{"report_id":"056de0ed-c952-4299-ac9b-730cd9de4036","version":0,"status":"done","tags":[],"date":"2026-09-07T19:08:44Z","url":{"schema":"http","addr":"tron2pay.world/","fqdn":"tron2pay.world","domain":"tron2pay.world","tld":"world"},"ip":{"addr":"195.54.174.136","port":0,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"tron2pay.world/","fqdn":"tron2pay.world","domain":"tron2pay.world","tld":"world"},"title":"Lower Saxony wetlands guidebook | tron2pay","dom":{"size":21017,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (822)","md5":"d054af97bb5fa5b26f5d7743ea4c6844","sha1":"2b4087ee2a809866645603ffc748235551280ccf","sha256":"526b981dc8ef7f90ae40e29b280ec18cdc5a90224c7a19a861a6c28a318c4e7e","sha512":"d0c66fd2c8b3bc979f4278dc211b71eed80309a9865a14c66b2bdbdbbff0fd9724db06c736a8a3534625354a213c5567a2b8232adfa0be683acd9899f610a2c8","ssdeep":"384:hRqNkCu/EsBrBaxeRCFREK6HUTm65rTlPrzU2BeDE/:WeAFREK4mJrTlPXUoIE/","tlshash":"d192a57261f1022f51a746b5a208b76acea6c62bc6178576b3ed43c21f8bc93c763345","dom_hash":"domhashc52a543837de4a7e79681679f77d994e","first_seen":"2026-09-07T19:07:21.83873Z","last_seen":"2026-09-07T19:08:45.748789Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tron2pay.world/","fqdn":"tron2pay.world","domain":"tron2pay.world","tld":"world"},"ip":{"addr":"195.54.174.136","port":0,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-12T19:08:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"tron2pay.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"tron2pay.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"tron2pay.world","ip":{"addr":"195.54.174.136","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-07T19:07:17.320662Z","last_seen":"2026-09-07T19:07:17.320662Z","alert_count":12,"request_count":6,"received_data":481853,"sent_data":2911,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":12869,"sent_data":584,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":4,"received_data":101340,"sent_data":2303,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tron2pay.world/build/bundle.js","fqdn":"tron2pay.world","domain":"tron2pay.world","tld":"world"},"ip":{"addr":"195.54.174.136","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"de3d217406963e19331cda6445350ed5","sha1":"eac82a50e3ebeadb4817aed3350b090ddc617d87","sha256":"9344615c7674306b30895beba7a4d678b9d83563beac6a4158ccd7577377f0ae","sha512":"86b99ed6f0a7b43e2ee79f2ff11b4b44fd5251ad85304d24e84d636d9a7edd18b5e3564b6a6203eb6e55cd0f67b97788478683d6f1ab8c43a4178c6882294daa","ssdeep":"","tlshash":"a951a07fa9042a72d4bb73bd974fa758fab220235542c6113e8cc9001f7886955a6fcc","size":3120,"data":"","first_seen":"2026-09-07T19:07:21.887758Z","last_seen":"2026-09-07T19:08:45.755117Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesans3/v19/nwpStKy2OAdR1K-IwhWudF-R3w8aZejZ5HZV8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tron2pay.world/","date":"2026-09-07T19:08:16.051Z","timestamp":1788808096051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/sourcesans3/v19/nwpStKy2OAdR1K-IwhWudF-R3w8aZejZ5HZV8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tron2pay.world\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28768\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 08:25:25 GMT\r\nexpires: Sat, 04 Sep 2027 08:25:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:09 GMT\r\ncontent-type: font/woff2\r\nage: 297771\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28768,"size_decoded":29581,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28768, version 