ad5845060dd90ef6de76da0c94d5","sha512":"6bd12e364b348fdf454890258023ff6c1faf723ff0aeb28f58fbbb37c2328f8db66a8ac3fead720e02f96ae5249fd39cd6194d535a58fe2794f12c71b2cb393d","ssdeep":"24576:RkabhrRVp2QxXb9aNfbRu0Phm8NbQA5wYRl7FTG+:m+rrpaPuqm8lQsTG+","tlshash":"d9854904a41bdabcf8f361a498989841b5693febc111d517b2fc081727c7c78bb997b8","size":1740188,"data":"","first_seen":"2026-10-07T03:48:35.346207Z","last_seen":"2026-10-07T05:10:02.35345Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/#/","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"02408d922d2e1998a79d8d6f850a8fa5","sha1":"05881ad7e2edf93b804c00b4998f794b9be830e2","sha256":"2864865ce925856a2bf5886ef5970aa3f3c2c592f2f6963f42fc77308efe5b95","sha512":"d79c14118cc3f703cf56276c6432e4c886ed04c65964fa528d842d1f2efb256ea5cb7f313b5dcf870032fddad8b695ac049c3d0de86f8ceeb0a5932b7586cc2a","ssdeep":"","tlshash":"c9c08cc4a0c26d105602645010af24e490244027b0481b028cd4d8482e220b08233e98","size":137,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-10-07T05:10:02.377048Z","times_seen":1099,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/imfCziKSn3CNrafatW.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a3e68e69a8a0e56e91987f14f9b8239","sha1":"c24114bad49946e9302da2ff9d998a04f30ec51e","sha256":"0426f7469227541d33a332a5c8b7cbe8da172b11f2a2135c3a2abdd072b3e87f","sha512":"1e66a0e61bae143ac0f432fc992d857de13a4bb07508ac081e6ae960afcc62412b14b452e322b908961a68de331905bf0281ff18d3c611ca192e5dbf6f8dc763","ssdeep":"","tlshash":"a93141a4f6a9d034537a58e1c03d1610e2591f84711af8ead4ff0e816e9284af93ba3c","size":1810,"data":"","first_seen":"2026-10-07T03:48:35.298346Z","last_seen":"2026-10-07T05:09:59.933247Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/gj2gcGs7z4AZOSTjf9.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c6856731e461b8e70f8147510e58364","sha1":"4c7dfa4d694435651adc226dec0719c49d374812","sha256":"8c1d0dad645fa856237b8e80dd0bd5fbf1550e893d142e2000c4bbf58dd13bf3","sha512":"648b3671087909f242ff9da7b2545536105dc83f3b4461364afed55e4681e06c971f3cde05026b095fcf044b6005ae5b92ded27d2488ba59a29a8164c0dc25f7","ssdeep":"","tlshash":"130189247ecdf6e6d16f046844e29349db3063ac58c000666e6787700fadbb3c86bb00","size":747,"data":"","first_seen":"2026-10-07T03:48:35.299446Z","last_seen":"2026-10-07T05:10:00.318209Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/T6rfSUrLCzCx_2Jz3R.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"641ffb0d6a08c9fce0c73d8acaada677","sha1":"64118bf2b49d4554b9d8ae36ccc76df1781fb574","sha256":"74253140983496bfdd1da28fa017ae91efaff4bace4383a12b60be14166d7a2b","sha512":"6e0da6b558587c14504238739273c1a43e7c1ef9552f1ca99c73975f1c918a6d3092146ddcb9120732c1b0fd90b2ed71d6ebdd77f51543fc4d86b4b4ae8a8e4e","ssdeep":"192:eISXv41iPQNDN9NzDnVTDQQezJs+nNULO4evdNfmK0xoHpKkI:eI71jt7BBsQEs+nNZ1QSTI","tlshash":"15028ee314017e7e57e182b8a76834145c77147f11ed223a2e4fd256b589122b18d4a7","size":8259,"data":"","first_seen":"2026-10-07T03:48:35.23992Z","last_seen":"2026-10-07T05:10:01.24633Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/KCpg25pb7h_X-VLT-t.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78ffe35ca107c1101f2caf4043b6e577","sha1":"9bac7e17541d3530945341d02ab704f671db78da","sha256":"65f081a7fd3b1e8afb1325e166062d36effb59529e4fd96635f4d00a268687b7","sha512":"b08687420c409b3c02cdf85811b04894bacd4a9d2b9959026c4bf4a668f75da012008146c7383d27c872c57ca807aa4c12fd1846c52f4926ca82dacc623faee7","ssdeep":"192:viygIDNnwkmJJexKjWHovWEj2V5IrscoNtBbNqaO7K+UawhZC7Jfk25mXXtNkauz:v/hnQvhjQeWyFCbMaO7zUaP7JfU1ulx","tlshash":"87629eb73b98d67e8b742cf8600a55f2ecd6585f6ff58d84d89840a487e0c90cd5e742","size":14948,"data":"","first_seen":"2026-10-07T03:48:35.25005Z","last_seen":"2026-10-07T05:09:59.520451Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/#/","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0a135a3820c44612d285347e945db1a0","sha1":"c751ab64ae029f5969e555a5dbec7dc15eb8f339","sha256":"6a02a962e9797eb8838be4ec5b3dbd47c5c6ced0fdee45ff8b242e92130a9d61","sha512":"92028e04908a6c3cdf03c75cf98c4678eb7bfbbdd11939716bad337599380d34293b296b7a059358cbdd3632a32b9f6b64f6768256fd20aa2efb83ff15d3a65f","ssdeep":"","tlshash":"6ec08cc4a0c23d001a22641068af34f4a034406ab14c1b528e94d8583e230f09233f98","size":147,"data":"","first_seen":"2023-09-24T22:56:46Z","last_seen":"2026-10-07T05:10:02.404204Z","times_seen":1107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/#/","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7144169280a69b1c180a70c7fb7c5047","sha1":"286b077ac1ddc843cb5a34c0310fec82d7628167","sha256":"0860f78a352e55f64ab8fa11ce266c6b60f40f4ee95040204fc70884babac6e9","sha512":"2cca64caa2a5ff4fdc390e7127fd89645a0e80135214f066e068f14d9726fdc0965fa5a9e79d7222283d8e0e12c90fd504367f81ae5fb580e3c1bc4c84a12f68","ssdeep":"","tlshash":"edc02bc5b0c33d101602641010bf38e490344027704c1b43ccd4dc583e230f08233edc","size":135,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-10-07T05:10:02.405159Z","times_seen":591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/#/","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f5fe0787cd8e0ecbcb4cd952894a8b7","sha1":"d43628197fcab15076d66a35b34fcf121e313189","sha256":"cb48ecc1b44293573353b165ece68d9f1fe13f50556b5f8d3ae683fc5a9b619b","sha512":"ccc2d734bb0f275c05eb1ce6db8049e726211a3785705442496d241b2369dbd0c739d4ebbed713c3883ca59708b6bcddca34c1c23906cb487f15580bf6744452","ssdeep":"","tlshash":"01c08cc4a0d36d101622ac2010bf24e490244027725c2b028cd4e8492e630b08233ed8","size":144,"data":"","first_seen":"2023-10-05T08:35:43Z","last_seen":"2026-10-07T09:55:59.113867Z","times_seen":3276,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/swiper.BcvdeNb6.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60fa4e0aee4624a135c9bbb00e0ae2d5","sha1":"27ce2ac449c95edb3262b5cc0c89464959a9e20f","sha256":"e00727f35d6587fceb81cd5fe08f181a1c2b7246703a955e80c718cb4e278f97","sha512":"fc4f1474e8a35844a7f2753ba744c0823515b05419d75c083ec487c647daf2c9fd88740e0d3d272d6e716a97f5a0cde39df57b72e5807d3981d9d63157bba7a6","ssdeep":"3072:X72Lz7VtYUf0irCIH0wEvFyPCENnRZDvPMI/2vlzoD:XafRtYUf0irH2FyPfNnRZDvPMI/2FoD","tlshash":"31f34b997250b13242fb19e742768111b37909497809d4e8b1adadeb2d3b84812ffffd","size":168758,"data":"","first_seen":"2026-07-01T21:54:37.967413Z","last_seen":"2026-10-07T05:10:01.16836Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/PjsLId8OzFCP1ERReT.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e7e6bd7a79dd1b932c284a37e4fc356","sha1":"a153be7dac22d129ae827dba3857ba39e9ac3de3","sha256":"0d74b2abd4340de5860a8414ba9282eb7be3d48a3c8136ceea33cc86a6ba317b","sha512":"2cb8d853cee5b8e4088fcf472fc1a9b6c08d34df7424cf2b77e40a6535d6e8158e4100ca9480c36a591ff06fdf4114cc84ed2d10c08f3dad6c9e65252bf634bc","ssdeep":"","tlshash":"9d61c859ff88a13993f1a1b514d14ca031372f015896e5eae2571c48ab3aa90b5cfc67","size":3374,"data":"","first_seen":"2026-10-07T03:48:35.320162Z","last_seen":"2026-10-07T05:10:02.109857Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/jRzoONMU4uDxwhnehl.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"62c933aa3b1891336f38740ebac014e0","sha1":"d9044f2eb1a15cdaea5979343eb2243ba155b7a8","sha256":"d7229397bff20f923a695d8478af947f4fa7f7ebd798e4f285c4b92dac2235fc","sha512":"f4299887654b6cb5446f3452a23d50ba941cd2d92c4dc484416332b1046659b35aa75f5081af7052b20a08e2e07dd91098dba943a2182134765edc3867e1660a","ssdeep":"","tlshash":"5bf00e7dc0c8cc30023ffe8982082582021cceb4c33182d4ec4aa658f3a9821c12ef20","size":502,"data":"","first_seen":"2026-10-07T03:48:35.257014Z","last_seen":"2026-10-07T05:09:59.303316Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/SPgfvglBQYC1H44ZrR.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b0c32e020d9425c3b93e4b1391eb486","sha1":"b2d3d2d2f0dc25ec60795b16c0f2018fa81ca4b3","sha256":"b2b09a4f5d106d8dd361b2517acc86dba075e46a0cead16dbc729f9ae4f82eea","sha512":"a9642c8620f2cab953ed75077271de3ba854f9f07fbb89b685154958995063de85cc0e3bfe6221201daecc9a76ad9736e653a0a0237462759ce229490bbe597c","ssdeep":"","tlshash":"82d02b04868813e92cb1106b0f02a7b020b3014c9f6482b4a14d0e30df0a3474d07e11","size":246,"data":"","first_seen":"2026-10-07T03:48:35.326726Z","last_seen":"2026-10-07T05:10:00.254662Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/NAqE8zzhbrB_A1xBdJ.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"703a0c9620dd946cc85f5ccee2828005","sha1":"2cf601f3dec2169adb9a1f53d1c99f802094dac1","sha256":"f37d93c862ba8958e8a83a2353ce79d1a4ba4220d51c648bc986cf9a7fab8625","sha512":"ae87c9f33c47a5457881291cd2dacae870d242aeeb8fb4b738e44315480d2fc14aa61b978bb41637d428db06df5e2bae0403fb8e9a326f52725826bc0b899a00","ssdeep":"","tlshash":"4680003a082000b230a0008cb2a0880000a0203c3b222288228802e20302080e888e00","size":27,"data":"","first_seen":"2023-08-18T09:36:36Z","last_seen":"2026-10-08T04:18:15.37298Z","times_seen":868,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/4din0su8LvC30vcYRw.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d8cd460f154e7780511a827708f6625","sha1":"dd301685641042677d56534a23a7b6f33c69dbae","sha256":"5b86cbe3e5c420fae2d72ab03030d902a3079c1daff4a4663760b3dfce5aaef0","sha512":"f9f082c738bca70265b2c68d6b517f7a77a3755c0d22ea9f696062cc8ce1c6dd8069c20bd911b89017550009c8aad83e9e28d95cbbe39b634204b60b6766c897","ssdeep":"96:ICZYdueUmWN3e128xnm+kRXN3WCtkRryDCSi17uiHTdJs4WsByHrxnTsuqAIlDD:RCdubN3eFxm+kR93WCtkRryDCV17PzHh","tlshash":"63b1e7e5b680b83bc378b5c990e001e05331a7d8313ac6edb09f1e4b3618ce5656e90a","size":5178,"data":"","first_seen":"2026-10-07T03:48:35.277093Z","last_seen":"2026-10-07T05:10:01.699506Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/#/","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"36f26a090abdcc337bfc430f7eba2abf","sha1":"bde4b3d8e5ebea671a9a85174cfb4058a4bf0adb","sha256":"217e71e9b0dbcd6bf49e06ed0c8570fc448a800192167db81cba4cbaefddce78","sha512":"a191f331612f086b236bcab8dc8340639cec8859afceb86edcaa7913e42165ff3d184a5a5f4bac7ea93f59aeea3c76e505c456f9f5da206347076658fc271a87","ssdeep":"","tlshash":"12c08cc8a0c72e101a12655015bf24e4a024402a70489b038c94d8482e230b09233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-10-07T05:10:02.429334Z","times_seen":9565,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/#/","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c2f0bc7cd9183c9c9cf17982845580fb","sha1":"24dc32d1206015f068aa835d7f52a4fdc1f74a27","sha256":"63022ddb6dc1b6a809098978f05e684a751606073997566c5d6fbb5023df6c1f","sha512":"4a861bae35793d2ca22a83a3e8927a156c537efa394e35f0c8ed7e88498897ec91ce7c307f7eda8f8aec664d2f8d9a81d55eb9477b2690dfcb351e28fb86aae2","ssdeep":"","tlshash":"4ac08cc8a0e62d201602662150ef26e4a034442670486b0a8c94d8482e220b08333ea8","size":143,"data":"","first_seen":"2026-07-01T21:54:37.974073Z","last_seen":"2026-10-07T05:10:02.437161Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/PjJ1Bk3z1XBqdNnh30.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c52fe878e8c7ff3db206fc5b648933a0","sha1":"40d4d90aa69e6e3e9600891441b1c3c14be2aac9","sha256":"0c76164b11c03debea008da7ab1bbe41feb04ced137eb6c8cf03e8af9ecbf3f4","sha512":"e5cdb0f33b275dcac855a8b7ed6e97f107d17471957a844512dc89d24d1877f995e6f2cb7e9d2f6966bbeaf4098be280a701f8d69b3679d56c447dfbe48a65a1","ssdeep":"","tlshash":"6cb0122f0800507059550c8d230950230330197e23b3699022158e0883154a2c10da61","size":97,"data":"","first_seen":"2026-10-07T03:48:35.273089Z","last_seen":"2026-10-07T05:10:00.11683Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/lGqpBO7CVIDogXq7Yq.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a8136e08373a62df64e313a06bf83fe","sha1":"6c9fdc6a49aa58d747a4171b139316f496bacf96","sha256":"c5cb723666051148623e8969f240bc6dc8a68fa523dad0da5c22659f9e925854","sha512":"ce28067c4cdbb8450ff5c555a7d2f127a0a5eee08e6c9aef751bbae57d0fc6ed4228c1aa679b17fcfa15e9f73b8fc0b600ce63d241a3026285903a66f32145fa","ssdeep":"","tlshash":"f54161c8f8ebd2548be66805b5a7180a53592f48f029c8c2f367dd502e3ced1f5b6d1a","size":2246,"data":"","first_seen":"2026-10-07T03:48:35.300374Z","last_seen":"2026-10-07T05:10:00.009094Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/#/","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e29cc4b739166fb0de3dd3960891cf94","sha1":"32bf92595a210346b3fa579ce87df4987f109d95","sha256":"d3b8857aaf83eedf7762ae5079cebc09d4924e13766d06fd68dbb746634f95e3","sha512":"854eba232753dfc9183d3029c72a8ec545156e6a966cbf69fbad7acd252632ee09b17f9666f3edfb4541f58d3d3bbfc9841f999c37cac48586997700b245e0af","ssdeep":"","tlshash":"7bc08cc4a0c26d102602651021bf38e490248027b0481b038c94d8482e630b08237ea8","size":140,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-10-07T05:10:02.440547Z","times_seen":9338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/#/","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-10-08T08:33:36.291901Z","times_seen":15636,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/#/","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"64d50667c917bc523772598248809514","sha1":"af02746d6cabe6c2f114ab1cbfe45b0b98cdda9b","sha256":"4766dcf49ac18228904427fc9ceb61207b1da17f9c6ebfbfdcf74fa5b84937db","sha512":"ffe83c4c5e83bdcaf68688eccd42b127637154250248f224ea2133ddae1dabf94a8d3c07f4ab5bb4d218baf4443950a802a257244349c599bfc982c014aec62b","ssdeep":"","tlshash":"32c08cc8a0c32e001602e42024af29e4a024802bb0481b629dd4d8492f220f48233ea8","size":144,"data":"","first_seen":"2026-07-01T21:54:37.975984Z","last_seen":"2026-10-07T05:10:02.528207Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/iJIHVhRnpuXMT5I-ig.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"11b50df28415b516abd431ce92bdb0c7","sha1":"30d75f7318c7eea58cbafbf13a22e65f19b06333","sha256":"3c54802e749db7c464f340ea129d2bae9470d71431ca3c8c44db68e97436a804","sha512":"4102f3868c38aaa62f869403369e12dc900e2a50716bebb74335be4f352cc29d24e79adeb58054b233a46b0ca5ec153317a0d1b02a050533e59f282c74bdd8d6","ssdeep":"","tlshash":"1fc08c8ba04382a0622b0c8801164dc32a350ea91366dec080465ea84a314a8ca4ae2d","size":165,"data":"","first_seen":"2026-10-07T03:48:35.237715Z","last_seen":"2026-10-07T05:10:02.065412Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/LS4KyiSFKdDW5TBaOL.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89be2300b2c6cb9ebffe429861145deb","sha1":"d936246f2fdb0bf6c3efa03de3008fdf7141e979","sha256":"26fae562b94d61447204aabb168403a99b483fd773b3a6558e0d6598ada506b5","sha512":"194e116702321bad94151c7ffe3f714e89a49a27b998a78b79604474cc1496e098911e4af139df52cfaadd0f9e80aba86af0d0d08e54f1abf12d577d496eefe1","ssdeep":"","tlshash":"65c08c5d7845a0f0466a0cacc1130a6b62263e80333696b0a52a8a1b83262265206e26","size":157,"data":"","first_seen":"2026-10-07T03:48:35.321141Z","last_seen":"2026-10-07T05:10:00.551941Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/IcVVwXLAMCCnJTr009.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9be481fb4cc9b02a7ba532b73a7044ee","sha1":"6040445f7290f8ac88d26cc6e63c58bb2100c3ba","sha256":"49faa29a3a477c6e3fa20c2471cdb65aa8afebec038c311c4675acb5d6d51e81","sha512":"1ec3c2b3bae32cb4de55730618f2273793c15921a9eb8e368572572339bad8feb0da6e85c83c069b88a001ff91bcb43df65ee694dffae711ab48a69611678268","ssdeep":"","tlshash":"c4b0120245cc02f6066c04ea4b10fab011a2002c1a79416c541d0a18470d61d5e0b951","size":92,"data":"","first_seen":"2026-10-07T03:48:35.32835Z","last_seen":"2026-10-07T05:09:59.494778Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/4eD9Kz7pURCZ7CCHuF.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"052facba1e21ae1dd3e7c8155a53a28b","sha1":"9699bab5cab3f1ccb6d0c8d87499d60298fcd043","sha256":"904964658e8ce8125d527e86e7a711723d1c23ee1d1ab6468b03fe0f49fd485d","sha512":"67cad294ba20fa2b95f92f80c86327350081addd6b91f8cc5365965eaa9f4228b824f605d93a1721cc7cf3248383bcea5c3c765f6cc91917bc32e6906fc122d6","ssdeep":"192:sGmNxN6NON5NcNrNBNgN1Jb5BMNmDPA/IfOSqITWnlHO5laVPK:sGmbg4relr65UNwPA/I/9TWdOe1K","tlshash":"9b2241a5df4feb0b472104c43b27ba9daf5e2bceb0ee4583c3499c6c5e0ad546606970","size":10869,"data":"","first_seen":"2026-10-07T03:48:35.238825Z","last_seen":"2026-10-07T05:10:00.917246Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/KtLjq8BFvdDXmeInVN.