{"report_id":"4b2a4ff7-fe80-4e2b-bf66-7c58e6c95eb1","version":0,"status":"done","tags":[],"date":"2026-08-01T08:39:10Z","url":{"schema":"http","addr":"checknextpay.com","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":0,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"checknextpay.com/","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"title":"NextPay AML Analysis - проверка криптовалюты перед обменом","dom":{"size":86288,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14199)","md5":"ff5cda9ad49506200d0d7b480fca9332","sha1":"c22cd9cf96f91387fd9b26451e0b2580b44d98c2","sha256":"d0e567778a8ea192253d0c15f5432bcb50b4d3022690b0b311975e053ca08100","sha512":"ee6a6286eefc5bee593bfcc466b4dab2c7b76b5dd627b35e1d70023ab81e17e2b6edd0421fb95a3bf2bff390eee121c80447ba273ac3bbadddd90a08a51fc574","ssdeep":"768:UQXUPWDQXszNrd9xxxIDMVI2DDamAFfKmXHHIwDCXmCJXYltwJSDVD8l1J+NJ6jW:j8PYJxWjAIIAuSuZ6o+mi3mMbII/","tlshash":"0c838240eca14d7a3d13a9af57cdde4dd161a093889ab64d3afe00894fc27f60b77609","dom_hash":"domhash76520128cd02a9b8cf16e69ceb07f14b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"checknextpay.com","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":0,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-05T08:39:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"checknextpay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"checknextpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"apivin1.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"apivin1.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"apivin1.pro","ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-23T10:00:31.613812Z","last_seen":"2026-08-01T08:31:11.529793Z","alert_count":4,"request_count":2,"received_data":624,"sent_data":1094,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"checknextpay.com","ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-07-26","domain_rank":0,"first_seen":"2026-08-01T08:39:16.133022Z","last_seen":"2026-08-01T08:39:16.133022Z","alert_count":44,"request_count":22,"received_data":7754052,"sent_data":10584,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-26T22:19:52.505461Z","alert_count":0,"request_count":11,"received_data":345121,"sent_data":6182,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2026-07-26T02:35:00.129506Z","alert_count":0,"request_count":2,"received_data":5270,"sent_data":1264,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-07-27T07:50:35.491492Z","alert_count":0,"request_count":2,"received_data":144375,"sent_data":970,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-26T22:23:14.439231Z","alert_count":0,"request_count":2,"received_data":24424,"sent_data":1102,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rpc.walletconnect.org","ip":{"addr":"35.158.74.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2018-03-26","domain_rank":891779,"first_seen":"2023-02-11T03:06:43Z","last_seen":"2026-08-01T08:31:11.920685Z","alert_count":0,"request_count":1,"received_data":1663,"sent_data":567,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"unpkg.com/react@18.2.0/umd/react.