1.0","md5":"d0557afb3f0c7a3864f0e3f412bcd8ed","sha1":"b358d67d067e4cd71a3a6e51245fef72cb063c95","sha256":"4ac9b88dc5104c7450eb73bfd416a63dbe4bf6b6acac44b8c953e3567dc4a663","sha512":"596b009234f0f4df076f8f251485b06f7cdb3f0e7458ecb141229f2b3723873c68536d24a5123d55836cc458599da5e0057ce81542400eaede3efdefea4f1bac","ssdeep":"768:kFFnSMWY1gDAuZ0LqnutgJ6keQtlIXoj/fajyA:gnSXqgDARLqb6XQtqXojE","tlshash":"fdd2f2e40b2176e5fbc68c747331715edc714a38c3ef956b125e1ae4202a800b77be84","first_seen":"2025-03-11T05:38:45.137969Z","last_seen":"2026-09-08T19:33:25.599943Z","times_seen":8646,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":18,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesans3/v19/nwpDtKy2OAdR1K-IwhWudF-R3woAa8opPOrG97lwqLlOxCkSmg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tron2pay.world/","date":"2026-09-07T19:08:16.054Z","timestamp":1788808096054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/sourcesans3/v19/nwpDtKy2OAdR1K-IwhWudF-R3woAa8opPOrG97lwqLlOxCkSmg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tron2pay.world\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15808\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:33:44 GMT\r\nexpires: Thu, 02 Sep 2027 10:33:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 462872\r\nlast-modified: Thu, 04 Sep 2025 17:08:33 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15808,"size_decoded":16621,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15808, version 1.0","md5":"410bdda67c602055dde8ccafa6a72172","sha1":"8155c8de0815774b37a6e713ba7e7113d259752f","sha256":"3c230c03425a2866e4b57954f3173fc149dba2634e9ee32c681b41d96c7f06fe","sha512":"4dcbf35d061ab31cb82e78dfdf10d3e937110ebe9314b9c552c3436b8427e36f664c48f9cae6271084269a3a46ed55f04057d51ebd2e4b20760c231d75abfd77","ssdeep":"384:hH7Aj+Z8gAPI+4L5bBHK7iAZneJzUVF0JCNo:Jsj+Kg+4L5bBKedE3o","tlshash":"fb62c0e7f3cea5b604f488739054157f168ca7742685d82180285fbd0aac93eb94ed7e","first_seen":"2025-03-19T12:09:03.434898Z","last_seen":"2026-09-07T19:08:45.750465Z","times_seen":419,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":36,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tron2pay.world/favicon.ico","fqdn":"tron2pay.world","domain":"tron2pay.world","tld":"world"},"ip":{"addr":"195.54.174.136","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tron2pay.world/","date":"2026-09-07T19:08:16.160Z","timestamp":1788808096160,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tron2pay.world","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 16:36:37 GMT","end":"Tue, 01 Dec 2026 16:36:36 GMT"},"fingerprint":{"sha1":"CF:31:93:B1:FF:B0:38:BE:49:50:29:95:9E:EE:31:F7:4D:D6:CE:BA","sha256":"79:BE:44:7B:CE:F7:11:FC:50:86:33:8B:DE:AE:0D:E7:72:BA:2D:0B:2E:4C:6E:E3:42:2D:03:27:59:43:E0:DA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: tron2pay.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tron2pay.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 07 Sep 2026 19:08:16 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 766\r\nConnection: keep-alive\r\nLast-Modified: Sun, 30 Aug 2026 12:46:38 GMT\r\nETag: \"2fe-65a4313936780\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":766,"size_decoded":1017,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 32x32, 16 colors","md5":"7c2705a87c111d9db7f46d90180c43fa","sha1":"186349dbd68e45f902c16ffce7cd449964ae2587","sha256":"9ea334dc6443f2044769fefa0138de108a68252ad536d30a5968a43fa8b27aa1","sha512":"b99845973e8536d0a32985121390533d511b0d3390f71651c1948b2ce87a5fcc161276d80f26d410b036665e82ca897264f4f3ac4cba0a406db6527d926bc009","ssdeep":"","tlshash":"fc014883231560d5fc030b308807bfb8aa226c029b30243362b09c2e2db0300ec03798","first_seen":"2026-09-07T19:07:21.866185Z","last_seen":"2026-09-07T19:08:45.751146Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"tron2pay.