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3e3eeac3a3d5236b816c7c82ad20e9e","sha1":"cb415ee3d97f0eb05cf6fe54faf4d04eb99e7827","sha256":"857b2aac4a1d604fb034ec0b5faf98d809279c6ce1d74698041559842d938522","sha512":"7311b7c251863978829f408c1ca12777d8165d3753e1bc6f322e15fd6ef6d5b9b66babbed082f08d1b39d479e563c3fb96a878689cd277f41ffa66e04f380555","ssdeep":"","tlshash":"6d012acc48f6cbf9c49702542d5a10a6d0505b4c9b31d965f05dad22634fcf095dd738","size":791,"data":"","first_seen":"2026-10-07T03:48:35.314786Z","last_seen":"2026-10-07T05:10:00.601261Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/#/","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"886d4aede3c7bae3bde85e489e734487","sha1":"79ae40bc66219e68384b26cae981565d9ca7733e","sha256":"60a773b2b600afe5a85e9213dc81d823ed3c114c1a1c41241572c010d0481208","sha512":"5c49ac3ba40c582393b390b94bebf7959495e0d6ab58477be4ed492dde02f1101d751e61c82f49847f72c5196485c331559b805eff894f1ccfb046ee4b7e2a05","ssdeep":"","tlshash":"b6c08cc5a0c32d002602685014bf28e89024882a704c2b029cd4e84a2e224b48237e9c","size":146,"data":"","first_seen":"2026-07-01T21:54:37.989927Z","last_seen":"2026-10-07T05:10:02.53378Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/#/","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"92e81ef4d7ff796a20b80fcb8ecafb14","sha1":"3858157355200e83aa100cf5f214e911f10693ba","sha256":"d3a581bf91a70a8ca524ae1c262c4038b94530ea30d0464f6acecb58018931e4","sha512":"a23b0cc95270d3cd86f1ba4cd9605d791f61bc593f4570b1787e9cb84cea444ee4c8c3bd311fa45748451d191ac8b9c3736792935dfac95d25ef292b62f83983","ssdeep":"","tlshash":"1bc08cd8a0c22d105612a81211af29e490244026704c2b028c98e8483e230f08233eac","size":141,"data":"","first_seen":"2023-09-24T22:56:45Z","last_seen":"2026-10-07T05:10:02.577964Z","times_seen":184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_header_colormap[actor:server1.conn0.watcher14.process7//obj22 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color_key:map[configurable:true enumerable:true value:bg_color writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_bottom_bar_colormap[actor:server1.conn0.watcher14.process7//obj23 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color:map[configurable:true enumerable:true value:#ffffff writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_theme","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_viewport","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_content_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"/init?rts=1791349590317map[actor:server1.conn0.watcher14.process7//obj32 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[data:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj33 class:Object extensible:true frozen:false isError:false ownPropertyLength:8 sealed:false type:object] writable:true] msg:map[configurable:true enumerable:true value:ok writable:true] status:map[configurable:true enumerable:true value:200 writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://aijrpd.payden-qt.com/js/8Z8ZbOFoWrC-Th3cbc.js","line_number":2265,"column_number":689},{"level":"log","text":"/lang_j?rts=1791349590902map[actor:server1.conn0.watcher14.process7//obj35 class:Object extensible:true frozen:false isError:false ownPropertyLength:429 preview:map[kind:Object ownProperties:map[Profit_Assets:map[configurable:true enumerable:true value:Profit Assets writable:true] Total_Assets:map[configurable:true enumerable:true value:Total Assets writable:true] auth:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj38 class:Object extensible:true frozen:false isError:false ownPropertyLength:34 sealed:false type:object] writable:true] copySuccess:map[configurable:true enumerable:true value:Copied writable:true] invite:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj37 class:Object extensible:true frozen:false isError:false ownPropertyLength:12 sealed:false type:object] writable:true] loginByEmail:map[configurable:true enumerable:true value:Email Login writable:true] loginByPhone:map[configurable:true enumerable:true value:Phone Login writable:true] registerByEmail:map[configurable:true enumerable:true value:Email Sign Up writable:true] registerByPhone:map[configurable:true enumerable:true value:Phone Sign Up writable:true] tabbar:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj36 class:Object extensible:true frozen:false isError:false ownPropertyLength:6 sealed:false type:object] writable:true]] ownPropertiesLength:429] sealed:false type:object]","filename":"https://aijrpd.payden-qt.com/js/8Z8ZbOFoWrC-Th3cbc.js","line_number":2265,"column_number":689},{"level":"log","text":"/adi?rts=1791349591347map[actor:server1.conn0.watcher14.process7//obj71 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[data:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj72 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object] writable:true] msg:map[configurable:true enumerable:true value:ok writable:true] status:map[configurable:true enumerable:true value:200 writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://aijrpd.payden-qt.com/js/8Z8ZbOFoWrC-Th3cbc.js","line_number":2265,"column_number":689},{"level":"log","text":"/cus?rts=1791349591347map[actor:server1.conn0.watcher14.process7//obj100 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[data:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj101 class:Array extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:ArrayLike length:2] sealed:false type:object] writable:true] msg:map[configurable:true enumerable:true value:ok writable:true] status:map[configurable:true enumerable:true value:200 writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://aijrpd.payden-qt.com/js/8Z8ZbOFoWrC-Th3cbc.js","line_number":2265,"column_number":689},{"level":"log","text":"/news?rts=1791349591799map[actor:server1.conn0.watcher14.process7//obj103 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[data:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj104 class:Array extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:ArrayLike length:0] sealed:false type:object] writable:true] msg:map[configurable:true enumerable:true value:ok writable:true] status:map[configurable:true enumerable:true value:200 writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://aijrpd.payden-qt.com/js/8Z8ZbOFoWrC-Th3cbc.js","line_number":2265,"column_number":689},{"level":"log","text":"WebSocket connection opened","filename":"https://aijrpd.payden-qt.com/js/cJGIrUSR6yBTqVRJnD.js","line_number":1,"column_number":400},{"level":"log","text":"/home?rts=1791349591799map[actor:server1.conn0.watcher14.process7//obj105 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[data:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj106 class:Object extensible:true frozen:false isError:false ownPropertyLength:9 sealed:false type:object] writable:true] msg:map[configurable:true enumerable:true value:ok writable:true] status:map[configurable:true enumerable:true value:200 writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://aijrpd.payden-qt.com/js/8Z8ZbOFoWrC-Th3cbc.js","line_number":2265,"column_number":689}]},"http":[{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:30.078Z","timestamp":1791349590078,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"GoDaddy TLS Intermediate CA DV - R1v1","organization":"GoDaddy.com"},"validity":{"start":"Tue, 25 Aug 2026 15:23:05 GMT","end":"Thu, 11 Mar 2027 15:23:05 GMT"},"fingerprint":{"sha1":"D3:F2:BD:73:90:23:52:7C:F2:6D:35:7F:50:B8:B8:02:08:20:4B:56","sha256":"77:93:78:39:A3:40:CC:A0:3D:7C:07:91:31:55:5F:C1:96:A6:72:7B:23:EE:A5:40:39:CD:81:93:81:7A:21:F6"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Wed, 07 Oct 2026 05:06:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 06 Oct 2026 09:27:17 GMT\r\netag: W/\"6ac4bef5-1d3b3\"\r\nexpires: Sun, 11 Oct 2026 05:06:30 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119731,"size_decoded":24966,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"ca4a8297c04185dcabadf889be3e89f9","sha1":"4b834315fb35f05b82e744159c6ad18d6e29d513","sha256":"124bdff7ba3fe86c8ba5143467afec21e020405e74abdb92cfdda6c0ee3b5908","sha512":"a2a2e6820fe904d6c5a86f50c5947c3782398d3e670b2a0a4f1bd47689b942eb2a4969e7063c46be13b426dc60615f97bce41ec4c143baa2e7a51358c318bead","ssdeep":"1536:pdpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYlb7p/xHK8IT:TpTpRdfcKFy7Rxgv","tlshash":"07c33d4d6cb3612285b3b1bf8b5f9251b2719883305def20794d5b606f80e7c53eaad8","first_seen":"2026-10-06T10:22:47.792071Z","last_seen":"2026-10-08T09:37:11.47433Z","times_seen":439,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":2,"connect":19,"send":0,"wait":19,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.payden-qt.com/api/cus?rts=1791349591347","fqdn":"api.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.357Z","timestamp":1791349591357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /api/cus?rts=1791349591347 HTTP/1.1\r\nHost: api.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nst-lang: en\r\nOrigin: https://aijrpd.payden-qt.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://aijrpd.payden-qt.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5iwCn0ukB8cpHcYMFnwI7jy5wwCNL4HtCDSshcJJDvZH7QTltWT0ZZrNfadPZ0oDLy9smm%2FFjc2WkL2rbCMge6o5S7SYQRDls%2BNdgmn9qnsTuHy1ZdXAIab7zywe4Bz42NqnbA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a46a6083ed39a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":480,"size_decoded":1207,"mime_type":"application/json","magic":"ASCII text, with very long lines (480), with no line terminators","md5":"2a47ab0448a71bfb10d4b8101ae2b1a4","sha1":"101c98c653f13ba03c69de935c8a9236f878b1d8","sha256":"d7fbfae1c8d7056394e740805d2f252e91854a15271a8371699ebefd5d1afe59","sha512":"c58c6ea9609bf227a57bc14d03630c09a3502b1079f2c050d775885972911b3e020bb63f5b0ea5f9cad09016e4e2f956e2d4b104fcb2b086b259a35b05a3017a","ssdeep":"","tlshash":"11f00e9747857a0f316610280c0986025efb08062aafa3a426fa2579ca410f88044bac","first_seen":"2026-10-07T05:09:59.154189Z","last_seen":"2026-10-07T05:09:59.154189Z","times_seen":1,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/assets/XpRydCZTZqDMsJTYiG.css","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.370Z","timestamp":1791349591370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /assets/XpRydCZTZqDMsJTYiG.css HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YYQwkVi4HE16VjeLNLYTAB19eCYDpICDESS%2BD7hsFYBblVs8HJa2x%2BoZ1atqgxcVPI2wjmfLMo9Cz%2BCJ1yy28uMdD5F0gNXVbNbWlPgzELegLHkuMltoe2f7eNgROERQXI2MD3SDaw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e0-fe86\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60821c81a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65158,"size_decoded":14982,"mime_type":"text/css","magic":"ASCII text, with very long lines (65157)","md5":"e171ee7854ab911f95f1acebe44534e5","sha1":"3131f9974f531e8213778ffa818a8bbfad91dff6","sha256":"3d2daaffd9ab9d6ff5873b6120819429a47190b6a231a0ec5470a18b5ced43b6","sha512":"c238e37b046014c1bd86bf503ccc4c5231e46d5024c7d0be591a5235d2d231aa82aa228865a51a3e9a7053e21d0a6e9dd6ebb3f5ace1d4e2d0ecf0c035f37ced","ssdeep":"768:tAxh+AiBq78u5Y0JcL6ROh0DNu95sRlDYxgRspmDBqAGBvTo0NBW1sB+:LBv5EYaio0N2","tlshash":"5753775426a8a33edb3bf11329ee46c95510f713c5377a49ba42733585dfa832231bca","first_seen":"2026-10-07T03:48:35.319182Z","last_seen":"2026-10-07T05:09:59.162847Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/mdWe31LOAPCatkchYv.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.390Z","timestamp":1791349591390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/mdWe31LOAPCatkchYv.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CV6qdvKci%2FeB0bMcKi9JAUEuyOOa4z41Z%2BWnC3uXjcqgRgcGfXetGhPZtDVvGYOEPpEBJTQx4cLHFI5haaVshg54CDQcuS7hG72uXTMh9LTW%2F%2F0cDazkIoY3oIZ9aXhbfb6PzDxGzQ%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e0-553\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60823c94a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1363,"size_decoded":1199,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1362)","md5":"90ec6a01f0ae58f24278212f1fd40808","sha1":"bfa67853a79e20bdb67913a089384f08e1f17cb1","sha256":"fe8f34069628d152a2b7a817b5a1be623c735c36ad6130763d3dd75dba687939","sha512":"1ace142ffaff7f4c6fd1f44f962b13ce48699531d0347dad4d821f53cbde91771db739c38d74bd3afca5807e63b78aec9b87a56ff53af805c0fda5577b654636","ssdeep":"","tlshash":"11219e5c9e9acdb19023608d0486043276d83f9cf8a5438562e37e5e7789cecb6259bc","first_seen":"2026-10-07T03:48:35.309577Z","last_seen":"2026-10-07T05:09:59.215839Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/assets/lrzcsg2z4eBe9b3THL.css","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:30.083Z","timestamp":1791349590083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /assets/lrzcsg2z4eBe9b3THL.css HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P7ssmpQbxarL8nJsTxQrxVQxJhd5CxsK%2BlSWRggSlrXfL02dOuEwH%2BLDcYX4adY%2F78HlDjxyN6ESJbRWnsJmwFcrPL1Yq6RBN6j%2BQwWnBTkzoaffjvhtxBZDkJ9D7BRXWqQ5dxEWXg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e0-18f7\"\r\nexpires: Wed, 07 Oct 2026 15:47:43 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4726\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a607a0a8ea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6391,"size_decoded":3709,"mime_type":"text/css","magic":"ASCII text, with very long lines (6390)","md5":"b9bc69dfebbe70d73fb49c7d1c117e62","sha1":"ac989820671a1c955dc822ca46a51100542f421d","sha256":"4b9984ff63ee09b3985851625a57806a2cbef2cd08aaab0b0afbb6a2c1777076","sha512":"2ef879789fa48068bb0541d4011add0144646b00f38ab43dc10f4116356232dbbcab71588516e1d03876a1c4cc62ff5e441ac16c29aa416103c436e17f4392c5","ssdeep":"96:3B5mSJ+MbpDAKneQYX+4JToiL5dKSme+jeHPdw297fzrEIuf/:fmUJbiKnehJTtdKSme+jeH1Zpbw/","tlshash":"d0d1b730a3142c63a2224f194b44e6f86ea450638ff38919f6856e2cd7fd8f4125eb82","first_seen":"2024-03-11T20:01:52Z","last_seen":"2026-10-07T05:09:59.252677Z","times_seen":563,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.payden-qt.com/api/adi?rts=1791349591347","fqdn":"api.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.356Z","timestamp":1791349591356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"OPTIONS /api/adi?rts=1791349591347 HTTP/1.1\r\nHost: api.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-lang\r\nReferer: https://aijrpd.payden-qt.com/\r\nOrigin: https://aijrpd.payden-qt.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2RbWKdZooAsy0GxX04Hs0k8L4Fb0WvxC3Ntn9BxIKBknjdCI96Cr1spdullf07R1w7%2BVfGDt2C2YL6AGmuAG%2FyCyOcle9huw2pD%2B4z0taJ%2B08K0tOi5tsd%2Bpme8qcWSThfaiqg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://aijrpd.payden-qt.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-lang\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a6081fc74a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":793,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T09:41:01.074506Z","times_seen":18938473,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/jRzoONMU4uDxwhnehl.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.407Z","timestamp":1791349591407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/jRzoONMU4uDxwhnehl.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=02lbrQINal6ekd1olw%2BWkIMYwQbYi0QSEnQ8mmIp3SKrzabAwgDYx2ev58BheQRFPvjaIIdp0gpyD0P4ta31SisJthrj1naMJzn4YkhYWS75v3tq6LdAw3Gn8SIsWn%2Fu2nlefgS6eQ%3D%3D\"}]}\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6a8448e0-1f6\"\r\nage: 4725\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46a60824ca1a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":502,"size_decoded":1078,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (501)","md5":"62c933aa3b1891336f38740ebac014e0","sha1":"d9044f2eb1a15cdaea5979343eb2243ba155b7a8","sha256":"d7229397bff20f923a695d8478af947f4fa7f7ebd798e4f285c4b92dac2235fc","sha512":"f4299887654b6cb5446f3452a23d50ba941cd2d92c4dc484416332b1046659b35aa75f5081af7052b20a08e2e07dd91098dba943a2182134765edc3867e1660a","ssdeep":"","tlshash":"5bf00e7dc0c8cc30023ffe8982082582021cceb4c33182d4ec4aa658f3a9821c12ef20","first_seen":"2026-10-07T03:48:35.257014Z","last_seen":"2026-10-07T05:09:59.303316Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/IcVVwXLAMCCnJTr009.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.420Z","timestamp":1791349591420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/IcVVwXLAMCCnJTr009.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WbXK1jJNgFxinkqKC4Lx7%2FBGPmQkTSTs6cttl6th5kGBkjW8kJb9F3CERoI7yCLrQEtO2JkWTFF6DZJaQJeQ5Wmad1pooCdTdAYHzyIbDZs7KTnboFnK%2BForxIbzZHivG8wsZwmJNw%3D%3D\"}]}\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6a8448e0-5c\"\r\nage: 4725\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46a60825caba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":843,"mime_type":"application/javascript","magic":"ASCII text","md5":"9be481fb4cc9b02a7ba532b73a7044ee","sha1":"6040445f7290f8ac88d26cc6e63c58bb2100c3ba","sha256":"49faa29a3a477c6e3fa20c2471cdb65aa8afebec038c311c4675acb5d6d51e81","sha512":"1ec3c2b3bae32cb4de55730618f2273793c15921a9eb8e368572572339bad8feb0da6e85c83c069b88a001ff91bcb43df65ee694dffae711ab48a69611678268","ssdeep":"","tlshash":"c4b0120245cc02f6066c04ea4b10fab011a2002c1a79416c541d0a18470d61d5e0b951","first_seen":"2026-10-07T03:48:35.32835Z","last_seen":"2026-10-07T05:09:59.494778Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/KCpg25pb7h_X-VLT-t.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.423Z","timestamp":1791349591423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/KCpg25pb7h_X-VLT-t.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pcT4vmn8id9Nr%2FdWpnkLHxvp%2BEK5UUJJDPoccerf%2BRC8frL6wKdKcfSKNWz2hm%2FwD9mga0rlKXfTzdZFbEw%2FtSwcz4%2FqYCTDfKtSq4HUbrXIi0BWwMKbrGHR%2FwEbNmyFDT1b0xIDCg%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e0-3a64\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60826cada0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14948,"size_decoded":11626,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14947)","md5":"78ffe35ca107c1101f2caf4043b6e577","sha1":"9bac7e17541d3530945341d02ab704f671db78da","sha256":"65f081a7fd3b1e8afb1325e166062d36effb59529e4fd96635f4d00a268687b7","sha512":"b08687420c409b3c02cdf85811b04894bacd4a9d2b9959026c4bf4a668f75da012008146c7383d27c872c57ca807aa4c12fd1846c52f4926ca82dacc623faee7","ssdeep":"192:viygIDNnwkmJJexKjWHovWEj2V5IrscoNtBbNqaO7K+UawhZC7Jfk25mXXtNkauz:v/hnQvhjQeWyFCbMaO7zUaP7JfU1ulx","tlshash":"87629eb73b98d67e8b742cf8600a55f2ecd6585f6ff58d84d89840a487e0c90cd5e742","first_seen":"2026-10-07T03:48:35.25005Z","last_seen":"2026-10-07T05:09:59.520451Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.payden-qt.com/api/home?rts=1791349591799","fqdn":"api.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.811Z","timestamp":1791349591811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /api/home?rts=1791349591799 HTTP/1.1\r\nHost: api.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nst-lang: en\r\nOrigin: https://aijrpd.payden-qt.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:32 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://aijrpd.payden-qt.