1498
When this button is clicked , the ransomware queries the http://btc.blockr.io/ site to see if a payment has been made to the assigned bitcoin address .
 ransom: a payment has been made
Please tell me event type and its trigger word from given type options. Output format is "type: trigger".  Option: phishing, data breach, ransom, discover vulnerability, patch vulnerability 
Text: {0} 
Answer:
 ransom: a payment has been made