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d86dcdbfed4c273c4742744941259902","sha1":"98089a33d0cf2fa4b3e1ba9b7eeb9b8ba0ac82a7","sha256":"4b4969fa4ef3594324da2c6d78ce8766fbbc2fd121fff395aedf997db0a99a06","sha512":"f10e98f579d36ce13e24dbe3050c09d87f12f94578b80ea1891ca485db48c83619d93a6b74d99639468a746cce872af8742ca4dbcece7a36cfbf097b96b7eaad","ssdeep":"96:DIxuZlZJFupWXpi0pGZBnXQd2q7s0ZiZmdUYe3egbwZqw8+mwoChzSBmqZTZ+Z33:kEXdMAFJdUTTE77tYHD4egFj2MFpKHc","tlshash":"6e22d5e4b952f0448a7338f1117f540f727eaea9b88c8d70a196d9d43db44ad9127f0e","size":10737,"data":"","first_seen":"2023-03-07T12:38:55Z","last_seen":"2026-08-01T11:08:41.542254Z","times_seen":17278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/build/index-D78iT8h3.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"53ff59c03b9b914026609d262b901401","sha1":"78a099d27a54647249760956a97965d377d3ae78","sha256":"7d0268518c1f638a46c5b088337a7e4667394c692f8ab37ea31f220475b192e0","sha512":"f62203400fe9ae0f2e707fef3cb9f739645db9f5141f37a6c25e7226ec0e5ba8eeca6fb2e47bc401d5737bcbc9d3d8bafe1b5a268345489f1f94e594406a9236","ssdeep":"49152:kvm0AIt96kTRqw+qX4+Ui5B88dmwVK9Rucr4suVYjlmps0FdHl924svSV2vHRrUh:qs8jrJ7Wc","tlshash":"c4e5d44477f624359263f0785e1fd804b228a40b164cdc6c7a9c92f49f895788bfafe9","size":3273541,"data":"","first_seen":"2026-08-01T08:39:24.375733Z","last_seen":"2026-08-01T08:40:44.744044Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/build/ConenctComponent-CJqQKTy_.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"301ae1dde2452d475f858b69990d39e7","sha1":"86370e0ddce74d041fb131a670039e388bff647a","sha256":"e606b7efc7f3a766a7db5793c4f33c2315f6a110288b6d07c619ac8a7fc3134d","sha512":"7b83245c94ba2f31f2d575bb4b44013e2da43b6e0a1850c48bf7a2052d9258c8b17c4e9546f8ec251873b180e50530a3eacd45471a2ef988967632e7cf827c5a","ssdeep":"3072:yLzaruKCMnUwUCjnVL2A8nxiLk/tlxKpOrKVExdGwyRQiQF:yLzWHBnUwUCjnVL2Bnx6SxKpOrKVKdGw","tlshash":"2a04954a3af721b21253b0791e0bd441f225e54b219dcc587e9c42f46f46a78cbf6fa8","size":189072,"data":"","first_seen":"2026-08-01T08:39:24.331862Z","last_seen":"2026-08-01T08:40:44.734821Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/build/w3m-modal-DAF78oUt.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"04a48c21e63d7cf69d6dad278851306f","sha1":"e866003ef93018f439a57728bd3576c611253b4f","sha256":"bb29b75e3a403cea0fa043f75a5faae91d02d489bb00cf23f7a2a70a70b856f6","sha512":"ce19505eb9d9538d43a9c12e8e9036c381607d40bef7cffc9097b15cd7019cd064a595cb01d570e4b982a093f8887bbe03cd7b7c7c6fbfb7b7281ced0132e9c6","ssdeep":"192:RDp4Bmwly7Gn7+XLgxepe+Z/D8q0PHO8PPHAUUMiWAf+pPVd9By48xZWPSODUGzi:Xcmwc7Gn7+X0xAxZ/6lYdUoO8d","tlshash":"4702b854a7e3487d6123e25a2fef8e602214a4071947dcbe72dc62d48f8417c1db6e72","size":8237,"data":"","first_seen":"2026-08-01T08:39:24.333445Z","last_seen":"2026-08-01T08:40:44.728525Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/build/TronConnectButton-tQDh3wmv.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"3ff03eac7e11b33a6744ffb215f1f05d","sha1":"59f1b95cc5663e2da7a8d5fad679b6d0d3dcc6b4","sha256":"a92147786f8066c2052f0a128454de5ce53c880abeac574e894b15b3ba992195","sha512":"6cb0155362afb198345d82bb1090c4f3705e7fb05f197b718eb5791760fc85728b345f0b0281576792eee8e15b104944f5528905cb18541efed59efec9fccb94","ssdeep":"49152:y6zo8ulhXw2OL+//EI/qbdGwDWvS8c18ZAXTec6WxS6NhZTN23wPv1wG+6eeYIuY:s8ajqbdh","tlshash":"697594047bf761224253f0b81f5bdc09b238950f519cdd49ba4c92f06f995788bbafa8","size":1684928,"data":"","first_seen":"2026-08-01T08:39:24.378256Z","last_seen":"2026-08-01T08:40:44.744789Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react-dom@18.2.0/umd/react-dom.