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LH3R46FZbv4cYUaKZGhL7BVrrKrOVjrSsk8hmc20uc19f0fqf59XYF4I3NtnwTM5VA8p0h9N2LfpKnMt%2FrtQpIvO0T7m20Fn2sFkSBrR2bCqzbAEmf4MpM0ZKgWwdcE5eC1Lqg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a46a60886e54a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39353,"size_decoded":30636,"mime_type":"application/json","magic":"ASCII text, with very long lines (39353), with no line terminators","md5":"09a70f55f6c72d91714328252b21a3e8","sha1":"cd521ca3e2bad19888e957186b9858e48d204dbc","sha256":"27a14b8a7fa2f8b6ec9043566fcb3ae6965094fc822310b9b26615f79333a8d2","sha512":"f16a6c555e1bb1aa23f74b5bd758bdfe0520363664936fdcd519e24087549f0e22eea95cdff89f7a3cd0f4cb6eb06ef5cc4042228cfcbe9c870ca6ea5d7edf06","ssdeep":"768:p3kOPTMdRhhQiVSWVqaoLxBb0MfOtS8o2JYsOyy4CAtFUV3YCp2:p7MdvqiVjF+B4MfRVbLyy3V5p2","tlshash":"a103f28c826ade01572aa5cdda7b132834cdb6da00a4ab1d095db3d01373366d7fbd36","first_seen":"2026-10-07T05:09:59.54543Z","last_seen":"2026-10-07T05:09:59.54543Z","times_seen":1,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":140,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.payden-qt.com/upload/img/6a8413dd901e.webp","fqdn":"api.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.900Z","timestamp":1791349591900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /upload/img/6a8413dd901e.webp HTTP/1.1\r\nHost: api.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 18 Aug 2026 08:12:13 GMT\r\npriority: u=5,i\r\netag: \"6a8413dd-3b02\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 4725\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N4iwU4virWpUf8PtMKt4WqHciemWQgDyH7VUSmJW748iIirLPi87iwV%2F56NnlLdh5ahD9Xcpyx1fmtMvhBaVPO2ykDcmn35amViyfLqbzw8sEmJNuDyfeazrSDjLQ6R%2FflwTeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60855da5a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15106\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15106,"size_decoded":15855,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x640, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"56b0fd8feccb11315e15d095aa29d2aa","sha1":"cf7b55f9e25ea2d0d581e468d3696e56899611fc","sha256":"84a8692031fd24d728796d5b8484f3b58ae46ad977794de7781880c8a0136f96","sha512":"2613a887cb163e9097fe2513ef96a5724aea58a6245d1254588da506945017ad9daf5e968cfe91851bbefdd17074398828eac4ad58459aff97ed12c97206966d","ssdeep":"384:itoa4WtvemCQgrH25Rw9FrmCvkj1y7iPIMD+nOAA1E:Uoa4WtvempU2s9Frm/j1QNOV1","tlshash":"1e62d0dd6803c1ebfcaaa7e65b1b485b063500111b12db0ba34fc1ef84ff96630a7844","first_seen":"2026-01-07T14:49:26.932447Z","last_seen":"2026-10-07T05:09:59.568441Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/favicon.ico","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:30.502Z","timestamp":1791349590502,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:30 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2JsePU%2BtIuYiMIHOmvqQWRAVXCv9nmYJG6doIL2ANJS8vYPyfFjxs%2FQf8IxtaeRpHM8Rc%2F4ctMPkgchSiSeFWQu8mXOVRdAixqhw3a0cLWk3EqcJUMZv121X%2FQTwF%2FhmdpO2u2SrpQ%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a46a607cab19a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":718,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-10-08T09:47:32.288552Z","times_seen":334232,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.payden-qt.com/api/lang_j?rts=1791349590902\u0026l=en","fqdn":"api.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:30.904Z","timestamp":1791349590904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /api/lang_j?rts=1791349590902\u0026l=en HTTP/1.1\r\nHost: api.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://aijrpd.payden-qt.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HtQLfXBZ4o6nTc2tKlWXYPC9ODq7tpICii5%2BmjlSLqM6vsEcmR3nB2FStAcZWkfSTLvWtBvPNEvTpQR%2BQsLEbQnNIknV7G2uF17RMOqBEhU6xrZ8l84h53chVbW5RYAMAMGeLg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://aijrpd.payden-qt.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a46a607f2ba1a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36204,"size_decoded":28094,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (36204), with no line terminators","md5":"c84fa1fdf337ce059672620085cd0e03","sha1":"fa1366a53ec101867e807bdffe049991a7bb3e45","sha256":"36f6f6b906f35a929240255da4d205334260f4e361bb5abb8ac8078575ad6127","sha512":"6067fc2f214119559d7dbe58c1242435089d2545a207ebc8299114879f9d402d875378805d72392175cb8814472ded7743862070f17d334772bc373bafb3ba32","ssdeep":"768:vMg6Q7UjTgJ3rD8fku4yYEX1vDUW3WMRAQ+LNiuC+U7WO7pb:kg6QojocMd/EeW3WMWZNiuC+U7PJ","tlshash":"6af2f111ef6b5b312e11aba6316d4e005c98ff0339bceebc452c459446dc894ce9ae3a","first_seen":"2026-10-07T05:09:59.615839Z","last_seen":"2026-10-07T05:09:59.615839Z","times_seen":1,"resource_available":true,"data":null}},"time_used":417,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":290,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/assets/PC9FjPyqYFDYQdpHvT.css","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.374Z","timestamp":1791349591374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /assets/PC9FjPyqYFDYQdpHvT.css HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BngiQoOZ81c30tcD7bkpwickcc2o9uMmD%2BNY36xxUc7hg64PUsiS59xEA73sR%2FgS58I6QpEGm0mKhbsLDQWoSiM0wR%2B0gnILL%2B5znmaOpVINNuaFd31FnmvrxM4qI2mqTD10ZhQ9Cg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e0-a86\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60821c85a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2694,"size_decoded":1327,"mime_type":"text/css","magic":"ASCII text, with very long lines (2693)","md5":"3f28253ee7f3d1cb19aeafad1111187f","sha1":"3130fac7725b7f6a5fff4a7c9df18a1067aa012e","sha256":"02bc3b1cad3d4bb9b0160135e6b16eb62133091d879c8d0d0a5b4ea831149626","sha512":"d07d7a8607add532475e31995dc647464951961675fbe74b8f202ce19ae29023272d997a3f873542094654e4e0e4a5fbcea3dcf88f602e8bb4ab9e162260c329","ssdeep":"","tlshash":"6051b3424892279d4693863e3198f3c8e07e74e33bb7dddaa1498dc1ac9b67509a3c53","first_seen":"2023-05-21T08:34:57Z","last_seen":"2026-10-07T05:09:59.653446Z","times_seen":242,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/UcvicFSn46CE-6bfQO.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.385Z","timestamp":1791349591385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/UcvicFSn46CE-6bfQO.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r6Te29Cvod1CSX0I64SHixp1IeBQteN%2FSFOCsfEkmmFK4nRkuADDm1maRQHrvaVfAmPtMNGKBuFiDqlK7xIJSC83W1l7VdJLBE28ijNJeX6HtRl8tQ%2FI0OYTkOYWLFRL4cHO0J5xRg%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e0-4aef\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60822c91a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19183,"size_decoded":5207,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19181)","md5":"a665fb7419f0f312d3ca481ad6abad41","sha1":"62a3c4b678d876d5026eb7d587a8e31600acee44","sha256":"08c1ae09713fed88aca71f2c15dd92b78cb12d8bd362bd2a5bfbf9ae260255c4","sha512":"7c0bff1e346a6e28ebb37c9d2d39b6abe29db3949a941359d2e2aecfa17d95b0983e6bd01fe06866567447bee1e58376318263d8b74b422ab6e3015283f6d8bd","ssdeep":"384:uB5Qp35LlP1819G/BC/eDk0h4SdaMCuSA:uB5Qp35Ll2EBCWTh4SdaMCuSA","tlshash":"02825684b807446ac7f3548d059d5024b2b43eca92181507fbf83d7a1bdbab067be7e6","first_seen":"2026-10-07T03:48:35.242422Z","last_seen":"2026-10-07T05:09:59.679076Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/CqeTqDPge6BDwLrjOo.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.430Z","timestamp":1791349591430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/CqeTqDPge6BDwLrjOo.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HEt5Shu6Bf3FzQga9SBcMJebh6K%2FGEBbuAXziB5nSwaix1PWwE7WDhd2pexjSHZ9Swyh%2FR5smRN2hmF4hpHdMi7WKmUYMTy7FCiBrFMQtfUNc9FTK70tjtPJmNOW%2F8gEDigRqJHHNw%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e0-2201\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60827cb2a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8705,"size_decoded":2756,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3280)","md5":"0cccedce0f072f52bbee5ac828928034","sha1":"dbdff0f76c5ce605e0feae87cef9d69ae5d70183","sha256":"49bc9aa94a1c1bb0229bddb27e809d06237cbbc98f7b0c6b51c659bb100b0335","sha512":"11a8d415d658f35307d5aeb07e7309fe960752dede359eadf66317ca88d7f6d3ee75b129aa1053640737a7080ae5c8faa7e76aa3b40cd013cb27e774e33f7277","ssdeep":"192:2/TyGZyULAS9T5BjOG2L+VpJl++xxcf8g6Gwctfj5ZTc913wl3wFoP9NRe:2B5LA25bA+VLQ+DY7wKfj5Zojwxw89NM","tlshash":"c902124c385a8dbcd8fe4a01e8475490b69e1fdd802945a5f1fdd8231ad3ee09b46bec","first_seen":"2026-10-07T03:48:35.263317Z","last_seen":"2026-10-07T05:09:59.695599Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjvmyNL4U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.564Z","timestamp":1791349591564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjvmyNL4U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://aijrpd.payden-qt.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38020\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:57:55 GMT\r\nexpires: Tue, 05 Oct 2027 15:57:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 133716\r\nlast-modified: Wed, 27 Aug 2025 19:19:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38020,"size_decoded":38833,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38020, version 1.0","md5":"49dea29c68f0c6a27e60e42f5898ce98","sha1":"b675be1072d11f163aa2c168482c816ec23b92c9","sha256":"30073583012b73a5c05c290e601325850ddbc7c7a1241561ec9264b8744c2a86","sha512":"78c721c8958f06860957d343837a49526d87dbb0d8080774d80bcab027a5a5af37d304f068885008d81c53476e7879f63b928bf2c6fca669b9f2e07373b7d05c","ssdeep":"768:/2IAiadj0evORE1kFq0Cqo0lO2gnR436Di8Kuh+/dd2vkHH20wVFQRxLq/vKLfmR:OXdj0evOREGoHd0ljgnRG80mvgwHQLwh","tlshash":"b503e12f535e1805d3d499baddfcaaa8bc7504b5cd06d324e625f68bc973208a090f6e","first_seen":"2025-09-02T23:26:08.242532Z","last_seen":"2026-10-08T09:03:31.954737Z","times_seen":762,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.payden-qt.com/upload/img/6a82ffc00690.webp","fqdn":"api.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:32.862Z","timestamp":1791349592862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /upload/img/6a82ffc00690.webp HTTP/1.1\r\nHost: api.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 17 Aug 2026 12:34:10 GMT\r\npriority: u=5,i\r\netag: \"6a82ffc2-4476c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 4725\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3qJJuwamvt6QvRBCjnh9vJIMoFu8CQFZQ3H0z1bPAJCwy4pEzN9J7eH%2Fxe4KhRr8D5i%2Ffb%2FO2W4e7dolxqtFSTzNIcnDFOUZjd9k8SDz%2FO%2Bo1Sj56k6HPzEEsBxdBehMyjmGpg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a608b6f0ea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 280428\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":280428,"size_decoded":281185,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x655, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ee0513387d5e7a28f79f2df512e67806","sha1":"b3dadc0e1e1ff6132497424bd22aa2aa9aa77eff","sha256":"b2596b11b9034ddbd1e8215c72fb9a88a822bb44142d7032fd72a979f4dbea39","sha512":"3a4d32f2c6516a171af71959ab9c30e6cf1ea029299e6d88630a19638894e0e1ede194fbcada5d8a5c433fff527ad722749d0d1fe3cf50cd074a43adbc545013","ssdeep":"6144:ujnezpMJFfoLTEBLbQQuIy+P7wr2yVGTiEVrAvHszDyh1duJb0sZTy3k:ujezpM/mwfjBBP2G+/fs6h18isZAk","tlshash":"8b54239c52df373b6de208e6b9b4346f43c63a1560601e9f70fb19b610d9288f8e484e","first_seen":"2026-10-07T03:48:35.306809Z","last_seen":"2026-10-07T05:09:59.790605Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.payden-qt.com/api/adi?rts=1791349591347","fqdn":"api.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.350Z","timestamp":1791349591350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /api/adi?rts=1791349591347 HTTP/1.1\r\nHost: api.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nst-lang: en\r\nOrigin: https://aijrpd.payden-qt.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://aijrpd.payden-qt.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z%2Fs%2FbhM0Dw6A%2FzQfwTxbvgzuI5zdRJsxBYpRZPh0zGQfi8OItNLJ4XAF563xVcqLNavJxrTt0ZVCBynIYIJc%2BDFWo96h8quQn48%2F%2Few%2Bo%2Fzlxhb6UxiKjLJSaBMYaVEl8hX8Mw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a46a60832d06a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":240,"size_decoded":1034,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"3a9eeb6f393f20a67eb617ba42be0f8f","sha1":"076b96b3b720b4532d0b3e6fb8ff4e7c984eccfb","sha256":"68e264fefaddf0d6f51ecc9e79f10bd6424c5c0d226341d083efe29c1ce8be89","sha512":"bd334908996c748cf3c11b13b43a0ce4bbea41796b7acf90014d056d0e8e14081fa6a40acc28a41a7fdba0bf937d78ac2d13d2e43645b3c3d69082d538fb5f1e","ssdeep":"","tlshash":"edd097e720b28178069348b8300d04a577303f615a3ce697118a8cb85b2c384a7ef200","first_seen":"2026-10-07T05:09:59.82334Z","last_seen":"2026-10-07T05:09:59.82334Z","times_seen":1,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/imfCziKSn3CNrafatW.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.373Z","timestamp":1791349591373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/imfCziKSn3CNrafatW.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m7MaHt2cNI1mlje6quMloVxPefpujJQRYbNGZzw%2FrPWerwunnbmwh6FiWxwyRe0oQ5322BZ3hs6zpajrIEJUyL%2FLP8w6TkKLcwI5USpqKFbc6MTkYYlk8xky0BDcQYS61yCevMU%2FYg%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e0-712\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60821c83a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1810,"size_decoded":1689,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1809)","md5":"1a3e68e69a8a0e56e91987f14f9b8239","sha1":"c24114bad49946e9302da2ff9d998a04f30ec51e","sha256":"0426f7469227541d33a332a5c8b7cbe8da172b11f2a2135c3a2abdd072b3e87f","sha512":"1e66a0e61bae143ac0f432fc992d857de13a4bb07508ac081e6ae960afcc62412b14b452e322b908961a68de331905bf0281ff18d3c611ca192e5dbf6f8dc763","ssdeep":"","tlshash":"a93141a4f6a9d034537a58e1c03d1610e2591f84711af8ead4ff0e816e9284af93ba3c","first_seen":"2026-10-07T03:48:35.298346Z","last_seen":"2026-10-07T05:09:59.933247Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/cJGIrUSR6yBTqVRJnD.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.400Z","timestamp":1791349591400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/cJGIrUSR6yBTqVRJnD.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X5VoO%2BLTiaaqgCCaZghMykGGZshVXtuycr2RjAR8q8YBX7hkJl5f42JJ9KgyfJNA%2FXBmVpz1XMEdGPx99bqT67rkUpw6JLrI4oT%2BeX7%2BAdG9w%2BHPOYQAfF6ByrPKQQ%2B%2Fr9mczsfZRw%3D%3D\"}]}\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6a8448e0-325\"\r\nage: 4725\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46a60824c99a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":805,"size_decoded":1222,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (804)","md5":"22ce91ed99c3bcd7999df6e8311a4e74","sha1":"d0d0cbf2432452d431d09ec30fc924dbdc4fee95","sha256":"319f125c2cc80ebc45c1cb2f4567920eba18b32a947854df087bd7160daba699","sha512":"cea0f978d51a836a573ff3efdb3fbff2616d4df1aa30dab8504b2a329606bbb0f4109e9e7351c68359901290f6cf3135b22e0b18fe2b930521e7467674685412","ssdeep":"","tlshash":"ff01d545a57070d073bb1c8245150dc166724b762b42d0e0b51c9e82ea7fe56d2f7f69","first_seen":"2026-10-07T03:48:35.24117Z","last_seen":"2026-10-07T05:09:59.967213Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/lGqpBO7CVIDogXq7Yq.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.441Z","timestamp":1791349591441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/lGqpBO7CVIDogXq7Yq.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2ByZBD19IeOIFXGGK8c02%2FWRt1OB7JBHdJYwqe5MLEJRTz47aSmot%2Bzly1mcAYzdX00S80lt60yKuzSYFxACGQSG4rmkPkpwjAbZSr8sxKQFuIu%2BvUGF05mOAIrDunX1kwPV8EmBYcQ%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e0-8c6\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60828cbfa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2246,"size_decoded":1750,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2245)","md5":"1a8136e08373a62df64e313a06bf83fe","sha1":"6c9fdc6a49aa58d747a4171b139316f496bacf96","sha256":"c5cb723666051148623e8969f240bc6dc8a68fa523dad0da5c22659f9e925854","sha512":"ce28067c4cdbb8450ff5c555a7d2f127a0a5eee08e6c9aef751bbae57d0fc6ed4228c1aa679b17fcfa15e9f73b8fc0b600ce63d241a3026285903a66f32145fa","ssdeep":"","tlshash":"f54161c8f8ebd2548be66805b5a7180a53592f48f029c8c2f367dd502e3ced1f5b6d1a","first_seen":"2026-10-07T03:48:35.300374Z","last_seen":"2026-10-07T05:10:00.009094Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.payden-qt.com/upload/img/6a8314848b74.webp","fqdn":"api.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:32.874Z","timestamp":1791349592874,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /upload/img/6a8314848b74.webp HTTP/1.1\r\nHost: api.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 17 Aug 2026 14:02:44 GMT\r\npriority: u=5,i\r\netag: \"6a831484-3dd58\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 4725\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RXaAD4IzihnaXoRpyUqCZGlbx18vwF27nxHuZxoX9XIHu9HGH7pc1C08zBMr69sKtiwUt%2BZqwZ5OWQww5gHcf%2F3NVFeDgXfBLhjgCN2%2ByT9Lmfu29w9fCUEO5wEITm8jwLf0mA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a608b7f14a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 253272\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":253272,"size_decoded":254025,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1166x654, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2ac7e66aaf0ebb2d03897971046e26e5","sha1":"d37eba425586b3630873647c354d6ca9cb63ad54","sha256":"a42f1a2c2eacfcc8babd05a0cbe528e22bec851920a42970fdbafbfdbe72ebf0","sha512":"e1cd60020cd2d7afac3c9294e9567bb6fafaff8c4915014f932e2025f48039c41aeac8880b44fbf47713b74136b274fb846a9538960c460a951976325112a1f3","ssdeep":"6144:msNZclzueeOI4zXt1x4sCXiqbE/rOqIZOX0ed15r7IKDrLDG:dZeiejd0bE/rOqWB2hre","tlshash":"c9342347017662805c241bf1e6c940eff9a4f46e42c1982429e9996bb7cdbcf8e58f3d","first_seen":"2026-10-07T03:48:35.269528Z","last_seen":"2026-10-07T05:10:00.049879Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/1839.