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"tron2pay.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tron2pay.world/build/screen.css","fqdn":"tron2pay.world","domain":"tron2pay.world","tld":"world"},"ip":{"addr":"195.54.174.136","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tron2pay.world/","date":"2026-09-07T19:08:15.905Z","timestamp":1788808095905,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tron2pay.world","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 16:36:37 GMT","end":"Tue, 01 Dec 2026 16:36:36 GMT"},"fingerprint":{"sha1":"CF:31:93:B1:FF:B0:38:BE:49:50:29:95:9E:EE:31:F7:4D:D6:CE:BA","sha256":"79:BE:44:7B:CE:F7:11:FC:50:86:33:8B:DE:AE:0D:E7:72:BA:2D:0B:2E:4C:6E:E3:42:2D:03:27:59:43:E0:DA"}}},"request":{"raw":"GET /build/screen.css HTTP/1.1\r\nHost: tron2pay.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tron2pay.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 07 Sep 2026 19:08:15 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sun, 30 Aug 2026 12:38:54 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a94245e-23b5\"\r\nExpires: Tue, 08 Sep 2026 19:08:15 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9141,"size_decoded":3175,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (794)","md5":"ab27e551c9575a262f22a8bd834e95ab","sha1":"c3242d8f0ba488987e3ac184723f93e4ef0bdbd4","sha256":"9cc8187ea637b9d6671e6a0ea6d64bed0a508f59be48af94207165e121c0f53d","sha512":"e544504851fe67a652e1db8220c8e68d88321a78afe7d621892a9dbc9baa40aac4a75c99f9dbe96b22bc42769254641a707770c7cc7b3f6f2af64da42deb661a","ssdeep":"96:n9S8vFMLGIunGnkn3nGjNeYVcHjuiNWb4iS0sSEER6EKTwEzFbWOcNjZnaUdUIKh:97m6IRZeYIju/pSSEkBjZnM5DUxpE","tlshash":"0d1297ab2b17310db06b8576d0e1bf8c9137d506cf0347edfa3366119e9218b2e22768","first_seen":"2026-09-07T19:07:21.871083Z","last_seen":"2026-09-07T19:08:45.751939Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"tron2pay.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"tron2pay.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tron2pay.world/media/hero_boardwalk.jpg","fqdn":"tron2pay.world","domain":"tron2pay.world","tld":"world"},"ip":{"addr":"195.54.174.136","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tron2pay.world/","date":"2026-09-07T19:08:15.912Z","timestamp":1788808095912,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tron2pay.world","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 16:36:37 GMT","end":"Tue, 01 Dec 2026 16:36:36 GMT"},"fingerprint":{"sha1":"CF:31:93:B1:FF:B0:38:BE:49:50:29:95:9E:EE:31:F7:4D:D6:CE:BA","sha256":"79:BE:44:7B:CE:F7:11:FC:50:86:33:8B:DE:AE:0D:E7:72:BA:2D:0B:2E:4C:6E:E3:42:2D:03:27:59:43:E0:DA"}}},"request":{"raw":"GET /media/hero_boardwalk.jpg HTTP/1.1\r\nHost: tron2pay.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tron2pay.