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"64141792105ea4861f9f33294d65ab81","sha1":"506d9100caa070005a890bd496de64c437d6d008","sha256":"21758ed084cd0e37e735722ee4f3957ea960628a29dfa6c3ce1a1d47a2d6e4f7","sha512":"30e0a9aa84688ac093c09f2f41089c899bf4a9ca5138289d7a4dc64c54ba293936fb2ee6ba724894a09590509863ea7712b6055c28e61639df4d34520b538759","ssdeep":"1536:XtTqru1xouE1ZTnPrMiY6WRdA2qZpXnBnK3xsVdFE7zptEvp62kdS6F:JmuWl7ndK3xsVdKEd56F","tlshash":"ebd308e87996f6426ab202ab10ef1443737c992b784c4cb1e540fddd64b8069a17ff8d","size":131882,"data":"","first_seen":"2023-03-07T12:38:55Z","last_seen":"2026-08-01T11:08:41.54412Z","times_seen":17155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/build/SolanaConnectComponent-DZ16DysV.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"01bc6bc49c87c25a708319d09612e252","sha1":"23cb69a142254f0c44e0baac41600645bc76ee67","sha256":"34ef9dc66d4e5cc72b00b8e535b2a1b0f24b425b1ba99f6f1d97a93f85a67c40","sha512":"99097c7da2bf841d6c39578a3d7c9d23cc847d45a8770384a187cdb847873b43654d438e566b90a3e9aedb24ab37578614a306f24d97ecb17a8a8e373245941a","ssdeep":"3072:n29T1gfxwUPVSjKV0VxWHgZakWqBhiXiolyyVRQAMdWYkCT8xAtIH:29T6nPVSjKV0VxWOjZpaAGH","tlshash":"d9f3b559a7f324348227f07a1a1fd819b229a40b358eee547e8c42945f4953cc7f6bec","size":159993,"data":"","first_seen":"2026-08-01T08:39:24.365712Z","last_seen":"2026-08-01T08:40:44.733995Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/build/requests-erbSI-H8.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"0cbf48a2e3ae796e70da6453cc1e1b1b","sha1":"d05367e89e95146a827316fe7acea57ecf7828df","sha256":"a3fde7dac24687146ae78c5e464219fe3e83fb73a83f8584953aab58a25427e7","sha512":"32a13aef27fec321229eab6b7ddcedabd30e6eb715a8f28431395d066722bc30860a7d387b0f14cd13349b5309eea6b113463222785284c58acd0ed63852babc","ssdeep":"3072:GPsj/XP72/53Gc6U54vvhiQGHiSLdXqi1aQwGzn5UK+UzVIHbWqhvjaMZRVwnJEu:jj/XP72/53Gc6U54vvhiQGHiSLd6i1ai","tlshash":"6bf3638a6de324c0622bf438072f9845e166341b1e29fc0d745d96b48f5d62d0bfafb9","size":172007,"data":"","first_seen":"2026-08-01T08:39:24.359828Z","last_seen":"2026-08-01T08:40:44.738527Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/build/integration.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"3145ae0bccc284c221fce22ae1138e02","sha1":"ad54d1923323d426fc2f7248e4959fbb61cf9f78","sha256":"c209b0a46bb9af6a415f9371d8811e99e6c7e4782b611c793e4ffcc6c848d8e4","sha512":"dbaad1bbd01b9c04456f53b74285f06f95c13f0f1afa1863e27bad72cf572bf5acd0d906e7e4c1fb33f13de563d8f56085ff13a93f2c5523fc0a1a8b007b53ef","ssdeep":"384:XPWWCtQzber5ClRqjoIFcgR6Qg1iIZPU6xYhGX7quEotHPaDAiqX8XFXcXgXPXdM:XPWDQXszNbS","tlshash":"b2b2834099202e39bd23bea656ccdf4cd12ad4c258eb1a9d7edf510d46c33c90b7a74a","size":24183,"data":"","first_seen":"2026-08-01T08:39:24.312558Z","last_seen":"2026-08-01T08:40:44.7321Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/app.js?v=menu-3","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"d95371457b4162e75069d4390d2a7112","sha1":"57829053de456b2c8774be72b8e3967c73