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.93","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:32.897Z","timestamp":1791349592897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/1839.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 1387\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: AmazonS3\r\nlast-modified: Thu, 17 Feb 2022 08:19:34 GMT\r\naccept-ranges: bytes\r\ndate: Wed, 07 Oct 2026 04:57:30 GMT\r\netag: \"aef8727bea8367cd9fd252c025b45887\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: BgpmQstJw-ZLibBFJK8T1dJOQA4OCFDJPZhbsvbIZA1xJ-bzqflzkw==\r\nvia: 1.1 2b7b29a6198de4be2ad1a26c19a25c2c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nage: 548\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1387,"size_decoded":1881,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"aef8727bea8367cd9fd252c025b45887","sha1":"c2ab9d909455bff35181dfd92bcc7baba930867f","sha256":"ce5a07d36768bcb5524044a9e92a606ae6effe1cb0913dfa418703461db62fe3","sha512":"5f97e368e23aa5e501e57917aea9426704ac3c4068b34d803f44944663bab45131170fec2872fb868a5faceb6856ce4d9f8870053aba7e8d08455989a731984d","ssdeep":"","tlshash":"5321085f5b644577dda94dbede05a54b29e30d208d978bc2c404ec1534598a643608ad","first_seen":"2023-05-06T05:54:57Z","last_seen":"2026-10-08T07:28:45.718725Z","times_seen":16518,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":32,"receive":0,"ssl":245},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/assets/Iyv9zRIkHfkLVjrIv-.css","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:30.084Z","timestamp":1791349590084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /assets/Iyv9zRIkHfkLVjrIv-.css HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rhh3DKQR8rvnd%2B7YmcGwRXBU82H9BE4vblnHk7YCnuOp74k6%2BlSzWjKo1VEEjlVrgC16s7JYIlM%2BwCsxzVsmnuo%2FhjMphfsF1MjnSlwgEKceXOvGgGL8YwpbJPCtdR0BtFn0XB1dbg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e0-178b69\"\r\nexpires: Wed, 07 Oct 2026 15:47:43 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4726\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a607a0a90a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1543017,"size_decoded":277833,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"263ff7f424e4ae328ff44c2280e5298f","sha1":"0535a7047a2a3a975100bcabb1ba74805e541533","sha256":"264b097ef2149e55bae80d4388b890b752feb450905de8b338250975cd3a5957","sha512":"ac3e9b48aa84e2c01261bf43304af62dfd888b8910bf097fac53abb241136957afd570c0c2a6fddc3f9feb0492da1b3efad920d727c55b8b275975a1f8a36f7d","ssdeep":"6144:Uyxsa9KNSgV/6snEGIwa8QQ4V95cWWy5sreQUdwZzhDTtCucxQD+4DYPPDn0iG:Uy1Nwhc5xWUD5dQeucWY8","tlshash":"d0252b747b84043dfc0bce2297a89a9c612ef253eb424994561a763483d73ef35637b8","first_seen":"2026-10-07T03:48:35.313721Z","last_seen":"2026-10-07T05:10:00.101531Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/PjJ1Bk3z1XBqdNnh30.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.406Z","timestamp":1791349591406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/PjJ1Bk3z1XBqdNnh30.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yng3YTC6aD136T00MVOKBetH6yT8a27s5s7bnd25BxWBQL5KdpYaNChpU05FapyfM9W0y0aP0HmeVeDj2m3OYxCOkWDODES4%2FUKrzFkep%2BNGj79VwQ9GBwAMwNR0JsRYs%2FdQFlWVuQ%3D%3D\"}]}\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6a8448e0-61\"\r\nage: 4725\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46a60824c9fa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97,"size_decoded":850,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"c52fe878e8c7ff3db206fc5b648933a0","sha1":"40d4d90aa69e6e3e9600891441b1c3c14be2aac9","sha256":"0c76164b11c03debea008da7ab1bbe41feb04ced137eb6c8cf03e8af9ecbf3f4","sha512":"e5cdb0f33b275dcac855a8b7ed6e97f107d17471957a844512dc89d24d1877f995e6f2cb7e9d2f6966bbeaf4098be280a701f8d69b3679d56c447dfbe48a65a1","ssdeep":"","tlshash":"6cb0122f0800507059550c8d230950230330197e23b3699022158e0883154a2c10da61","first_seen":"2026-10-07T03:48:35.273089Z","last_seen":"2026-10-07T05:10:00.11683Z","times_seen":2,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/7kzbrYkQYzC8_OHTL3.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.415Z","timestamp":1791349591415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/7kzbrYkQYzC8_OHTL3.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KfPyQnqwEGH1iDqaIRTjP8tFV9E%2Bp4vmcnGGDDPhgMTd0xno57zxBP6ZqRRVkIE9HBereit4rQPOeiHbWbZtGHVFoHW0xZMe%2ByxtTrychrKc0wtHFV9sBmg%2BIJBMzBN2v5fd744ALw%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e0-4f5\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60825ca7a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1269,"size_decoded":1444,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1268)","md5":"c185b39976b88870041d0ea821423996","sha1":"720a808a1e9953cebe1b80598ebc8f6e64f92ef4","sha256":"7fbda92d31c13990a979948e8113ce36f2f5153415f97f1313c2196ac6c0a460","sha512":"26452ef0f09207c117d66ba361bf624c069c08b9765cd51d2a7a9ae3136a2050df22dc202dd27145296d8ff1266d47263d7a42eaf4774fdcb92b9e69273c3441","ssdeep":"","tlshash":"d2213296f08df17d42fe3d76a85b1006c3211bd0236041dc77ab058e0b269c19567e1f","first_seen":"2026-10-07T03:48:35.302004Z","last_seen":"2026-10-07T05:10:00.154694Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://api.payden-qt.com/uws","fqdn":"api.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.773Z","timestamp":1791349591773,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /uws HTTP/1.1\r\nHost: api.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://aijrpd.payden-qt.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: MH4hWFCVzGwkyBePm61RTQ==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 07 Oct 2026 05:06:32 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: N6fLwEtErZbdzXHx1+rxvtC/IAs=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x7LS32QtM5I6zedgmCtHKsPQAe1ZBEvaO0mjQJGnUltRf35q01sfRh2uFI3XUzZMGKXaSWbij4nFJNnflSyo8hej7IksA7knC%2FTpx2RMS%2BvZIyvShoUt0HriQ3MrjGc3AUA%2BVg%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a46a6084cb04b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":628,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T09:41:01.074506Z","times_seen":18938473,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":0,"dns":14,"connect":16,"send":0,"wait":308,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.payden-qt.com/api/news?rts=1791349591799","fqdn":"api.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.813Z","timestamp":1791349591813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"OPTIONS /api/news?rts=1791349591799 HTTP/1.1\r\nHost: api.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-lang\r\nReferer: https://aijrpd.payden-qt.com/\r\nOrigin: https://aijrpd.payden-qt.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WYV8y%2F69lMqP7eSnwSaEfE1wl8rj6h3cFbiRTvkkbunvon4UVj3%2B%2BbRzq%2BnkaTi4teV2HdrwQCLqnR2x9A2gQgMRPH3FQkp%2F126nhHgp0HduYuv79s38k5urcqgqOjtJ546bgQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://aijrpd.payden-qt.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-lang\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a6084dd74a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":793,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T09:41:01.074506Z","times_seen":18938473,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.payden-qt.com/upload/img/6a8301fd9782.webp","fqdn":"api.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:32.869Z","timestamp":1791349592869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /upload/img/6a8301fd9782.webp HTTP/1.1\r\nHost: api.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 17 Aug 2026 12:43:42 GMT\r\npriority: u=5,i\r\netag: \"6a8301fe-52e56\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 4725\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kmJ1a8TYDizuojg%2F7WK5%2BkEZm8u843KX9V%2FqFbvKdWqmdrJBKn3mpAhly5%2FlwbtrYdUKr8%2FFkBx7PYhjTkQANzfLay8uvCtG2SNK4sLr3m8y646j6pYsuZZoi2ViCYIJtbYtmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a608b7f0fa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 339542\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":339542,"size_decoded":340299,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x658, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b3faf8498f8cb0554450befbe6fd9a0d","sha1":"ae19dd8b5ec32593a1a19769fe046bbc63120396","sha256":"c858674c0ac0dfce7daa6a59b11cc2db7f89c5feeb35c9b199d1ee1f216a827a","sha512":"d9ec31627b3b4201fb116d696f8aeb6973a13b46588ff10c535849804aa67dff82e65e33743ad94605f1ad7fc17b641f3eba185e4d1be72ee6707ca499cf1ee0","ssdeep":"6144:SJK8ZCYMJxbfRS1gyJQ5qqkqRikq+U5tqsxXX9ZAZmjqzisnftuwNeVQJ2p:SJbZCYMJx9Sf6MXDMsxX9WYYftOyC","tlshash":"a074238fb9412f351483f1a01551ba153b93773f07aca48e52aa55bb00ab89bb41ff4f","first_seen":"2026-10-07T03:48:35.322081Z","last_seen":"2026-10-07T05:10:00.174828Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/MGx0WOVcg4m-HF_3OX.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.360Z","timestamp":1791349591360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/MGx0WOVcg4m-HF_3OX.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bHDaGTtmiFsW%2Fym9s3apPoyP6RTUYCL2joIHxANChTPHs8cF72J9eCOafcUqQ3h0kW8fQYIZAzA18qQi0Guc5VdK1dd0TqN7mLzIt9n5cFGjS7vjpkr99QkbNxIduV4Xee3S0nAh3Q%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e0-6c5a\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60820c77a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27738,"size_decoded":13813,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (27737)","md5":"1787a3d5e6afb421d8a09eb8e5c58e31","sha1":"9a234d61d4dcff16609db9ba377f02f16b5d3e8a","sha256":"632717dda7a5219fc7c2c976e8f8e0711280092c0fad226f0eb73af4513e455c","sha512":"b074483908ffd8a2b890e00af4175f7382fa7a7376cc16f479c1a50786282ac7ececed5422917cc31a4903b42afe11c09755410b11662283f50578b2776cb172","ssdeep":"768:19NarmFp351iBFmyG5YgJnHkf+mKggY72oMIIlKRceZfvwIDT6X8wih/kfpCLBy9:BqmdUxkWcl","tlshash":"b5c2fb7060608328fed5f4a918845c466dc80beeca9691e3f1fd8dc353c2a7bed95399","first_seen":"2026-10-07T03:48:35.275092Z","last_seen":"2026-10-07T05:10:00.223079Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/SPgfvglBQYC1H44ZrR.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.411Z","timestamp":1791349591411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/SPgfvglBQYC1H44ZrR.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uUFZyQU8LQdORRkKawcI67R0y6efFQ0mZXhAcU4veYSx0AbG3hs1deUfEC3WrnHUim6EOMYZLcdkB38dmGw3i9448HYx4kU94%2Bwis9NSGbfc6k3cctMgVrY1IFjOaAQL1IEmiIcBzg%3D%3D\"}]}\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6a8448e0-f6\"\r\nage: 4725\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46a60825ca6a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":246,"size_decoded":903,"mime_type":"application/javascript","magic":"ASCII text","md5":"2b0c32e020d9425c3b93e4b1391eb486","sha1":"b2d3d2d2f0dc25ec60795b16c0f2018fa81ca4b3","sha256":"b2b09a4f5d106d8dd361b2517acc86dba075e46a0cead16dbc729f9ae4f82eea","sha512":"a9642c8620f2cab953ed75077271de3ba854f9f07fbb89b685154958995063de85cc0e3bfe6221201daecc9a76ad9736e653a0a0237462759ce229490bbe597c","ssdeep":"","tlshash":"82d02b04868813e92cb1106b0f02a7b020b3014c9f6482b4a14d0e30df0a3474d07e11","first_seen":"2026-10-07T03:48:35.326726Z","last_seen":"2026-10-07T05:10:00.254662Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/gj2gcGs7z4AZOSTjf9.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.417Z","timestamp":1791349591417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/gj2gcGs7z4AZOSTjf9.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2unUGByMIbfw7%2FICrp01Xd308zxD0abCYR97BPR3VuetdPok1wAFDoVX%2Fqu3maRpIfe8tv7RZbEfwilnSssQyUff%2BLmYHAS9fDkG3YVbKZmXX9%2FBY4xMRBuEytMajovtHOjfZ5MIhQ%3D%3D\"}]}\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6a8448e0-2eb\"\r\nage: 4725\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46a60825ca9a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":747,"size_decoded":1157,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"9c6856731e461b8e70f8147510e58364","sha1":"4c7dfa4d694435651adc226dec0719c49d374812","sha256":"8c1d0dad645fa856237b8e80dd0bd5fbf1550e893d142e2000c4bbf58dd13bf3","sha512":"648b3671087909f242ff9da7b2545536105dc83f3b4461364afed55e4681e06c971f3cde05026b095fcf044b6005ae5b92ded27d2488ba59a29a8164c0dc25f7","ssdeep":"","tlshash":"130189247ecdf6e6d16f046844e29349db3063ac58c000666e6787700fadbb3c86bb00","first_seen":"2026-10-07T03:48:35.299446Z","last_seen":"2026-10-07T05:10:00.318209Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/9PdGyEieJ4DSTV9a5F.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.418Z","timestamp":1791349591418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/9PdGyEieJ4DSTV9a5F.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FJkXQY1%2FhyehomXE3Fm2TtG%2BLY4IDtE758%2BjNUWZSWCQBV%2FGdhQMwEy1QPGUKacfHJlyYevsaHt00DpYJMjpKPDn0N2Qj8NWhRrIMbSpqvw2TIspjXqlayhfKAvjdC7cPd%2BR4mdfnQ%3D%3D\"}]}\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6a8448e0-1d0\"\r\nage: 4725\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46a60825caaa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":464,"size_decoded":1076,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (463)","md5":"48c379f7249055b38c88cd2da791b427","sha1":"582bd17d34b617a5329a95a0c527f29262724ba1","sha256":"f14012aacff1bca9c8b8e705128a9a1578900ad6b8cf0093af5fb6e8e618fc86","sha512":"692ef77ef3c7640c9f6f74bc91917ad6a6a6385a5ced78508de6c28825adf69dc17d4799607d60d79d1cc21da26c1661943caffb826e8f57c5d5c976035ca02a","ssdeep":"","tlshash":"b0f05c4df465d17c51be2c6e8441004d13324fd41292e1c8753f5e984b34de2d6a7c2d","first_seen":"2026-10-07T03:48:35.262325Z","last_seen":"2026-10-07T05:10:00.424422Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/assets/YcgMON8UhBDN-kr9cg.css","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.432Z","timestamp":1791349591432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /assets/YcgMON8UhBDN-kr9cg.css HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xQROWCI3whBBoEvF1LukXg2qEBmODUJjdrMJobYjATbiJy3ELf%2F%2B2n2jscu8C%2Bmu50xXOzIqg7CkD7tk28YwNmUq260Iw%2F6MrglrXjCXNDmU3yd8VMtNtR7bFDYezCYWJoQU0o6KqQ%3D%3D\"}]}\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6a8448e0-38b\"\r\nage: 4725\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46a60827cb3a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":907,"size_decoded":1162,"mime_type":"text/css","magic":"ASCII text, with very long lines (906)","md5":"e9d9b0a186865110ba715071932b45ef","sha1":"21d381c027e989471586a0e494e60ac719f34fc3","sha256":"68e0bc84c0ee87ec2b6f5dbd93ac2c7867a4df7edf6a057ce6b7120ed4fa0cc1","sha512":"774b9fc4fff3e8afdc1fda9e8cb7424a6b51d327533bdd11072398559177705fcba1207864093b366d07545618c5cd05a5006a373155e0afe892dfb37ea0b97f","ssdeep":"","tlshash":"2f11386a705c79293c6af0519a59cfcf31086317db2b5394ae56333448e7da12e226c4","first_seen":"2026-10-07T03:48:35.312771Z","last_seen":"2026-10-07T05:10:00.470254Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.payden-qt.com/upload/img/6a82ff650e9b.webp","fqdn":"api.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:32.859Z","timestamp":1791349592859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /upload/img/6a82ff650e9b.webp HTTP/1.1\r\nHost: api.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 17 Aug 2026 12:32:38 GMT\r\npriority: u=5,i\r\netag: \"6a82ff66-5e190\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 4725\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DvRMqftKYI%2BD%2FlyzGMjEcWeSORFa8PRFZkHuzx3VyjvzbyiknLCnypeknAxeVhdiEtJERXKEOG9fUiqf60pfi8pifOo8GLl%2BTtyF4c6DDdc333MRyzFHhPV3NiZdvgIz41zo9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a608b6f0da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 385424\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":385424,"size_decoded":386177,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x780, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"da64bf92ec6f0e2c7ee4b9d039b0629f","sha1":"2b8b0998214b94865265bf976f10006d0fb9d2dd","sha256":"5e2deca48b34181ea79c7bfe5ddbb35f7cf37d11eecade86c91e48ffbef50d69","sha512":"fe706ae1c45ffd1e518723da226c0fba02f56f21c0c8bbe6ad20b4dcb909f0bdcd977ea244a9c60d426a807d78d8c5f7448737dfd0fce1939b3b2a1d589109e3","ssdeep":"6144:pD3XhKT/cvPDD/9wJv0JfigYqVvJEF5RmL1TQTBVMWqzclA3fc2kGh2AiHrepMmf:V3XhHDDMv0JrYqVvGHK1TQTBVM1bfLrr","tlshash":"678423486db5cb2a4a1f1fae13569e4e4ccb63ab5310b50a0e39f3d4957302b53624f7","first_seen":"2026-10-07T03:48:35.264295Z","last_seen":"2026-10-07T05:10:00.487581Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.payden-qt.com/upload/files/6a832bde074e.mp4","fqdn":"api.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:33.111Z","timestamp":1791349593111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /upload/files/6a832bde074e.mp4 HTTP/1.1\r\nHost: api.