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 07 Sep 2026 19:08:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 183420\r\nLast-Modified: Sun, 30 Aug 2026 12:46:38 GMT\r\nConnection: keep-alive\r\nETag: \"6a94262e-2cc7c\"\r\nExpires: Tue, 08 Sep 2026 19:08:16 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":183420,"size_decoded":183727,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 1536x1024, components 3","md5":"b5cdacbb8fe48d7516f0c6d4950690eb","sha1":"4d3a4c1f100dd421f8fd7d2f9d9dbe513dc5d507","sha256":"f834b17e5631515b13b38e8f2374df3ed960eced6ab5f99c1d77a7a65c91660d","sha512":"7856c8e1de7f723da5b0b297d43cc41b8765ade3a43e4b9ee96a43d25329a4ec617929c4775a37f7fe65b7cbd555d72022750015929493ae12e1d383d7e1f345","ssdeep":"3072:bJB0i7WejsiikGj6B69S5AZCDuSp14pkOMdSK285dCrhmk1E+xOG:bBWJ6B678H8Gs85Of1E+xOG","tlshash":"ce0412a322aa5725f11a35fff1fa64d4459bcca01e47029d4ab0d773875c039babd232","first_seen":"2026-09-07T19:07:21.854155Z","last_seen":"2026-09-07T19:08:45.752756Z","times_seen":2,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":62,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"tron2pay.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"tron2pay.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesans3/v19/nwpStKy2OAdR1K-IwhWudF-R3w8aZejZ5HZV8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tron2pay.world/","date":"2026-09-07T19:08:16.052Z","timestamp":1788808096052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/sourcesans3/v19/nwpStKy2OAdR1K-IwhWudF-R3w8aZejZ5HZV8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tron2pay.world\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28768\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 08:25:25 GMT\r\nexpires: Sat, 04 Sep 2027 08:25:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:09 GMT\r\ncontent-type: font/woff2\r\nage: 297771\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28768,"size_decoded":29581,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28768, version 1.0","md5":"d0557afb3f0c7a3864f0e3f412bcd8ed","sha1":"b358d67d067e4cd71a3a6e51245fef72cb063c95","sha256":"4ac9b88dc5104c7450eb73bfd416a63dbe4bf6b6acac44b8c953e3567dc4a663","sha512":"596b009234f0f4df076f8f251485b06f7cdb3f0e7458ecb141229f2b3723873c68536d24a5123d55836cc458599da5e0057ce81542400eaede3efdefea4f1bac","ssdeep":"768:kFFnSMWY1gDAuZ0LqnutgJ6keQtlIXoj/fajyA:gnSXqgDARLqb6XQtqXojE","tlshash":"fdd2f2e40b2176e5fbc68c747331715edc714a38c3ef956b125e1ae4202a800b77be84","first_seen":"2025-03-11T05:38:45.137969Z","last_seen":"2026-09-08T19:33:25.599943Z","times_seen":8646,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":31,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tron2pay.world/","fqdn":"tron2pay.world","domain":"tron2pay.world","tld":"world"},"ip":{"addr":"195.54.174.136","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-07T19:08:15.230Z","timestamp":1788808095230,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tron2pay.world","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 16:36:37 GMT","end":"Tue, 01 Dec 2026 16:36:36 GMT"},"fingerprint":{"sha1":"CF:31:93:B1:FF:B0:38:BE:49:50:29:95:9E:EE:31:F7:4D:D6:CE:BA","sha256":"79:BE:44:7B:CE:F7:11:FC:50:86:33:8B:DE:AE:0D:E7:72:BA:2D:0B:2E:4C:6E:E3:42:2D:03:27:59:43:E0:DA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tron2pay.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 07 Sep 2026 19:08:15 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 5451\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21258,"size_decoded":5655,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (822), with CRLF line terminators","md5":"da63c64cdaa0409badc218ca8366e3a0","sha1":"e7775cafe92b0db213bb91a2807ca936e4913936","sha256":"96a3645adf6192f32b2a7b690b4fc10da571c332d6c639cf5f90da4f701785f1","sha512":"2ece563f33f050acb3a47e37be5596ef2ae579615f5a511bc2a78942c06de8beb2e419fa5a9de46d1d65df534d7e7c784f76d7b6bea633f9954b6edd64532101","ssdeep":"192:ZmAAQyXl9x0jkhCyV8Z6T6PdlL6lmmqTTK7489/Y50bpPEGnOU2l6mMg+WoqeoG8:0myJRhCyV8Z6WTymle0sOysiJ2eg6L8","tlshash":"dca2863171c0122f517746b9a604b7a9ea95c62bc217d976b3fe23c31feac56c763280","first_seen":"2026-09-07T19:07:21.884682Z","last_seen":"2026-09-07T19:08:45.753542Z","times_seen":2,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":77,"connect":31,"send":0,"wait":179,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"tron2pay.