884af9","sha256":"02bf98d921aee570fe2579f61ec16fcdb4b3f5a552f01d27a6dff25965fcdcbd","sha512":"754b05c3d0cb64c1f0965e08c0b8a2225752647736c123e637db2f4a80a3361100ada300c98ec06920dfcb2cc4c135de90c23f7f1d909e36e1c9e86526629304","ssdeep":"192:IKoRhZrIPMGpTHDEyaGlQ5Ch1l/8IGgoMg+MgD1AeMDQLPn0n8PCEclwNIexGjri:VohIPnlai1LPnYLA1","tlshash":"80529795907b253f01bb529e73cb659936300053a0068d0b3fac9e881fda862d5f6af8","size":13477,"data":"","first_seen":"2026-08-01T08:39:24.34711Z","last_seen":"2026-08-01T08:40:44.725763Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/build/mui-aN3YpZsM.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"af4e473a276686b0bde13e8de01d6349","sha1":"7ed92de68326c0c9e73f16bf4d2d37d8c8ac59f7","sha256":"551d59ba5f40312bd8b5ac15e655c253cefae3643fa3a795dd573bab5e2186bd","sha512":"3fc6dd7a679df2be1783e663b8fd3fc8d91c1ad545b6b23aee70fe2ad623df372a1d62589a3d96e8faddb570f62ddc7b11fb9d71606020e4d78c2954f3530399","ssdeep":"3072:CpfmmQpzHI4aBX0brnymY/jW+CZpVxc9xacelNvgk:CpZeI44EvujW+yxc9xAlNx","tlshash":"2264c60966f120310513e0b95a1fcd1ab62955076e6efd68badc92682f4d03cd2f3bed","size":310770,"data":"","first_seen":"2026-05-11T00:12:38.992437Z","last_seen":"2026-08-01T08:40:44.73661Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/build/index-CUTeqWhD.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"34010d79a0db3ddef880296e756e6329","sha1":"a45072c2a06b5b993e95784a63a4b739e3881eee","sha256":"713b3452ec4d010ca26afd2e0e2c233d9911f712b27a2559ed46b7c6ededb3c6","sha512":"400b2fc646f95a6671199c1f2e19fe9cb2288f8b60465ba879cf1654a64365a1b25cbb486333105912983e6dbb9b7dd3500489f3baf65e319fccefae2c68e95b","ssdeep":"96:SexIyl5aeVwWYF1ToTS2qNMnOlLWuAndTPkQ0MPTmXVaRu:tPl5X6zTouxE6LWuAd7kQtTmlac","tlshash":"da9113a627fb45744197a15c1a2fd925e124408fe908d89d3fcc52f08f8d62a8efafd4","size":4444,"data":"","first_seen":"2026-08-01T08:39:24.336579Z","last_seen":"2026-08-01T08:40:44.733355Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/build/ChainSelectModal-CyJe8vv1.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"771c57cae3624acd373e790e4da24a78","sha1":"f6ac9f32db8be65eefbde28d32187de8497d63d6","sha256":"ba2c87c4c5ce642cee2051bb1bfbf74ed1e5611d532a89d7232df37436cb9145","sha512":"492da6a0a50b0973b8a6583c631a2e96621f37dbd7537928723afa18d301210440965d9b1f250a792aa0e443053bacfd1f2fe1b3a1d3379c37b403e56b26ed59","ssdeep":"384:x0qlNQC7sccDLJ6dwNx+B/74aVMb49dse:OqlGGsBLJ6dwNxizDVMm","tlshash":"73a2c415c7b0226a2667217c195f8a657231048f0f19beac3f8c11a08f5c66f2df67ee","size":21938,"data":"","first_seen":"2026-08-01T08:39:24.339055Z","last_seen":"2026-08-01T08:40:44.739695Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/build/connectors-CWtDSj7T.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"efc74bd93a86088993588f965c56d238","sha1":"1d94951245b86d53b87c680ab9ac39433006fe26","sha256":"d759293fe0280013a94611db5f12e07961b7094755ac3af6ad640226227c3212","sha512":"48d5aa6842a32436150697a74a728a42f57651896dc81223c76d588a16ee6ca65d82719dc1b5b3a11ec96c7b71d839573a1fe93687a55ad795a24f81f65c3dea","ssdeep":"","tlshash":"0f9004151051c3150011d345115cc41371104d54350f34c040cc0dd473134045410300","size":41,"data":"","first_seen":"2026-05-11T00:12:39.041272Z","last_seen":"2026-08-01T08:40:44.727604Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/build/transaltions-C-R9BBi2.