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=50561024-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:33 GMT\r\ncontent-type: video/mp4\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 17 Aug 2026 15:42:22 GMT\r\npriority: u=4,i=?0\r\netag: \"6a832bde-30574c3\"\r\nstrict-transport-security: max-age=31536000\r\nage: 4725\r\ncontent-range: bytes 50561024-50689218/50689219\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V3MJDTdiplyMh5jp6xup%2FSyL2BWDzW%2FTP8go7z8ItxOcz3Jk8mN5kf%2Bj2aTYICg8Wd9w%2Bc9bfkuG2LoQBGzNkz73Dg7UfV7m7rFB0BeOdZ4otmR3X%2F0vWcGUt3ada2H%2BFY%2BMOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a608cff93a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 128195\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":128195,"size_decoded":128987,"mime_type":"video/mp4","magic":"data","md5":"82275e66c71a0d04ccf148ebb313b2af","sha1":"317628a9cfb2077937b2cdc0d03877491b0515e4","sha256":"b572b03f81e3a629353340e40e751b3a7ac3b863c33ea4be5be73a8d5ee22d6d","sha512":"29e512dcd2b8c8fa1c324dd63a7d8baa8f293bbf1a9e4832ff9840afea38c3004b5eaaa2ff667d1600f9e78ef6addb9e5ea21ed73c0cae172efa7298910d8401","ssdeep":"1536:vdQq800puTTdBb/LwapxunAZZgFa1j7ncSgNX0MuIaVVKc3v9gUL6+YocpeHI4Ud:vG4XdBbzv7gej79XhkYI9D+gsrzs","tlshash":"28c3170eb751a22fe928c7f499e263c97178d86d4b4b8b0d448cb3187d8b3f874952d9","first_seen":"2026-10-07T03:48:35.297205Z","last_seen":"2026-10-07T05:10:00.546137Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/LS4KyiSFKdDW5TBaOL.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.404Z","timestamp":1791349591404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/LS4KyiSFKdDW5TBaOL.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2k1%2BX6Jc0UReyyaadm%2FMCXMZJE5c4Gs%2FOdaHUIA9EmVkYggT3AfrM65LfALKDAnThto5QKUD8BUlqDQgdx9MZ3PsRZlkhPwMjlUfRdFYBcyg0xIzwg6nhaNHyGkUFz8IQaWhCkqzMg%3D%3D\"}]}\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6a8448e0-9d\"\r\nage: 4725\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46a60824c9ea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157,"size_decoded":893,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"89be2300b2c6cb9ebffe429861145deb","sha1":"d936246f2fdb0bf6c3efa03de3008fdf7141e979","sha256":"26fae562b94d61447204aabb168403a99b483fd773b3a6558e0d6598ada506b5","sha512":"194e116702321bad94151c7ffe3f714e89a49a27b998a78b79604474cc1496e098911e4af139df52cfaadd0f9e80aba86af0d0d08e54f1abf12d577d496eefe1","ssdeep":"","tlshash":"65c08c5d7845a0f0466a0cacc1130a6b62263e80333696b0a52a8a1b83262265206e26","first_seen":"2026-10-07T03:48:35.321141Z","last_seen":"2026-10-07T05:10:00.551941Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/assets/f8zgNzZ2GXD-ECb4SB.css","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.429Z","timestamp":1791349591429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /assets/f8zgNzZ2GXD-ECb4SB.css HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kr%2B2QKKAYObON4e1V5HANqodm0i9vTO6EeQ%2FpKzWOD15lQk97P0uF9JC3VV0eXRqL6GU7JInPuTpSvIva4Z01Jya8B6Al5gX1eN3xf3Y31m3uaEbcm%2B4siliEJieHNJ7H489hiABmg%3D%3D\"}]}\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6a8448e0-fa\"\r\nage: 4725\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46a60826cb1a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":250,"size_decoded":918,"mime_type":"text/css","magic":"ASCII text","md5":"6ad82a5f48465d9e5de0e84bd5f50d7c","sha1":"9c24e97b567146159614d9e16dfb68a1a3381595","sha256":"22525203f59285ea97b21dd7612463b3697f5ad782a756acf991fca8073a8a45","sha512":"ced62d3cac70b38203882f9ac47b97c0f4a8d900ac4374847fe0bf9e5b580cd5ec0ca4e796f627d25e1e51806258eb21a4b7429ab9e1b8c6e026314a0203945e","ssdeep":"","tlshash":"56d02b5a8c5851dcc77ef214963401dc01243213d5730c3ac57c7b167cc6b601526bd4","first_seen":"2025-04-17T13:49:08.656528Z","last_seen":"2026-10-07T05:10:00.554042Z","times_seen":105,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/KtLjq8BFvdDXmeInVN.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.437Z","timestamp":1791349591437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/KtLjq8BFvdDXmeInVN.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WVjcsrEaQOoX21viiIgWpy%2FL7mvlSvAcV2RheU69VPW01I3IM1D2ItZYkKpL%2FQbBFSo1vUiKEJTzStEZ58l%2Fp5DzU0Eyr5ufwx6A7Wn5nEDr20RjpzrVDk4Edr92aurSJUNLKdSi3Q%3D%3D\"}]}\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6a8448e0-317\"\r\nage: 4725\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46a60827cb5a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":791,"size_decoded":1286,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (463)","md5":"e3e3eeac3a3d5236b816c7c82ad20e9e","sha1":"cb415ee3d97f0eb05cf6fe54faf4d04eb99e7827","sha256":"857b2aac4a1d604fb034ec0b5faf98d809279c6ce1d74698041559842d938522","sha512":"7311b7c251863978829f408c1ca12777d8165d3753e1bc6f322e15fd6ef6d5b9b66babbed082f08d1b39d479e563c3fb96a878689cd277f41ffa66e04f380555","ssdeep":"","tlshash":"6d012acc48f6cbf9c49702542d5a10a6d0505b4c9b31d965f05dad22634fcf095dd738","first_seen":"2026-10-07T03:48:35.314786Z","last_seen":"2026-10-07T05:10:00.601261Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/assets/29rA0WgBjT0ikTKFKd.css","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.392Z","timestamp":1791349591392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /assets/29rA0WgBjT0ikTKFKd.css HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Iz26iTsLoIEjlMKqGXdggx4gQ6m5y79f01ml00hNVbjgwIH3PGBYYRBB3cnAHsfHdlXOWwrVP4SJkMoyJ4UdrNOPRjmKaOL6UjOWEEFjOWvkZRPLsiCJf45MIFYvZ84iZ4t50rt2w%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e0-26c7\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60823c93a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9927,"size_decoded":3342,"mime_type":"text/css","magic":"ASCII text, with very long lines (9926)","md5":"4bf96114a45ae43e41c9c16c70894cb5","sha1":"9ff3d993a71f7f466034b4e9905c0b1b6b6ff218","sha256":"7c1b8b43d3fb88837a76abe3aa1a9717c3efd4a8b69a917bca4092a271ebdc6a","sha512":"d810001128dded9a2e02f53c3c34ad8125aa058ab7a425d4396837f5c075ba3df03dfd327cd9b61f4db6d9272f9e27f93d67101d4362239bb96aabf7de2e97b6","ssdeep":"192:obCKXxoyM35nU2I3cU2P6vysdyqoVFKBtU2Vp5e:8jBnLyEq8pE","tlshash":"fa2253307159e03ab87fe4d9a6c55ace7034ea27c917db68d940a57088cb7fa3b13344","first_seen":"2026-10-07T03:48:35.261154Z","last_seen":"2026-10-07T05:10:00.625418Z","times_seen":2,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.563Z","timestamp":1791349591563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://aijrpd.payden-qt.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29844\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:53:51 GMT\r\nexpires: Tue, 05 Oct 2027 15:53:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 133960\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29844,"size_decoded":30657,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29844, version 1.0","md5":"9418887ae687a640730a62da6d5cef56","sha1":"c82ce6b645275be73a81d3c9027f540c0add912f","sha256":"3658a0717e347c1db8d80dd565584b9dc56769fbf87909c50a4a7740206ec5f7","sha512":"c700f698292446c2f7b8c6ab8d44eedc78ef1a0053faec159ef3f67d321bc5c9b0c24b8860ca15dcd02b24da947a32f2640bd00b4ba2c6729f3a7810ba441487","ssdeep":"768:8K/8hhK5wKRT6RxuABYd47Sm56257a/1MePoWvV6:88Sh3eTzABYdkR5b5SPoEI","tlshash":"bad2f160971a7d67dfe1de267811eb4f43aa36df0f515a4918da35cc231e38920b43e4","first_seen":"2025-09-02T19:57:23.466991Z","last_seen":"2026-10-08T10:05:29.839465Z","times_seen":18281,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.payden-qt.com/upload/img/6a82fb13aa05.webp","fqdn":"api.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.790Z","timestamp":1791349591790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /upload/img/6a82fb13aa05.webp HTTP/1.1\r\nHost: api.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 17 Aug 2026 12:14:12 GMT\r\npriority: u=6,i=?0\r\netag: \"6a82fb14-74c64\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 4725\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x%2BElNivPXFPUoLroh2u4xkzMNbYKFaYMuntR0jvvoONDUtTUPaJtPc9K7iS25c%2BwY3v8XM5RJh0%2FUVFoCV6yLKgtP4EJtlPBEgKDdj5IPfkPisr3ZgZsBiJRKRxFOqaH%2BTsaug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a6084bd64a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 478308\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":478308,"size_decoded":479066,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x1170, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8ee3fefab957257b2ec8cc4a40f8bf1b","sha1":"1dcfa755c0a6d05fe756f299fe00f73f8ae4fdef","sha256":"0ec191cded389da1592ee7b9229ca2b478ac1de17a6f9c42712f168b549eb60d","sha512":"174751fa5fc685b17726ebdc62dec41753f6e32db609ea5cb9102bae497df5fea6138ce87f06fccc0f131afff37104fb70fd21b5b97e0e05dde152c34dd4f51f","ssdeep":"12288:jAuJLnv8qS1XrwpikJvpCoejc3gS3JktZzNSZ:jAuJLnvcUiovpCPlS3EzNO","tlshash":"aca42367513b7c49ad1e83cf9e14e569136c7da617eba8655a3c431f8e30a21f2b008f","first_seen":"2026-10-07T03:48:35.246788Z","last_seen":"2026-10-07T05:10:00.676188Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/52.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.93","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:32.899Z","timestamp":1791349592899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/52.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 2330\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Tue, 19 Oct 2021 05:35:17 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 06 Oct 2026 05:13:56 GMT\r\ncache-control: max-age=86400\r\netag: \"39edd8e5c80256300562f68afb1ab525\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: lts4nAqgkqZcUEAl8qBAxRPGpIwEceD1m9PAMcpT4GQLYYJdE347zQ==\r\nvia: 1.1 2b7b29a6198de4be2ad1a26c19a25c2c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nage: 85956\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2330,"size_decoded":2856,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"39edd8e5c80256300562f68afb1ab525","sha1":"506e80486e2b9e90f7344334cd95e93ac8fa0338","sha256":"cf4c3c2ec18de3d4dcd49151ffe00cb299f86fc98467cf806b9c447467935479","sha512":"029abf77a53608d0e0a92ca7764bbed17cf0960e540fee5f8eb0a9cb1bbbb490e730ec22e8dc186b07b784cd87410f5667207c22478773346d725579673e5e2c","ssdeep":"","tlshash":"a3410ad884a0624d2924177332a3193dfc6d3f949a066dffc81d563c84a1e8271b5d64","first_seen":"2023-05-04T14:58:57Z","last_seen":"2026-10-08T07:28:45.686858Z","times_seen":18189,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":23,"connect":39,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/6636.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:32.906Z","timestamp":1791349592906,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/6636.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1745\r\nlast-modified: Tue, 23 Dec 2025 07:43:14 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 07 Oct 2026 03:14:16 GMT\r\ncache-control: public, max-age=86400\r\netag: \"9354a310aca2467883088a4c17693018\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3d622fd2dbfa16c86afe2660e869a6d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: TdwHJ6smcyoVdKkXKuMWUawrEm7NvAfcCkPMkkqNUt-IcEgR9VzC0A==\r\nage: 6758\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1745,"size_decoded":2336,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"9354a310aca2467883088a4c17693018","sha1":"8b68d24379142124633ae339e148c3db3baa73e8","sha256":"66498e82dee76d44bd12f5517f74785af51b6c23c7895fe18684ac914abf33c1","sha512":"597efe5d74e6c66063f06724931aec73e4edb064bc939ed48618af592bd8b602694ad04a1534c816ce8c334d6711affc474f99f45f0338919a7a5413eea29966","ssdeep":"","tlshash":"6f31c5d01452a47bb1030b9196bfc6b14e7024f800ced7bc946a48d273399ba78960a4","first_seen":"2025-12-23T14:18:57.776197Z","last_seen":"2026-10-08T07:28:45.611616Z","times_seen":1932,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/Cvlm8RhJcbfkxpsqTp.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.362Z","timestamp":1791349591362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/Cvlm8RhJcbfkxpsqTp.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bGPcpiERZ8tJiPJt%2BnYJk3nGLhc5iIYJApVkt3epYXaq4ntKEynNphn3e5FAK%2Fc8fpo1yQMDBTWDLD8OovUFzkrAi2%2FtbRaiE8h7CaT0UQid1ChCS1m3P2pauBdZbJekJHidg0tZQg%3D%3D\"}]}\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6a8448e0-220\"\r\nage: 4725\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46a60820c78a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":544,"size_decoded":1142,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (543)","md5":"768d9ad3d716c671e5942acd3fa086c1","sha1":"484c83303e59a94878074559c0a2d99ed608fde0","sha256":"2de8b259b5ae4d8c73d53e661081fd0c87039cb65491d6954e27ccdda1f3a2b5","sha512":"20f4e3e895eb50d584d504f1b5493b7204e3b5308b5195956c3d474ab1c199610645ebf262325106dc7a541112034519a71b49d45d1255ce036c155bf8d9df87","ssdeep":"","tlshash":"fef08b0e981282bd95ab5d452943206220487eeccb20d8c4e6e629b19782966e46ff18","first_seen":"2026-10-07T03:48:35.324503Z","last_seen":"2026-10-07T05:10:00.761341Z","times_seen":2,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/SGbFD9geipBtbHlLUK.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.364Z","timestamp":1791349591364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/SGbFD9geipBtbHlLUK.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RGJhvAS97eh2cXTLZzUTwJ58Xwpz0hlqtia2LyztxlSpPLK5qyVXTFim3pvoS%2BD%2FVa%2BjLR6TfGJMpvMwibeptVxFE0mROO%2BC5iss0viGhd5ozy5rRhw2dPkzK0WR0YH0VoMm99OW7A%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e0-8cd\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60820c79a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2253,"size_decoded":1997,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2252)","md5":"d6dadf741ff87139926bf18b4cf36b0f","sha1":"c4077c7ab0230982705f387769b5f05588a0a11b","sha256":"f047a7c2bd6ecfcd75596076797841c012f7df8664c7ffe93fb513bbf1c8a0ac","sha512":"672ad3371df079d57d8a00b95417ea50eb6e181a5a5efb957ec0b8d641337a78fc7f976a5a6ee8e79a65506b2ad51e6139d014d5a301c89385d4a8b4490c6b54","ssdeep":"","tlshash":"2a41849cf501dabca777463884120050620c0fdfa564dee4f1ae1f225bd6cb4a59af78","first_seen":"2026-10-07T03:48:35.249158Z","last_seen":"2026-10-07T05:10:00.778162Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.payden-qt.com/api/cus?rts=1791349591347","fqdn":"api.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.377Z","timestamp":1791349591377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"OPTIONS /api/cus?rts=1791349591347 HTTP/1.1\r\nHost: api.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-lang\r\nReferer: https://aijrpd.payden-qt.com/\r\nOrigin: https://aijrpd.payden-qt.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=buUFhQSPlAuXPyXkggrrwHdUjcX1QJF2nx04DuMYXY2ZRVQHzsHD4v5WTJ%2FUFmtEBUfWYLnE4hKZaF0jCCKUb1JBeOUQr4Rg1kQL4C2c8Le4T7wSMJ%2FvbCFiwQeI0GpqQO00rw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://aijrpd.payden-qt.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-lang\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60821c88a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":787,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T09:41:01.074506Z","times_seen":18938473,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/VDLGBNwg0rDlwJHT2D.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.425Z","timestamp":1791349591425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/VDLGBNwg0rDlwJHT2D.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0H98Jt44BQ47Zo2kj5Qd7Mb%2BmAG%2BA%2BzaTP7E51T9cOawTlpTXpk0h7LSEeT4hIwUhc%2BDOcWjULh7P80aebkVb96XhaYatj6lgkUiOp5gQZz97LCzJ60RJ%2BAD%2Bzk7UiBTYOPCJ9ojMQ%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e0-4d5\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60826caea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1237,"size_decoded":1497,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (796)","md5":"ecd6457abc1aa76082bb5b35bf8fbdcf","sha1":"0c0cac461dae65cab092b15554c8d22fa82c5221","sha256":"afa609957fad12ba291b7b9a7141fc7c288342f7f93d0ed27489edcf16a2ea50","sha512":"dd37bebb6261a570ed3c772f38a8080d03d7417d30b8a10613042570fadb21baa2473740e4101f362584209c0311205370ca403ab64b838b93d80eb941a4a2bb","ssdeep":"","tlshash":"6321215d7802db79cc57496cd0981c02618c3feb9778c8a1f0eead266ad1eb0863e734","first_seen":"2026-10-07T03:48:35.30304Z","last_seen":"2026-10-07T05:10:00.813273Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjs2yNL4U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.566Z","timestamp":1791349591566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjs2yNL4U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://aijrpd.payden-qt.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:12:47 GMT\r\nexpires: Tue, 05 Oct 2027 16:12:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 132824\r\nlast-modified: Wed, 27 Aug 2025 19:19:13 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13156,"size_decoded":13969,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13156, version 1.0","md5":"3465725ef56cbb4646bf0f659b6afb17","sha1":"0723c0990d77a2f75654a36758fb258b3a474a9e","sha256":"083fb2d0137ac54e05c22d540864c7e0c396609d2d5372bb867d7ba5301c114f","sha512":"8de8ed010c89489c8b4d1f80ba02e4ee4c28cfa5efc4bbcccd6ac01b1b13c9f25319aa1bfb5189a7877d2d1c87544562191f15a8f5aa9ad65ba24e44b3337451","ssdeep":"192:LFa/HoVlZYnleZ2RQLa7XJofDvcBIlCuV2YeiJAc4W56bfcv+SL/nNx9+/wjssD:IwVl+noLfeQCY2Yei2q6bwPL//Q/wnD","tlshash":"9042c023ddfd22e8d5e6003d265e48572218610cd3b6d4798f75fdbb693be803096863","first_seen":"2025-09-05T10:45:04.745852Z","last_seen":"2026-10-07T05:10:00.838206Z","times_seen":173,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.payden-qt.com/api/home?rts=1791349591799","fqdn":"api.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.822Z","timestamp":1791349591822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"OPTIONS /api/home?rts=1791349591799 HTTP/1.1\r\nHost: api.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-lang\r\nReferer: https://aijrpd.payden-qt.com/\r\nOrigin: https://aijrpd.payden-qt.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XrEXDbf7yujb77QY81tz3tPyYePIYJIcG7pGq5eNGsdSixGhnJrs%2Bc9BYIRwxXgqYphiLAzPrPBRq9G3BKMwEf5qWxEk8zuFBjFLDu736CRuXn9IyxIxcAtHatDGdATZfsOUWA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://aijrpd.payden-qt.