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"tron2pay.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Serif+Display:ital@0;1\u0026family=Source+Sans+3:ital,wght@0,400;0,600;0,700;1,400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tron2pay.world/","date":"2026-09-07T19:08:15.902Z","timestamp":1788808095902,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=DM+Serif+Display:ital@0;1\u0026family=Source+Sans+3:ital,wght@0,400;0,600;0,700;1,400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tron2pay.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 07 Sep 2026 19:08:15 GMT\r\ndate: Mon, 07 Sep 2026 19:08:15 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12185,"size_decoded":1603,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4dbec5d65f103c163bfd06baa4286bf1","sha1":"b9d28afc5899b1624e6af73a7b86f282b6cdb799","sha256":"75925b6f4a0728c6e6b5ae786433339d14e37804d434079ec1fefa27d626f0a3","sha512":"312fed9b7bd369615e79abffca2de20d35b755b8577edf99dc8c05da591a642806db8103e4d108864e0636bf8fd831e5e875b60a74ae39015d3b77454240897f","ssdeep":"192:KODpO3/nyO0YO7OFOM37OcOL2Otogy/M3JIN+IoqIRM33yN0PoZPiM3QhNbV:KsZJYqsx7LpNG9UUv2","tlshash":"8a42bfe1445b9444ab831cc267cf7e35ad5e6111b085c27ddffe288ceceac2a5291b1e","first_seen":"2026-09-07T19:07:21.886108Z","last_seen":"2026-09-07T19:08:45.754338Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":35,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tron2pay.world/build/bundle.js","fqdn":"tron2pay.world","domain":"tron2pay.world","tld":"world"},"ip":{"addr":"195.54.174.136","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tron2pay.world/","date":"2026-09-07T19:08:15.907Z","timestamp":1788808095907,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tron2pay.world","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 16:36:37 GMT","end":"Tue, 01 Dec 2026 16:36:36 GMT"},"fingerprint":{"sha1":"CF:31:93:B1:FF:B0:38:BE:49:50:29:95:9E:EE:31:F7:4D:D6:CE:BA","sha256":"79:BE:44:7B:CE:F7:11:FC:50:86:33:8B:DE:AE:0D:E7:72:BA:2D:0B:2E:4C:6E:E3:42:2D:03:27:59:43:E0:DA"}}},"request":{"raw":"GET /build/bundle.js HTTP/1.1\r\nHost: tron2pay.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tron2pay.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 07 Sep 2026 19:08:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 30 Aug 2026 12:59:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a942914-c30\"\r\nExpires: Tue, 08 Sep 2026 19:08:15 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3120,"size_decoded":1236,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"de3d217406963e19331cda6445350ed5","sha1":"eac82a50e3ebeadb4817aed3350b090ddc617d87","sha256":"9344615c7674306b30895beba7a4d678b9d83563beac6a4158ccd7577377f0ae","sha512":"86b99ed6f0a7b43e2ee79f2ff11b4b44fd5251ad85304d24e84d636d9a7edd18b5e3564b6a6203eb6e55cd0f67b97788478683d6f1ab8c43a4178c6882294daa","ssdeep":"","tlshash":"a951a07fa9042a72d4bb73bd974fa758fab220235542c6113e8cc9001f7886955a6fcc","first_seen":"2026-09-07T19:07:21.887758Z","last_seen":"2026-09-07T19:08:45.755117Z","times_seen":2,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"tron2pay.