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"a5434989cacfdb90097368c81e198048","sha1":"e04832a1f00ff4d9f03cd41f7e3137d97ee3b94a","sha256":"db1fef39c5c2d2043ec629846d92e2d87fd972bf8ffd2e2d857e6e348732c83f","sha512":"47075662ce3d9cdb1e0fadd1e7826cb76664674559e833b87142ce54d13fb3f4908f3599d3e6c350a22045ddaebf6e45f7ba37e6eed37003a20f28f570e878d0","ssdeep":"96:7RjG4bxGEBuaY74toSli21MaYMY6f2iq+M9EqgK:7RjyaY7+aAI+lqT","tlshash":"4da11db2c98d21641282550fcb577e1f20d604bf9f56733a37d009f57ba622b853b29e","size":5000,"data":"","first_seen":"2026-05-11T00:12:39.060797Z","last_seen":"2026-08-01T08:40:44.724047Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/build/abstract-signer-Dn-4idyj.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"7e66cabcb045a44375b5d2b735c59f5f","sha1":"dd550cf5262fcb93e5564823dea31598a979a771","sha256":"76ac1072e766308f9a92ef81ed5ae6a3ea952723ebec6875544cf667405881de","sha512":"e520524fc67f2e7d2800c81530bd53b3b0a06dc4f9a4b6b4833bd83e5ae93ded102ad6c004365c1631fb2b7c19994ee8f7a987bea4a0ba2a8f0b8809dcf6f7f3","ssdeep":"6144:ETMakL12KGHO+QQwKJWD7dumDC13ALs7ue0:yo+O+NALs7ue0","tlshash":"d12496443af361f24213e0b82b0bd445f629e55f229dcc58ba5c82f46f45a38c7f5ea9","size":220554,"data":"","first_seen":"2026-05-11T00:12:39.021977Z","last_seen":"2026-08-01T08:40:44.730391Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj41 class:Object extensible:true frozen:false isError:false ownPropertyLength:6 preview:map[kind:Object ownProperties:map[connect:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj43 class:Function displayName:Zs/W\u003c extensible:true frozen:false isAsync:true isClassConstructor:false isError:false isGenerator:false location:map[column:135 line:3862 url:https://checknextpay.com/build/SolanaConnectComponent-DZ16DysV.mjs] ownPropertyLength:2 parameterNames:[] sealed:false type:object] writable:true] connected:map[configurable:true enumerable:true value:false writable:true] disconnect:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj44 class:Function displayName:Zs/D\u003c extensible:true frozen:false isAsync:true isClassConstructor:false isError:false isGenerator:false location:map[column:38 line:3878 url:https://checknextpay.com/build/SolanaConnectComponent-DZ16DysV.mjs] ownPropertyLength:2 parameterNames:[] sealed:false type:object] writable:true] publicKey:map[configurable:true enumerable:true value:map[type:null] writable:true] select:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj42 class:Function displayName:eo/S\u003c extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:32 line:3970 url:https://checknextpay.com/build/SolanaConnectComponent-DZ16DysV.mjs] ownPropertyLength:2 parameterNames:[w] sealed:false type:object] writable:true] wallet:map[configurable:true enumerable:true value:map[type:null] writable:true]] ownPropertiesLength:6] sealed:false type:object]","filename":"https://checknextpay.com/build/SolanaConnectComponent-DZ16DysV.mjs","line_number":4588,"column_number":11},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj45 class:Object extensible:true frozen:false isError:false ownPropertyLength:6 preview:map[kind:Object