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-lang\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a6084ed7ba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":785,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T09:41:01.074506Z","times_seen":18938473,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCjC3jsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.849Z","timestamp":1791349591849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCjC3jsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://aijrpd.payden-qt.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30508\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 02 Oct 2026 04:27:44 GMT\r\nexpires: Sat, 02 Oct 2027 04:27:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 434327\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30508,"size_decoded":31321,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30508, version 1.0","md5":"c6bd3f0bf07f006f394988f7ec53b24d","sha1":"1ed27190e58308bbc4f0f14339c9672e841ff42a","sha256":"428ec293d3b79af16abdca704f630c6c951744f572eddbc80e970bc9a94a33d2","sha512":"c60a4f61b6c53f44c53f3c58e19c67ecb04f01f21656ebc27e4f8f26288e75367ea598420086da791f0e840e14b5979e3a773d32748a39e688ee1cc563e26e5a","ssdeep":"768:LvTtYZduSuUagqNr6VTkl6yuwBNFOHqAr5OO8t7:LvJaBt9qNr6V4syuwrFOKXO2","tlshash":"e0d2f15cfee3912e549bcd70befbcbc08c836d251cd579ac2ecd424649a78883909667","first_seen":"2025-09-02T21:16:23.972354Z","last_seen":"2026-10-08T09:53:04.490235Z","times_seen":12369,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/assets/o89Rh15n32BBGxtG58.css","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.367Z","timestamp":1791349591367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /assets/o89Rh15n32BBGxtG58.css HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zy%2FnDJinMSzWemf%2Bc5Tus2Qy5Lc78q6pqNPwglYh43ESOPdU3qGfHpirD4k4RbU1BXfuTf28PqgiifACQWShpHOXlxcQBGdNskYasK%2B6jk6AI1%2FCkPUjke%2FkMr2pTS0LJq63NbQa6w%3D%3D\"}]}\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6a8448e0-77\"\r\nage: 4725\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46a60820c7ca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119,"size_decoded":849,"mime_type":"text/css","magic":"ASCII text","md5":"a9fadc4adb941b49dba4057ed5892a8a","sha1":"97ef5525981dbd1ea4d8b3717a4ed1ec47f487ad","sha256":"3b1bb70e6f7bfe6da705495af851998d936ecccd16a2f898321f83febb45a2e6","sha512":"ef44b98d8614ff9ceb690a44fd6e7db3f869f33fe6ca2658de616b6d074922c8ae0aaa9fb8ddeeaa267ec5b5ddedd13801271df5cd6f0e579f87a38a44cdbd1e","ssdeep":"","tlshash":"c0b09b1516013b1c705d7441de5416d75141d437946175558a81572f448e4b72d747a4","first_seen":"2025-04-17T13:49:08.687019Z","last_seen":"2026-10-07T05:10:00.892912Z","times_seen":160,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/q7yzwVwl8hDvIbGRLV.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.372Z","timestamp":1791349591372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/q7yzwVwl8hDvIbGRLV.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 11:58:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7wkO7KYD758XglL%2Fi0tx%2FCo1JuSsnPifiR7O3R3bgZM1VRMWrYKErp16MTP%2FF3qRrNMpy4Cpm7VBib1ck7fX6FXA8JbSbM2UFxlEECq%2FFGEddZ0RG%2BrPcHQMd5dhozGy6VfsWyXt8A%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e1-1a8d9c\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60821c82a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":1740188,"size_decoded":764306,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (11679)","md5":"6c3c79818697d960d14d4c3badba532a","sha1":"ec00e34fad469d4816cdc7b26e614055f8cf2f3e","sha256":"12c5316c2f023d19937984c0ee13c9fe5a373881bea1b0d32fec33d7090a8664","sha512":"0e3f0466bbc8a33aa53fab6d244ebca7ad5012f67c5428e59160f59aa10e8b1659a7f18b026d436d2d19b43af435125a9faddb212f6b48752ab0d17280a9e8e0","ssdeep":"12288:YL85Oal5hr/JVGK1ggoWCd0R169QxXb9aNRfB+:RkabhrRVp2QxXb9aNf+","tlshash":"df251744a41bcabcf8f351a49898a441b1a93fefc115d516b2fc082727c7c78abd97b4","first_seen":"2026-10-07T03:48:35.236583Z","last_seen":"2026-10-07T05:10:00.906589Z","times_seen":2,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/4eD9Kz7pURCZ7CCHuF.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.396Z","timestamp":1791349591396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/4eD9Kz7pURCZ7CCHuF.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HGYz2GPDzv2obnOBYPg37K6uT%2FJDDI3e9AzZqRA3HrV%2FoWMqq1bF6u4ls2GtZNA2EiB9nHhCYohE9%2BX566rE990jUJaOXM1VhsyXLg8%2B2L0nIFfP%2FFmkwqGt2Ay%2FaLB1btBRE%2Bn1ng%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e0-2a75\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60823c98a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10869,"size_decoded":4914,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10868)","md5":"052facba1e21ae1dd3e7c8155a53a28b","sha1":"9699bab5cab3f1ccb6d0c8d87499d60298fcd043","sha256":"904964658e8ce8125d527e86e7a711723d1c23ee1d1ab6468b03fe0f49fd485d","sha512":"67cad294ba20fa2b95f92f80c86327350081addd6b91f8cc5365965eaa9f4228b824f605d93a1721cc7cf3248383bcea5c3c765f6cc91917bc32e6906fc122d6","ssdeep":"192:sGmNxN6NON5NcNrNBNgN1Jb5BMNmDPA/IfOSqITWnlHO5laVPK:sGmbg4relr65UNwPA/I/9TWdOe1K","tlshash":"9b2241a5df4feb0b472104c43b27ba9daf5e2bceb0ee4583c3499c6c5e0ad546606970","first_seen":"2026-10-07T03:48:35.238825Z","last_seen":"2026-10-07T05:10:00.917246Z","times_seen":2,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/mInedbfRtZiFL9c6Bs.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.410Z","timestamp":1791349591410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/mInedbfRtZiFL9c6Bs.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q0abudcc0ARM5dXaSjX9V12Z376c9f9NRl2TFBjTXYEmiDR3cKMB9LeF7JHlbCfN6780iGGCtk%2F3OSr2q6SS%2FxMrOCdmjG8%2Bk9t3Zmj99N20v97FtoVDydf1c%2FrLN9758x9z7%2FVjVA%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e0-d2a\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60825ca5a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3370,"size_decoded":2185,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3369)","md5":"23d767c7621636b66276b680be6cb820","sha1":"68df23c56c517e8e6291186db320a3647d53e2c7","sha256":"ec339e24635b01065f54b34a33244ec08b1c403dd74c701dd913acfd9a725720","sha512":"178b6d66811bda8cf8a196bf0dc6977062451a18105aea4ba26a7696552dc71b1c8d701ab7d7a00dac29f211c0f79a3d6d89cb6844b31cc640240513b533e213","ssdeep":"","tlshash":"6d619398faa594708fb52cf0329440c95b0e13d0ed2784ed501b6f012babd63bee9524","first_seen":"2026-10-07T03:48:35.310602Z","last_seen":"2026-10-07T05:10:00.94283Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/assets/xnPdvhxf6cDyWj5eW5.css","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.447Z","timestamp":1791349591447,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /assets/xnPdvhxf6cDyWj5eW5.css HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3lsp0BY4ZBV909g%2FLBY7BJEgnTvnqymhBp9L9h3qjhaBQwmo%2BmwhjJ3eDVYrXg2K37wzB27%2FqTWnXmtd8W0F9GoePkRuxR2xgGdPa1cuWh%2BrGqw7wBKBtNhTViMUQ0qPcND%2FE%2FiENQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e0-8e663\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60828cc1a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":583267,"size_decoded":214071,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2e5960f7aeeaaa15a8f67a234c52f763","sha1":"567541e64c1a6704437a0771e714d3a203b589ef","sha256":"1affe18f9775185fe84d9e275c5b52a3e46cd57f6556f87d5b0b74000f0b0ae1","sha512":"5a36247553dd24c3cec09140e441c341ea55c3d709c59fb73277e74a84ac85666a1a3c9101b3729877fece002ec09c68b76d739af590edb397dd26d4ae896dde","ssdeep":"6144:QWL+H5T2PX/pNOtIIox/LAYmuNkQDmU0wYHLo:42v/TOtIIox/LxmuNkQDmU0wYHLo","tlshash":"87c4177c3958663bb87bc524316c1acd5c16b603e932879cea953438cddfaf3292e548","first_seen":"2026-10-07T03:48:35.251583Z","last_seen":"2026-10-07T05:10:01.085993Z","times_seen":2,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.payden-qt.com/upload/img/6a82f2c0d81f.webp","fqdn":"api.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.789Z","timestamp":1791349591789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /upload/img/6a82f2c0d81f.webp HTTP/1.1\r\nHost: api.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 17 Aug 2026 11:38:41 GMT\r\npriority: u=6,i=?0\r\netag: \"6a82f2c1-604ca\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 4725\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DRccwdsN3BZSaiyldzVUYujqk7RoLKYLH57E1flhDobucaN3ovKwPtyKH%2FkyCyMr2OtHYRNoDhjMrh7Vt545CKIndWuSU97RJbXliqPJgemJjdYLRNbk9cE%2BXidCuU0CUzJpfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a6084ad63a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 394442\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":394442,"size_decoded":395196,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x1170, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ec78755ce62226e566ef30e93db8fae1","sha1":"0278cb31a0d8bb7d73be71cbdca1955d690ed9ce","sha256":"ce2bccac7bc7c51b38f52251a83b4697f969efe5295f90d642317993b5b06c5a","sha512":"0c027382ec32d8ef905ca4dbede8839865b44d68ccf238b835c074e76f64a76b78253eca832796674b36136b5e182cb22f78571bb9122aa0e2b1da0112a733d9","ssdeep":"6144:qiZLqGC1hR3Q5/vZrjG3SS8tzWJxgO5RXNTCvFhm2mGC026tM00bUkJmJLXhUl:dZLZMQJ1Ke8xggdO9J9Ft4b+Xhe","tlshash":"06842311ffa95b8d4578a061d83797c2935a823b2f7f02edbd5c82257082295f8c6cb7","first_seen":"2026-10-07T03:48:35.278122Z","last_seen":"2026-10-07T05:10:01.097376Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.payden-qt.com/upload/img/6a831444effe.webp","fqdn":"api.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:32.872Z","timestamp":1791349592872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /upload/img/6a831444effe.webp HTTP/1.1\r\nHost: api.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 17 Aug 2026 14:01:40 GMT\r\npriority: u=5,i\r\netag: \"6a831444-20f84\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 4725\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j8DUU3IWUXvXWUMlr85%2BTOVXT4HxA71JXg6ljq648LhiKja57JIJlN4d0ShKhAxldNt5sgGec300T%2BTiVPgGbS4g99I3CdXVQOOIKxWSuBGUXxKZTGaYJPXaX0HL9xiT%2BMkiFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a608b7f10a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 135044\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":135044,"size_decoded":135797,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x658, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ee300cf2ec9a37e199c72edf133ec904","sha1":"e7778b518409eef1fc91c5e67e79eb9eda488edc","sha256":"43d00f200f9fe95195adbc7d1f006fc67afa3efad3394b4fa86101d95f2548f3","sha512":"e4b2ef281b1d5b94bd6aa8fd3af152461eba8489a6ab1f6cfdc76a603c557c4d67a2788b10d798cf48e7a798eb7d6a3c6fea3de5913632b6ad113efc67d74822","ssdeep":"3072:JY7ICaMKS3iFUszGyYN45QosoHLIpmQZVl1NEIRpr2ZGQCZdeNeU8:+d1HuUyGfgQILGmQZVlsm1+G9Q8","tlshash":"97d312b561f462d05ea5c9533a22904ac6b7b32e8e3fe52aa1c1ec9374f73d71cd6018","first_seen":"2026-10-07T03:48:35.304072Z","last_seen":"2026-10-07T05:10:01.116742Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.payden-qt.com/upload/files/6a832bde074e.mp4","fqdn":"api.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:32.936Z","timestamp":1791349592936,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /upload/files/6a832bde074e.mp4 HTTP/1.1\r\nHost: api.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:32 GMT\r\ncontent-type: video/mp4\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 17 Aug 2026 15:42:22 GMT\r\npriority: u=4,i=?0\r\netag: \"6a832bde-30574c3\"\r\nstrict-transport-security: max-age=31536000\r\nage: 4725\r\ncontent-range: bytes 0-50689218/50689219\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K7AMXUzkMp68OvrZ2b78IzCwmHHaYkubdbL3hevr0eWJfgHPTeFbvXq4o7niB58CAFEwFzViedo9yNtUrQlXXw%2F3xCoH%2F4x3kRoHX9TLVXm8ZA8Xr5rHWUm3Whvus2dH%2FpCKzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a608bdf35a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50689219\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":786432,"size_decoded":787211,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"31b1235f79e7f2409fb8353f2bfb6f80","sha1":"96e36e85a2f4bc17f4d0d13026a7df01b09acdd8","sha256":"f2ef785b499fe80caf88dea1ab810921e398429bbf63050b05f4ba1cfafdfdf9","sha512":"e4cbad7bd4fad075ce4ab97f19ba9376e8e7f213e33201d2f8b98502cc9f3b2366d16dc321845fb792591c252ef51be837c5158c338c66b5cfa88b9d3df167d8","ssdeep":"12288:K57NdzLkC3BEe8H11ebjCM8kYOo9fvp7jdPLCxDvzCH13j9t/kLWNRm02FC:e1EeE4O9kYOo9n1j9uvzCHZ9tE0H","tlshash":"cbf433c23c5db3089446a2f10658cd567bca92c9c1b361ed5b4d22a7fbcbf489c74962","first_seen":"2026-10-07T05:10:01.144519Z","last_seen":"2026-10-07T05:10:01.144519Z","times_seen":1,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":11,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T05:06:29.359Z","timestamp":1791349589359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:29 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wWRwOWev7CHTM4%2BXIC5OpZW8dD4LYhLijex15i2PENyonoaUbXz7r5752IhPKKz1JskTPSMwVHqM3zAf8v4Gd7Ml9NK%2F14vhonr5BKv4%2FHxvCkgbcTNclpjivqjg5zIQ82z4nw2ssw%3D%3D\"}]}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a46a6075a8dba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217293,"size_decoded":58701,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (58107)","md5":"f4086cc5471ac3654334321ea0f8df4d","sha1":"12d09c8ff45d9ed57ab5c54276696193166a4843","sha256":"655491addc460d1b32f2b955a4a90975becd3c74cef4ae5899f35a683eec9915","sha512":"3101255e84cd34493cfa0aeb3d5202d0b5946a92154f9719260515badb47b99d019ffcde2f64c91e81293958d239020430e04468931cbda669004376795e7f64","ssdeep":"1536:fSfHQ34OOb+EsPO4MD7czwKCfymtGKnXWpV9zWblHoyGrmVcxq605HJjPxRfoowx:37","tlshash":"d92428a153e0e2d8f755832dd5316c3621bf34ea7be0c28cc8cd6677aa1a8c9451cd6b","first_seen":"2026-10-07T03:48:35.248066Z","last_seen":"2026-10-07T05:10:01.150747Z","times_seen":2,"resource_available":true,"data":null}},"time_used":589,"timings":{"blocked":0,"dns":9,"connect":16,"send":0,"wait":296,"receive":268,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/swiper.BcvdeNb6.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:30.081Z","timestamp":1791349590081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/swiper.BcvdeNb6.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 11:58:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DRZGQIWIAvlDBgA5cMb8vBMUg7TOS56nFqW5fWcKsXPmU%2FBVemRX3hA8Pj2pGn9lDA65Ax23a%2BmykmfL8ZS15%2BRnTCB7gUYo9qV%2BPzIHGWQak92oP2ahslsSiZazN5w8SvWIlhu7bg%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e1-29336\"\r\nexpires: Wed, 07 Oct 2026 15:47:43 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4726\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a607a0a8da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168758,"size_decoded":64618,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5246)","md5":"60fa4e0aee4624a135c9bbb00e0ae2d5","sha1":"27ce2ac449c95edb3262b5cc0c89464959a9e20f","sha256":"e00727f35d6587fceb81cd5fe08f181a1c2b7246703a955e80c718cb4e278f97","sha512":"fc4f1474e8a35844a7f2753ba744c0823515b05419d75c083ec487c647daf2c9fd88740e0d3d272d6e716a97f5a0cde39df57b72e5807d3981d9d63157bba7a6","ssdeep":"3072:X72Lz7VtYUf0irCIH0wEvFyPCENnRZDvPMI/2vlzoD:XafRtYUf0irH2FyPfNnRZDvPMI/2FoD","tlshash":"31f34b997250b13242fb19e742768111b37909497809d4e8b1adadeb2d3b84812ffffd","first_seen":"2026-07-01T21:54:37.967413Z","last_seen":"2026-10-07T05:10:01.16836Z","times_seen":11,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/vS8SUsLBZCCJl22rt_.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.368Z","timestamp":1791349591368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/vS8SUsLBZCCJl22rt_.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 11:58:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hoP2qFHQZBSFaoz2lE%2B8%2F6ri%2FtosLuuljyfqbQWt4VCXhMJsPj7icCzkQnuXFHDRllFCR9OO4H5afRBTuAR3LjH0Zaubuos4j5u%2BPjRGeC7rQrk%2F9Yxi0tWsg56LhNLTcqm%2BazhGOQ%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e1-694\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60820c80a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1684,"size_decoded":1739,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1683)","md5":"6d2cd75c6c0b88572d5c00b1818e9230","sha1":"30465b9fb99ffb7fc14e32e5edc7eb7b46ede43d","sha256":"845001d7d68725c802b2ab7e0de4aca73baf05c6f51405161cc2eb53d584bebe","sha512":"52913bcd262434102be03db32f1ef2f91d0e9c9532cbcd1e3ce0d9ef2223ce53f6bbcf9ad54c4bec08067096c79254d874cfc7217c56247245560a64243b8608","ssdeep":"","tlshash":"8e317298f80acfbcb07748394507c055900c4fdef226d60570e84a2217e6c39921af6c","first_seen":"2026-10-07T03:48:35.325569Z","last_seen":"2026-10-07T05:10:01.227754Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/T6rfSUrLCzCx_2Jz3R.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.399Z","timestamp":1791349591399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/T6rfSUrLCzCx_2Jz3R.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QCkJRJrSpsnUHgfBgiLDHyJbv5xU9f6ee0OxAZHnFVSNaoy2BXbLLKdBe9yXuFn4M%2FSvwRTeGFwAc24%2FjubNuNoigJ7aAWGMIgU7jm2d3PrKrNbcUdGK8KI9moH%2BgCO1ho1bztGueA%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e0-2043\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60824c9aa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8259,"size_decoded":6773,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (8258)","md5":"641ffb0d6a08c9fce0c73d8acaada677","sha1":"64118bf2b49d4554b9d8ae36ccc76df1781fb574","sha256":"74253140983496bfdd1da28fa017ae91efaff4bace4383a12b60be14166d7a2b","sha512":"6e0da6b558587c14504238739273c1a43e7c1ef9552f1ca99c73975f1c918a6d3092146ddcb9120732c1b0fd90b2ed71d6ebdd77f51543fc4d86b4b4ae8a8e4e","ssdeep":"192:eISXv41iPQNDN9NzDnVTDQQezJs+nNULO4evdNfmK0xoHpKkI:eI71jt7BBsQEs+nNZ1QSTI","tlshash":"15028ee314017e7e57e182b8a76834145c77147f11ed223a2e4fd256b589122b18d4a7","first_seen":"2026-10-07T03:48:35.23992Z","last_seen":"2026-10-07T05:10:01.24633Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/mgdib9uIG5BZ1Sf_ug.