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"tron2pay.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tron2pay.world/media/cycling_dike.jpg","fqdn":"tron2pay.world","domain":"tron2pay.world","tld":"world"},"ip":{"addr":"195.54.174.136","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tron2pay.world/","date":"2026-09-07T19:08:15.913Z","timestamp":1788808095913,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tron2pay.world","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 16:36:37 GMT","end":"Tue, 01 Dec 2026 16:36:36 GMT"},"fingerprint":{"sha1":"CF:31:93:B1:FF:B0:38:BE:49:50:29:95:9E:EE:31:F7:4D:D6:CE:BA","sha256":"79:BE:44:7B:CE:F7:11:FC:50:86:33:8B:DE:AE:0D:E7:72:BA:2D:0B:2E:4C:6E:E3:42:2D:03:27:59:43:E0:DA"}}},"request":{"raw":"GET /media/cycling_dike.jpg HTTP/1.1\r\nHost: tron2pay.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tron2pay.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 07 Sep 2026 19:08:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 262442\r\nLast-Modified: Sun, 30 Aug 2026 12:46:38 GMT\r\nConnection: keep-alive\r\nETag: \"6a94262e-4012a\"\r\nExpires: Tue, 08 Sep 2026 19:08:16 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":262442,"size_decoded":262749,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 1536x1024, components 3","md5":"dddcd954f2529850a3d71eaadbdd9a22","sha1":"41c4290deb10c9e7e011ba1f4722a547f9c112db","sha256":"c4fe8b4f4369c343bfafc1754516e6f2c4eff6fe0044b278ed5a930f3299a0df","sha512":"da8fbc86e246016f44aea61e629866a6f880d2ec9a3a082f3d7f8a930fcef11d95788640387955fa5770e3c2a954ef72f713a76cec6fe0a53f7af01cc6941dc0","ssdeep":"6144:1p/2mmSO2JZGm/D7LAlno2xQumzUk3JLKXlQmG+Pst://2mmS3Zp/bAl5nmVhKCmG+a","tlshash":"7644236be77e08621c8c8dd4554ec020d7824d2da62175beeabf9f2310c6ff8492dd18","first_seen":"2026-09-07T19:07:21.858471Z","last_seen":"2026-09-07T19:08:45.755867Z","times_seen":2,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":62,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"tron2pay.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"tron2pay.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmserifdisplay/v17/-nFnOHM81r4j6k0gjAW3mujVU2B2G_Bx0g.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tron2pay.world/","date":"2026-09-07T19:08:16.049Z","timestamp":1788808096049,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/dmserifdisplay/v17/-nFnOHM81r4j6k0gjAW3mujVU2B2G_Bx0g.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tron2pay.world\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24744\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:13 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 463023\r\nlast-modified: Wed, 10 Sep 2025 16:58:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24744,"size_decoded":25557,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24744, version 1.0","md5":"c27d5a47c09ebe91c013817e32b69043","sha1":"3d2a435525b8b356551cce6d09a86282a4e598d8","sha256":"fdf61e20fd2c0108e0ea28da4daca0035205b4b7fc031a3974b865b704de160a","sha512":"869245b6bd6a148eb79f10b5c2b56f622ff00a1ecaf0e16d687fb33a7d3b36397e27a4b88a1d53cbfb4f75ec5100d5f0cce31f6939114f24f0bcf651a190894a","ssdeep":"768:rJdlGwx37Ri555B9zR+J5uYlG/PwCEp24tZdD09wJ7:l6m37Ri3BRw5u2KwjJtiwF","tlshash":"55b2f18502a4e449cf1ce95b0795bebe6b1209776c069b30e533948851fd360b27d5af","first_seen":"2025-09-11T21:26:17.489332Z","last_seen":"2026-09-08T11:33:51.801937Z","times_seen":6063,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":25,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}