ownProperties:map[connect:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj47 class:Function displayName:Zs/W\u003c extensible:true frozen:false isAsync:true isClassConstructor:false isError:false isGenerator:false location:map[column:135 line:3862 url:https://checknextpay.com/build/SolanaConnectComponent-DZ16DysV.mjs] ownPropertyLength:2 parameterNames:[] sealed:false type:object] writable:true] connected:map[configurable:true enumerable:true value:false writable:true] disconnect:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj48 class:Function displayName:Zs/D\u003c extensible:true frozen:false isAsync:true isClassConstructor:false isError:false isGenerator:false location:map[column:38 line:3878 url:https://checknextpay.com/build/SolanaConnectComponent-DZ16DysV.mjs] ownPropertyLength:2 parameterNames:[] sealed:false type:object] writable:true] publicKey:map[configurable:true enumerable:true value:map[type:null] writable:true] select:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj46 class:Function displayName:eo/S\u003c extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:32 line:3970 url:https://checknextpay.com/build/SolanaConnectComponent-DZ16DysV.mjs] ownPropertyLength:2 parameterNames:[w] sealed:false type:object] writable:true] wallet:map[configurable:true enumerable:true value:map[type:null] writable:true]] ownPropertiesLength:6] sealed:false type:object]","filename":"https://checknextpay.com/build/SolanaConnectComponent-DZ16DysV.mjs","line_number":4588,"column_number":11}]},"http":[{"url":{"schema":"https","addr":"checknextpay.com/build/integration.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:40.817Z","timestamp":1785573520817,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checknextpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 10:47:25 GMT","end":"Sat, 24 Oct 2026 10:47:24 GMT"},"fingerprint":{"sha1":"B2:B6:28:0F:AE:7D:90:26:51:0B:AB:66:A0:CE:6B:09:F6:06:0B:C3","sha256":"04:F9:C4:50:D9:CD:5B:C5:44:B9:DA:6F:BD:7B:86:61:22:1D:83:22:BD:AF:C1:2E:9C:53:C9:92:74:04:1F:48"}}},"request":{"raw":"GET /build/integration.mjs HTTP/1.1\r\nHost: checknextpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 01 Aug 2026 08:38:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Jul 2026 09:03:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a68707e-5e77\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":24183,"size_decoded":5447,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14153)","md5":"3145ae0bccc284c221fce22ae1138e02","sha1":"ad54d1923323d426fc2f7248e4959fbb61cf9f78","sha256":"c209b0a46bb9af6a415f9371d8811e99e6c7e4782b611c793e4ffcc6c848d8e4","sha512":"dbaad1bbd01b9c04456f53b74285f06f95c13f0f1afa1863e27bad72cf572bf5acd0d906e7e4c1fb33f13de563d8f56085ff13a93f2c5523fc0a1a8b007b53ef","ssdeep":"384:XPWWCtQzber5ClRqjoIFcgR6Qg1iIZPU6xYhGX7quEotHPaDAiqX8XFXcXgXPXdM:XPWDQXszNbS","tlshash":"b2b2834099202e39bd23bea656ccdf4cd12ad4c258eb1a9d7edf510d46c33c90b7a74a","first_seen":"2026-08-01T08:39:24.312558Z","last_seen":"2026-08-01T08:40:44.7321Z","times_seen":2,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"checknextpay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"checknextpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/build/index-D78iT8h3.