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.403Z","timestamp":1791349591403,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/mgdib9uIG5BZ1Sf_ug.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gKFH4ErF4Rn7UQuAhltSZxGIN1hd2oJaad9WpaXV3zMC0e7CKkF%2BpCUhytvNijqHrbEmG8TFBaO7RKiGx08blgXr4qsEl3STaFfYQO0vfHBkYwgAgsVvsmi9fdiL6rcO4Ybx1E%2FrjA%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e0-2be6\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60824c9da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11238,"size_decoded":5826,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9241)","md5":"eaab6ea495e8b2bc45c6cd62ff0a81a1","sha1":"29c21d9dd986880606cfb55e7c5a127ae9668686","sha256":"8272597e03e8724a111c1166f009a00eb4f30a524c560bddad1e09c97f678e70","sha512":"be835b22da4daeef9b273425369a1192d175d3d013821ca57cafe94c3785a38414634952c924d46f0f03b1f1a51596e46375f0569b6902051def8b3ea1a6eb6d","ssdeep":"192:y054mYG47jY4G3Pcb5ACbqQ/pU1ra9gX+EHoYoX85b8H17FZ9UN6e3+ZKc8IRW7z:nkX7dG305WKQ+EDoX85b8H7ZqNNgg7aI","tlshash":"52321c9678447074877798c4c0a909a19229378cf229c6d1f16e2c2a3b6d5b4f0fef1e","first_seen":"2026-10-07T03:48:35.305114Z","last_seen":"2026-10-07T05:10:01.278728Z","times_seen":2,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/1.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.93","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:32.894Z","timestamp":1791349592894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/1.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 2691\r\nage: 82598\r\nlast-modified: Tue, 19 Oct 2021 05:32:33 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 06 Oct 2026 06:09:56 GMT\r\ncache-control: max-age=86400\r\netag: \"2edf1ef8b333c40979976d1a49bc234c\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: Lndiyka-MNlzNb-pJtLocmUI0WnXKJX-sSYxicapxH7TfckUKS5LlQ==\r\nvia: 1.1 2b7b29a6198de4be2ad1a26c19a25c2c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2691,"size_decoded":3217,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-10-08T07:28:45.650905Z","times_seen":34675,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":3,"connect":10,"send":0,"wait":31,"receive":0,"ssl":245},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:30.339Z","timestamp":1791349590339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://aijrpd.payden-qt.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:00:26 GMT\r\nexpires: Tue, 05 Oct 2027 16:00:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 133564\r\nlast-modified: Wed, 27 Aug 2025 19:19:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34924,"size_decoded":35737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34924, version 1.0","md5":"4a8b9af22b314f408f66a17f71e28908","sha1":"6b5600d84c178cd28b23b583bbcaa4eb12efff25","sha256":"dabae363ac0ae6c3b2a137a32f7132b42520a8af252f87aa6c2198f2a79cf91c","sha512":"17dbf975ba4d4a818f25bb52dfdec52ff0ad6291c37981bce0313075c13751180a30ec81db40e1b2092a92e9491d275fa253e879e3e62d97ba235295da4ddd74","ssdeep":"768:C4rzLlWA+tpuAdMEUDz1whQjKgz63b6G8tWbxfw6abvdNwGFbML:xz+/uAdMEUDZKYI3bqtMY6WvkGFML","tlshash":"e3f2f1d39beb766c5e3fa89c32b3d2653969580430737119b0a2674842e274c56e6d03","first_seen":"2025-09-02T19:57:23.465236Z","last_seen":"2026-10-08T09:53:04.478873Z","times_seen":23403,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":2,"connect":32,"send":0,"wait":16,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.payden-qt.com/upload/img/6a82fb13aa05.webp","fqdn":"api.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.801Z","timestamp":1791349591801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /upload/img/6a82fb13aa05.webp HTTP/1.1\r\nHost: api.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 17 Aug 2026 12:14:12 GMT\r\npriority: u=5,i\r\netag: \"6a82fb14-74c64\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 4725\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PmRuW%2BLJHMTfCwF4lyLdNa9MWL%2F5KNgvFzogZLgG34OehVZ4uQRaC2tFQuFVikzYBJoNcZHDCM1Ym82XmY5PzfceSO6gec2mKtl%2BmzTjwkRd9w806Qkcw2Q8mfMbY9hrQ90oSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a6084cd6fa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 478308\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":478308,"size_decoded":479061,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x1170, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8ee3fefab957257b2ec8cc4a40f8bf1b","sha1":"1dcfa755c0a6d05fe756f299fe00f73f8ae4fdef","sha256":"0ec191cded389da1592ee7b9229ca2b478ac1de17a6f9c42712f168b549eb60d","sha512":"174751fa5fc685b17726ebdc62dec41753f6e32db609ea5cb9102bae497df5fea6138ce87f06fccc0f131afff37104fb70fd21b5b97e0e05dde152c34dd4f51f","ssdeep":"12288:jAuJLnv8qS1XrwpikJvpCoejc3gS3JktZzNSZ:jAuJLnvcUiovpCPlS3EzNO","tlshash":"aca42367513b7c49ad1e83cf9e14e569136c7da617eba8655a3c431f8e30a21f2b008f","first_seen":"2026-10-07T03:48:35.246788Z","last_seen":"2026-10-07T05:10:00.676188Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.payden-qt.com/api/news?rts=1791349591799","fqdn":"api.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.804Z","timestamp":1791349591804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /api/news?rts=1791349591799 HTTP/1.1\r\nHost: api.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nst-lang: en\r\nOrigin: https://aijrpd.payden-qt.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:32 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://aijrpd.payden-qt.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ovyQdO5kWxk%2F2LZaPuer6VSGjV9P9zYFnWpCJujBA%2BblHC0kpclFeq4SrZsAkDAjAtHNmsEWBPEHzUF9FxkjVCC8kBzmmgFlUs5Ht0w6CAtzpGqY5ggK7K8cCzyj08vy1ySdjg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a46a6085bdbea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93,"size_decoded":898,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"6ef7c0639d327ed6dab16e12e36c6a96","sha1":"1bbfa7b2b71c0c270c180eabdf75c036ab1afc20","sha256":"06f369caa217c92c2d5b23ff6a5979e5b7926fe8ac15ff76223ca601362f1b05","sha512":"64968314a332f8dbcbb6869915f0b1a1163ffa4803712a1c3b0593e0048f121db1ed66ade9bb623307f1a9c59fff6650a6c47c31ce5e6706f7199d38a88ab7a1","ssdeep":"","tlshash":"1bb0124948c4c80410cc20d8551a64d261fe37488a945455191e6c2135f9abc0ad1d01","first_seen":"2026-10-07T05:10:01.350521Z","last_seen":"2026-10-07T05:10:01.350521Z","times_seen":1,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/5426.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:32.903Z","timestamp":1791349592903,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/5426.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 3759\r\nlast-modified: Thu, 25 Jan 2024 08:50:23 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 06 Oct 2026 07:09:26 GMT\r\ncache-control: public, max-age=86400\r\netag: \"8634cee42b68c501da8d76beee00bf86\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3d622fd2dbfa16c86afe2660e869a6d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: U4944Gv-NTYbFui2GtH7JXiuC-FTxWPuwd9tmkkY6PnE5TbbYEJMTg==\r\nage: 79027\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3759,"size_decoded":4351,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"8634cee42b68c501da8d76beee00bf86","sha1":"346a50344174ec7c53cdd48080a55f7cd3a7c164","sha256":"890b9f9ed3f5ab8390b86f93b5b8ba0c2d5d50a5dc21668734b3537bc3a65f53","sha512":"405e62a3f1c24476041f90ddb5e50801693578a1b3e108919edcde05bb429bad77fc60b0096adbaa9a2704835ebd7dc165720ad0a14ada9498b3234d361ef259","ssdeep":"","tlshash":"fa715be58e8349f8b5ce461d652892f55cc24943d9f987101ee467921800a82f0a90e2","first_seen":"2024-01-31T18:12:49Z","last_seen":"2026-10-08T07:28:45.775251Z","times_seen":3784,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/assets/fZxtzCzdITSVA4yXCC.css","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.409Z","timestamp":1791349591409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /assets/fZxtzCzdITSVA4yXCC.css HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9SYl3uy83TrS0LsiSdbFjiQsRCXoJqlMMKtDW5JsEzpj8ksJH0HO0T2VixZZs9iUe1G%2Blm0mtoBlxAAFDLXJd%2BASyamO5OctBm2TVFTeQOjbx8TuV3uOzzb4hBJ06GtQQjX%2B%2BQrqeg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e0-741\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60824ca3a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1857,"size_decoded":1291,"mime_type":"text/css","magic":"ASCII text, with very long lines (1856)","md5":"c41962c9f2a02eba8f3456ec86fa9f87","sha1":"6a4a50d1dbdfb1334cb748491e736add30525c2e","sha256":"40c0e95eec894a533bf70113f8afa7d77a3f66576f740067a5132ecb45392660","sha512":"c1c48c8a2f0ceaadf6db090b574963ddb5bafb04dfca815cfbb2e478d64177e9734f658ef33e51408cdcc88235829c1edb66e1e3ecbc1f61ba087e2133992d30","ssdeep":"","tlshash":"023191e1a29995b85f62e115cf56ffdaf1686760da028149f0c31724cacff780ea1bc4","first_seen":"2025-04-17T13:49:08.73869Z","last_seen":"2026-10-07T05:10:01.472664Z","times_seen":117,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/NAqE8zzhbrB_A1xBdJ.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.446Z","timestamp":1791349591446,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/NAqE8zzhbrB_A1xBdJ.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\npriority: u=1,i=?0\r\netag: \"6a8448e0-1b\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\naccept-ranges: bytes\r\nage: 4725\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FvSIyYPJsiVA1cseBF2BRhNiU%2BmyStRYX6hOYrG5Wnj07pD6CWRgP7T90ZAT7yhDxG%2FMvRJQ%2B4Nm2RMuOyVrSSM1jdqeel0nZiok0HQnjRyVIk20EL1pLFgqrNWOz6Km5OhrOJ8Dbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60828cc0a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27,"size_decoded":789,"mime_type":"application/javascript","magic":"ASCII text","md5":"703a0c9620dd946cc85f5ccee2828005","sha1":"2cf601f3dec2169adb9a1f53d1c99f802094dac1","sha256":"f37d93c862ba8958e8a83a2353ce79d1a4ba4220d51c648bc986cf9a7fab8625","sha512":"ae87c9f33c47a5457881291cd2dacae870d242aeeb8fb4b738e44315480d2fc14aa61b978bb41637d428db06df5e2bae0403fb8e9a326f52725826bc0b899a00","ssdeep":"","tlshash":"4680003a082000b230a0008cb2a0880000a0203c3b222288228802e20302080e888e00","first_seen":"2023-08-18T09:36:36Z","last_seen":"2026-10-08T04:18:15.37298Z","times_seen":868,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/1027.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:32.896Z","timestamp":1791349592896,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/1027.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 2780\r\nlast-modified: Tue, 19 Oct 2021 05:32:40 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 07 Oct 2026 02:05:44 GMT\r\ncache-control: max-age=86400\r\netag: \"856bfdb63dc0d6fad6b92fc6a29719e1\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3d622fd2dbfa16c86afe2660e869a6d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: eGxbMkrX9OF6gBjEq_M5m7QS4FZMPnTyNWqChGqig2DZmLosKKS3Qw==\r\nage: 10849\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2780,"size_decoded":3326,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"856bfdb63dc0d6fad6b92fc6a29719e1","sha1":"2fed2e3409ce1bbbfb37f6da4abeecc30cefc021","sha256":"eebe29898b8b7de5c9e47daab474152be8095e3ab42d768b84b085c5a12b95c6","sha512":"a61c0a108d63c89ae62a2b03108480b5c08bda0e80049089a2a84cd7973bd9e94dcd2902e166b92e1d7ad5b7356357c9b181cb1b6051dd25913e82d2420154f0","ssdeep":"","tlshash":"51518cc7a707f33a9c866161bed44509f244d80a8160b31c0f33a7572c8a83ea4f324f","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-10-08T07:28:45.808935Z","times_seen":26191,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":1,"connect":8,"send":0,"wait":12,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/28192.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:32.910Z","timestamp":1791349592910,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/28192.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 9881\r\nserver: AmazonS3\r\nlast-modified: Thu, 28 Sep 2023 05:47:46 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\ndate: Wed, 07 Oct 2026 04:45:34 GMT\r\netag: \"738e03afa4b65f63b78c3a6a4c6c332b\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3d622fd2dbfa16c86afe2660e869a6d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: -MmueHNgMdwpL8ZaLPb40ettUlJcjGtt0xDEF5Wt4_JedNvos62y0Q==\r\nage: 1268\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9881,"size_decoded":10434,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"738e03afa4b65f63b78c3a6a4c6c332b","sha1":"d14af15385da03855efe878236d07d41e9c56ec4","sha256":"c533e2f35a8581477eedf7775009aad7aafda3790e17ded722b5598becfad360","sha512":"90507daae190e73834f55c88eb6b0b6fa6a5b10d2debd697a1ff9dafe6edea58089cc5ed92f86815f591882f27b0a1e4386525c596f1845a863364e14df92f66","ssdeep":"192:CkaFRc4itd+dIx3oxLkHxA2vb20MySGZfAAUqMaJgOgcU3wK/SbJK:CLKYSRA2vZIGFU6oyK","tlshash":"0c12bfe201550cf0baf29e83ef94775a097cb65f73179a991360acd208d252e8f6d841","first_seen":"2024-03-11T20:01:53Z","last_seen":"2026-10-07T05:10:01.617046Z","times_seen":169,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.payden-qt.com/upload/files/6a832bde074e.mp4","fqdn":"api.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:33.132Z","timestamp":1791349593132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /upload/files/6a832bde074e.mp4 HTTP/1.1\r\nHost: api.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=786432-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:33 GMT\r\ncontent-type: video/mp4\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 17 Aug 2026 15:42:22 GMT\r\npriority: u=4,i=?0\r\netag: \"6a832bde-30574c3\"\r\nstrict-transport-security: max-age=31536000\r\nage: 4725\r\ncontent-range: bytes 786432-50689218/50689219\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z%2F2BCSaxgymP%2BEjmm8roRbMa6GAk6ORE2PigfckAIY99sYeQyXtMEh6KCiLoyPUeKqDElMu9pC3nxQUgrZgLO5zm5ciZb5obSaFvNQHFDvUZa%2BiX0%2BXeHt9DkaO4CiJTyLPNxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a608d1fada0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49902787\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"video/mp4","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T09:41:01.074506Z","times_seen":18938473,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.payden-qt.com/api/init?rts=1791349590317","fqdn":"api.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:30.319Z","timestamp":1791349590319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /api/init?rts=1791349590317 HTTP/1.1\r\nHost: api.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://aijrpd.payden-qt.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:30 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://aijrpd.payden-qt.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pLZ%2FDcJE1Wlfw6DadmZ%2BJYmI9kDkpf%2BI4ea8JfCmyR3Vl8%2FTWkqmQSTL7L1YYRaZn0eMyCZT%2FuoZ%2BzdKuehsNimhGAT4QAY2iB5vwnsDcN%2BgP9jWLAmnIArKbzFfH1rjLQ0XUQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a46a607b8af0a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42539,"size_decoded":33038,"mime_type":"application/json","magic":"ASCII text, with very long lines (42539), with no line terminators","md5":"e2fec0d99d67ce58258d421975b2d574","sha1":"ee35ed48f4df509c128584d14d402106ead24097","sha256":"a8f42a1050a229c5db283cad78d89a16004a7394614f72ad0158acfb4cec47b7","sha512":"a56d98924e99a2af5a1a3b0bae512c23b14b89c37abdaa93771d000229d3b79d1f6d57a8d7622a93b08c60e269a0e28ae411766603b96a53cd0e2244e5db2ebd","ssdeep":"768:/bzVZdqRnev1AD+N/4Y31bI76r1GK95Kr/B5xlzBSY9dDbesuz3sRCMaFBK:/lZdqRneSu/FUWr8kKrTxdlDDUcR5ai","tlshash":"7d13f26dc96adb5403ba432be40fa63d2926ff2f088763f264b864410f2937547172e5","first_seen":"2026-10-07T05:10:01.639552Z","last_seen":"2026-10-07T05:10:01.639552Z","times_seen":1,"resource_available":true,"data":null}},"time_used":574,"timings":{"blocked":7,"dns":6,"connect":0,"send":0,"wait":296,"receive":265,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/yS21SIz21EB3733qgv.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.359Z","timestamp":1791349591359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/yS21SIz21EB3733qgv.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 11:58:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ry%2BzU57RNhkKwdf2kYHfsBZmHDsU3bJ9CNKgZNCWTPhMDUwbZVqcGRLdJh4eSBazWji6UPtRQu1C8%2FsNo%2FLq9jyhZEltkee2Dk1iSjdlqe5YrMwtXz27jOpemRw%2BMzKhG%2BmTX68ufg%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e1-3f5b4\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a6081fc76a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":259508,"size_decoded":87280,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0228e59b05ec9b2da9e1c0bc5bace41d","sha1":"be999c80cbf5796caf46a5561a0204708b7d4475","sha256":"67214b3da80b306d3f05d21e05f2bf582cee6600cae3a62c143c8234f0173723","sha512":"ca2bd14b5b88315b552c80c7bca683ba11aa9c38b0765f49f8abdeb7a48de6ff937804f8389da84662adf9cbd01e4760f77d87fdd6f0f56aa6d0559f85437bbf","ssdeep":"3072:jI27UnZY5kWoH6J+2JfnSId3BoqTz0Fe4aOeHVSlO3G5H:X7Unm5AH6J+2JfndU5","tlshash":"ca443b51740beb3ee5a3588d68491800340d4feed41d9966f2fcb626afc6cb0573e7a8","first_seen":"2026-10-07T03:48:35.266455Z","last_seen":"2026-10-07T05:10:01.653522Z","times_seen":2,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/4din0su8LvC30vcYRw.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.401Z","timestamp":1791349591401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/4din0su8LvC30vcYRw.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kA2X9gpZgX%2F3mmOiA8ycK9PC85UKnSdaXmGcSyZlwJSF883pv1SWHgjIYZhh5eZXUWlNAw9PWyo4z261DurZrx8Eu6aTld2EQfqPu%2FcuGPy0muQwJtxFXLx1F8Cn7nhPfDOMCixffQ%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e0-143a\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60824c9ba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5178,"size_decoded":3187,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2662)","md5":"5d8cd460f154e7780511a827708f6625","sha1":"dd301685641042677d56534a23a7b6f33c69dbae","sha256":"5b86cbe3e5c420fae2d72ab03030d902a3079c1daff4a4663760b3dfce5aaef0","sha512":"f9f082c738bca70265b2c68d6b517f7a77a3755c0d22ea9f696062cc8ce1c6dd8069c20bd911b89017550009c8aad83e9e28d95cbbe39b634204b60b6766c897","ssdeep":"96:ICZYdueUmWN3e128xnm+kRXN3WCtkRryDCSi17uiHTdJs4WsByHrxnTsuqAIlDD:RCdubN3eFxm+kR93WCtkRryDCV17PzHh","tlshash":"63b1e7e5b680b83bc378b5c990e001e05331a7d8313ac6edb09f1e4b3618ce5656e90a","first_seen":"2026-10-07T03:48:35.277093Z","last_seen":"2026-10-07T05:10:01.699506Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/74.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:32.905Z","timestamp":1791349592905,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/74.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 4251\r\nlast-modified: Tue, 19 Oct 2021 05:36:06 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 07 Oct 2026 01:09:43 GMT\r\ncache-control: max-age=86400\r\netag: \"ae64499c8825452f6262177ee6dd525b\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3d622fd2dbfa16c86afe2660e869a6d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: ofKp8-lEVKW0iJsWMDZL9e41s3DxdBktK3NgeA9gckStWnHGX__xgA==\r\nage: 14210\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":4251,"size_decoded":4797,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"ae64499c8825452f6262177ee6dd525b","sha1":"92a35e0817cefb5befbb18422fb4c9d220f6754c","sha256":"47fb417f6b72c4edc08dfb90a376b2c88b3b51992bf3c83dd14e011edba2f339","sha512":"1a776374f3c20d16bf0c84dbb28a6ca3d0a110ca928aa87f56d79d09b898091b84f4d3ea164a6c79db0c9fedeb66167bd83b854267c2870394f70dc536117441","ssdeep":"96:IqQDUBKTuBVrN2Dc4tR/HAwaHEIkVZdBrc2nPatF:IL4cTIB8c4n/HbIegdF","tlshash":"00918ede37594349986e152b32ca7f282c32b7db00753e35ad4946c327b4063e5d6714","first_seen":"2023-05-04T14:40:12Z","last_seen":"2026-10-08T07:28:45.636654Z","times_seen":15601,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/5805.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:32.911Z","timestamp":1791349592911,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/5805.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 685\r\nserver: AmazonS3\r\nlast-modified: Wed, 27 Apr 2022 07:39:01 GMT\r\naccept-ranges: bytes\r\ndate: Tue, 06 Oct 2026 05:28:39 GMT\r\netag: \"b9913f5599faab08d2addf87011c61e0\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3d622fd2dbfa16c86afe2660e869a6d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: RRoc_kDCTNLgtK1pvW8QyCxZxlChCcpfjqrrvEqcXvLX2yMYXRXaSw==\r\nage: 85083\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":685,"size_decoded":1200,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b9913f5599faab08d2addf87011c61e0","sha1":"d9ae6e6a8ca0e50e02a991d032d9b9a461079f95","sha256":"68ba1605b3a54d7f827c22cc7252f01c6bf9412cfa6573be2c91fcd4b9e908cd","sha512":"7baea45f411fc30232bd93d04b8cf34414d333096ec669558ee6dd4a4a725785786f488b387e6c38654ba4fd3aecfda5526de2d949851796582c75214a42150f","ssdeep":"","tlshash":"8d01d8fb0957c025408f01f8224f7372d160c4eec9c7e20d89d9f7301862ad24c4524d","first_seen":"2023-05-15T13:26:32Z","last_seen":"2026-10-08T07:28:45.609033Z","times_seen":2248,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/8Z8ZbOFoWrC-Th3cbc.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:30.080Z","timestamp":1791349590080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/8Z8ZbOFoWrC-Th3cbc.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b0DKwlnI%2Flvty6NRBCe5R5tVkmfXwCmPimH8ch3jWOBVg1mqBUFgWeFQ9Cx9K26rv%2FTtcHW%2FzVSI2xyhEKuKZU4s0bp40RnpoUIy9lPileHHgadhkKOLMsvxbwciipulrtszfrU3DA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e0-193b88\"\r\nexpires: Wed, 07 Oct 2026 15:47:43 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4726\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a607a0a8ca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1653640,"size_decoded":278584,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6914)","md5":"81fa05f2fbda24f2ca7e2dfd778ea153","sha1":"592a79619d9be55f17adf881c1859658e7689179","sha256":"371021855946370eb2d0a90bd8809e4e22708a2094845aada4afa9111373306b","sha512":"4699639340f9dae79e41e9510fd3652de0688262a6eb02a8b97f9e2c5d2166e58ff9206e6e6bfdb50b0ca17a7a2ffe5838cdf9736253712a11326bb3378d4c20","ssdeep":"6144:AvPpLfKko88EIlFYKh4Dybv5IaWGy4pyMo2a:AvPpLdkEaFYKhRvk4pVo2a","tlshash":"842509281a6bf744e418c0dbfa373d84c59dd18aa44724d24f755bb31ba2793eaacd03","first_seen":"2026-10-07T03:48:35.292525Z","last_seen":"2026-10-07T05:10:01.795274Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/NLtX3pkfvmCgbaCrTc.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.427Z","timestamp":1791349591427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/NLtX3pkfvmCgbaCrTc.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JgOwQ1G%2BysZasv3b%2BZgtZKHchIfgz0qIl2XiymMW4ArJaE0Z8PTIhK2WM7QAFW92F9xcnO5%2FgheqchmF4MTDjxk2PjWK5Ch5qOeYYTm8KksktzRczqDBQw6p%2BG35dSsHYwwiGIg6Zg%3D%3D\"}]}\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6a8448e0-2c3\"\r\nage: 4725\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46a60826cb0a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":707,"size_decoded":1260,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (706)","md5":"81b9693cfedf4011edd84a8806f88033","sha1":"7f8a216a7024c46c19a4d687c170d555d2998084","sha256":"83dcff0b80d0f30f7f3e6d9d57dc1c86b4eb4a95c61737deb5dd7ad93bc9408a","sha512":"af0f492edac8ae9d56849b093054583d763581ec2d4525cd460664ebd8beaad4afe56b660abd2cc55637eae1220dc98b164a003d979583dcae87e52d8084dfec","ssdeep":"","tlshash":"dd014eafbc9eeeb8606348b14486186a310a8f3dba7989c0f2b25f3015d2800d01bb4d","first_seen":"2026-10-07T03:48:35.294882Z","last_seen":"2026-10-07T05:10:01.814432Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/assets/F9PjXi4BIZDN-in7Ac.css","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.438Z","timestamp":1791349591438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /assets/F9PjXi4BIZDN-in7Ac.css HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dDjZ8B7M8HpLG%2Bi%2BOU3iFFttJZUMjV82EpGmEU5jxIfC0By9urU0qsKaoizAR%2BmvL9KNTvWLV4hkpZ6JyAb0OQ3PyhSDiEBr6s081YYdJJYZj3KZBjC9aXvArtuIZcGl6bZJWXiGyg%3D%3D\"}]}\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6a8448e0-ca\"\r\nage: 4725\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46a60827cb7a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202,"size_decoded":871,"mime_type":"text/css","magic":"ASCII text","md5":"9cd0259b2ea1270774b0bd885f3d6a59","sha1":"2bd73d35751da067cec030ba8558d8e1e0e08bce","sha256":"123bec169a48a47aaeb0595c6cca642ddbcbf14d78104b15cb8e836a746ab3f0","sha512":"77b2837f18040e9f7b1e3b229243a4863dab9406b64795e9227631334fe7088a19830d6dbbc9867efe8cad2251a8fc9ed6616a9f459ecbf02e5ce66a5516a26f","ssdeep":"","tlshash":"00d0224c2c40f07e29c431a80f0842dc08992204ff035fa43124bc3100ca6f62037c2f","first_seen":"2025-04-17T13:49:08.709612Z","last_seen":"2026-10-07T05:10:01.891119Z","times_seen":140,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.payden-qt.com/upload/img/6a8314fa9fda.webp","fqdn":"api.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:32.884Z","timestamp":1791349592884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /upload/img/6a8314fa9fda.webp HTTP/1.1\r\nHost: api.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 17 Aug 2026 14:04:42 GMT\r\npriority: u=5,i\r\netag: \"6a8314fa-46156\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 4725\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hQ2E%2FSUjB0enlstK1%2FpXedB5lRjSJNfOCqNiod%2FUD6i6vm3pgewxCzyummCHuf%2BFe3wwczpgWyeZ53PlDG2sENk2BrRC1IV2mVr5HN3dm0BZsp5q19im3w64GQJ7fpmclYksuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a608b8f1aa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 287062\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":287062,"size_decoded":287817,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x624, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9aca764e7cbbd76085c1b86bd50d03f4","sha1":"ff605d5a28f5023601bcc771521be6278c08bf4e","sha256":"2744de5a38301d13040e0538bef5bba8ba2f70988004d84135b0dc4c1fc3ab25","sha512":"f25b0c7c8398653dc134b1e4d799d7ef16ecf25ff382fe765f0eed710091950d5e81944d0864cc06b305786ea2f41856d6df9726673dfcb99433c7cf8f9506da","ssdeep":"6144:+shc5xSnwnzyrMhZFuquNOcTWBHAMtvVf1l5hkfJiIZjUj5:+0xn8zVFNuNOJNfV1l50J9QF","tlshash":"d35423240d9f0337a218ad65947f79aa9c704872369a57a237ba3b63f23d640d1cd336","first_seen":"2026-10-07T03:48:35.265369Z","last_seen":"2026-10-07T05:10:01.921761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/2010.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:32.901Z","timestamp":1791349592901,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/2010.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 854\r\nlast-modified: Wed, 30 Jul 2025 12:26:03 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 06 Oct 2026 05:15:20 GMT\r\ncache-control: public, max-age=86400\r\netag: \"8a5e9b87a7c053bb9d65cd8bcbc4b171\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3d622fd2dbfa16c86afe2660e869a6d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: cJ8xKQqlJS5tftmp0lGIc1KzZjHUSzMtoe8yrC84aFfOnizQQwPUKw==\r\nage: 85873\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":854,"size_decoded":1445,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"8a5e9b87a7c053bb9d65cd8bcbc4b171","sha1":"2168aa11330c0401cfc5e0974b7ca94093c9d48b","sha256":"0b1d6af59fc52f5e8f88909ae09fdd4ee303dbcd00004c210b8e375759893cb4","sha512":"47a77cb24f98b7862798354660849992762cf9b9df17cdd872793f36467addba4fa78b7751c167297120010aa62e36fcf2b27c5d46f1fdc2270ae62665872e86","ssdeep":"","tlshash":"af011a7a5f05106ffe733a7083576661d745826711081e4880b3907c36b9c405d4bd03","first_seen":"2025-08-01T01:41:04.546261Z","last_seen":"2026-10-08T07:28:45.810636Z","times_seen":2112,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/2.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:32.908Z","timestamp":1791349592908,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/2.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 2456\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nlast-modified: Tue, 19 Oct 2021 05:33:54 GMT\r\ndate: Tue, 06 Oct 2026 05:23:15 GMT\r\ncache-control: max-age=86400\r\netag: \"bdaeb947a2eb31bae0a170559df9013c\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3d622fd2dbfa16c86afe2660e869a6d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: aZcOmvUxdtijOrdiyP6IJQxDTKc47DwMF2pYYQFCDdAkqeVOL94m1A==\r\nage: 85398\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2456,"size_decoded":3002,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"bdaeb947a2eb31bae0a170559df9013c","sha1":"7fc8496c9bf51eea98dc9060262f87a792a24a43","sha256":"3225172adc122cc7f8f09fbcc94757061330651a485f17091f41726767f7ea3f","sha512":"710a1ac11f6fdb3915479bf6b9eccf34f4dedd8f30e6bed5275f52d1ec634a754b252e385eb9cd388a5a69c64aaf5818c13cb783090ae68a8696af067cb67341","ssdeep":"","tlshash":"9e512b90d3f3d98a7d930935f8b27a34cfda87da97098523ea834854e279442cd24943","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-10-08T07:28:45.697917Z","times_seen":20193,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/1958.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"143.204.238.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:32.909Z","timestamp":1791349592909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/1958.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1866\r\nlast-modified: Tue, 25 Aug 2026 06:02:00 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 07 Oct 2026 04:48:09 GMT\r\ncache-control: public, max-age=86400\r\netag: \"26f29f04984e1deaa6f8b1702c47218d\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3d622fd2dbfa16c86afe2660e869a6d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Lq9n5UtI8lkN5_XocTb08RJ4uB5HKZbWEpmWS-tZq5StffTuyj_Wrw==\r\nage: 1104\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1866,"size_decoded":2457,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"26f29f04984e1deaa6f8b1702c47218d","sha1":"0ac5c63ed7590fb17fd6163e505e7864df95eca7","sha256":"61cde24fe9b034f4f2f7eecb335ffaccf3c55fe607921d70f8419d751bf70972","sha512":"8c1de99e4bfb47d429d63c1a825a3f85bd5955048cb0bc7b97854e050aba2daad86dc0225e359004d7a443738e58a86ba6d997310deb7c770e9576db72d6061e","ssdeep":"","tlshash":"a4313b53bfb65ee0c6a25b55c1d10a60e4f2e675a0054d7b540114af83919c347f96f0","first_seen":"2026-08-25T10:23:09.964458Z","last_seen":"2026-10-08T07:28:45.754756Z","times_seen":255,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/iJIHVhRnpuXMT5I-ig.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.379Z","timestamp":1791349591379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/iJIHVhRnpuXMT5I-ig.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x3HFVWIr9uxp2WUjf2eksgyGG9OgjWrX0KlQdJDou1X%2FN0Z3bqFU7%2FfUJ26ncRn%2BbON%2F2%2BnlkKHS5%2Bo86jxsYJS2WK04gbfW82qxjShF2x8cZzwcgIYZxsLHCmDlId9JQKji7rH%2FkA%3D%3D\"}]}\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6a8448e0-a5\"\r\nage: 4725\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a46a60821c8aa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165,"size_decoded":896,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"11b50df28415b516abd431ce92bdb0c7","sha1":"30d75f7318c7eea58cbafbf13a22e65f19b06333","sha256":"3c54802e749db7c464f340ea129d2bae9470d71431ca3c8c44db68e97436a804","sha512":"4102f3868c38aaa62f869403369e12dc900e2a50716bebb74335be4f352cc29d24e79adeb58054b233a46b0ca5ec153317a0d1b02a050533e59f282c74bdd8d6","ssdeep":"","tlshash":"1fc08c8ba04382a0622b0c8801164dc32a350ea91366dec080465ea84a314a8ca4ae2d","first_seen":"2026-10-07T03:48:35.237715Z","last_seen":"2026-10-07T05:10:02.065412Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/assets/0ch3NofijgB8brp-BE.css","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.382Z","timestamp":1791349591382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /assets/0ch3NofijgB8brp-BE.css HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fSPJDPNRzbxq1WRICk5ekY5SIhj9iuPz0aI46aar7gEHR5yNhxSiGBnPFFo6pxsoU6Pyquka1RlXv8MUR4SwtfkX4r%2B4JILgR6q%2BRqgpenMORTjm9tpLTHkSklpjYn3DtPYD8B44zA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e0-c9b\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60822c8ba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3227,"size_decoded":1731,"mime_type":"text/css","magic":"ASCII text, with very long lines (3226)","md5":"70e54f12d62d1315ffd14b024d382b54","sha1":"b0b0394eb58490a978161a192e0775d6a6760a76","sha256":"17c074f0564fc5eafe44d8111ba1ac4c85b99103d728c19c2fe486a11dfc92c6","sha512":"11312280a667403bb1ae15e2ca81b5cebe042ad198c4ec5504e960a42aa6e69f64e9e4d3d94d72c7129a784cf1a8d1c56b504a91ed8a4a3569018f5daf8d5171","ssdeep":"","tlshash":"0f61aa36a370a17b9f02f67dbb5a6adcf128e7714d01b3a5b281201888c7bfc1532917","first_seen":"2025-04-17T13:49:08.756011Z","last_seen":"2026-10-07T05:10:02.087353Z","times_seen":105,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aijrpd.payden-qt.com/js/PjsLId8OzFCP1ERReT.js","fqdn":"aijrpd.payden-qt.com","domain":"payden-qt.com","tld":"com"},"ip":{"addr":"172.67.202.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aijrpd.payden-qt.com/","date":"2026-10-07T05:06:31.394Z","timestamp":1791349591394,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payden-qt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:41:42 GMT","end":"Sun, 15 Nov 2026 11:40:17 GMT"},"fingerprint":{"sha1":"B7:09:40:97:66:08:3F:DB:3E:CF:05:89:53:87:C3:52:A5:04:43:4C","sha256":"43:18:5E:7D:B5:5F:5C:18:38:43:F0:50:5B:9C:07:7C:08:61:CF:B2:11:88:1E:10:BA:CC:C4:50:95:9D:DA:9E"}}},"request":{"raw":"GET /js/PjsLId8OzFCP1ERReT.js HTTP/1.1\r\nHost: aijrpd.payden-qt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aijrpd.payden-qt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:06:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 11:58:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CkK439eNfvHAGBPELa3B0c80rG3mx9e9I8GoSZKDHJrJAGye%2Ffyt1Eig6RObjEU6kxSJWcH2w7UCOr%2BzmzzehE0loriebBUyj0H%2BO%2BUGWK0FjsSmtXCt1BPPuNMwaqrhhWq2CVp7YQ%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a8448e0-d2e\"\r\nexpires: Wed, 07 Oct 2026 15:47:45 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46a60823c96a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3374,"size_decoded":2315,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3373)","md5":"0e7e6bd7a79dd1b932c284a37e4fc356","sha1":"a153be7dac22d129ae827dba3857ba39e9ac3de3","sha256":"0d74b2abd4340de5860a8414ba9282eb7be3d48a3c8136ceea33cc86a6ba317b","sha512":"2cb8d853cee5b8e4088fcf472fc1a9b6c08d34df7424cf2b77e40a6535d6e8158e4100ca9480c36a591ff06fdf4114cc84ed2d10c08f3dad6c9e65252bf634bc","ssdeep":"","tlshash":"9d61c859ff88a13993f1a1b514d14ca031372f015896e5eae2571c48ab3aa90b5cfc67","first_seen":"2026-10-07T03:48:35.320162Z","last_seen":"2026-10-07T05:10:02.109857Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"aijrpd.payden-qt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}