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:40.893Z","timestamp":1785573520893,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checknextpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 10:47:25 GMT","end":"Sat, 24 Oct 2026 10:47:24 GMT"},"fingerprint":{"sha1":"B2:B6:28:0F:AE:7D:90:26:51:0B:AB:66:A0:CE:6B:09:F6:06:0B:C3","sha256":"04:F9:C4:50:D9:CD:5B:C5:44:B9:DA:6F:BD:7B:86:61:22:1D:83:22:BD:AF:C1:2E:9C:53:C9:92:74:04:1F:48"}}},"request":{"raw":"GET /build/index-D78iT8h3.mjs HTTP/1.1\r\nHost: checknextpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/build/integration.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 01 Aug 2026 08:38:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Jul 2026 09:04:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a687085-31f345\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3273541,"size_decoded":793543,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (949)","md5":"235c24ca16b757cdb01d61ec3c17f443","sha1":"02ccc0189467ff7ab654314e891f94407b8ee3dd","sha256":"4a1751bfdf6fe35744b6dbf75c71bb1fa738f958f8ef02e2ffd9b470eb7bbfd9","sha512":"32936a8f86865408ea49e794e62370587060db593b5f76855fbd13ec13dd08c4d3b59ffc6b7f939014db0360ee70a940c85a75141c363ab9269dc428cdd2d1bc","ssdeep":"6144:5T9blyn6Epp2uRfXP7/Zvc9pz0YDkgTLl0A74bmCgDmbTa7CU2hqvS6v//S7o+WW:9KRvPe0AImCNa2iS6kTRqw+qbz4Fc","tlshash":"0c25b54976f621218253f0395e1fd8457238a90b1a8cec597a9c92b46f4843ccbf6fed","first_seen":"2026-08-01T08:39:24.316179Z","last_seen":"2026-08-01T08:40:44.737214Z","times_seen":2,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"checknextpay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"checknextpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/unbounded/v12/Yq6W-LOTXCb04q32xlpwu8ZfvRQkSJZH.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:40.955Z","timestamp":1785573520955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/unbounded/v12/Yq6W-LOTXCb04q32xlpwu8ZfvRQkSJZH.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://checknextpay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 16:23:00 GMT\r\nexpires: Thu, 29 Jul 2027 16:23:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 231340\r\nlast-modified: Wed, 10 Sep 2025 16:47:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":50928,"size_decoded":51741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50928, version 1.0","md5":"05d155aeb9312622bb55344a904c67a7","sha1":"7179f28585e79eb649070109ff59446ae8cadacf","sha256":"4b69ae920ef9fb5868c8255f5176e799e96d820db11a9e23da7de2ffd2af190b","sha512":"ce6260761e9fbaf82c95fe980b4bacc4dbbc96aecee4e5b70f7f57db488b29f7351c9a047be5a52de94a1e1bf05ffda15b4bd1ea59597d070ceda52ce51641d4","ssdeep":"1536:YavAFuYIsPewmVKgN/gy2DOZfOlgJeQ9nc:YavAcwmVK8x2yZf4gJeQ9c","tlshash":"2733028520f7291fc67232b74f68aaa4347163dea531d18e320970c8e9c665e6e3193a","first_seen":"2025-09-11T17:16:41.899057Z","last_seen":"2026-08-01T08:51:37.462657Z","times_seen":267956,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":54,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/onest/v9/gNMKW3F-SZuj7xmf-HYoFIez1MI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:40.966Z","timestamp":1785573520966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/onest/v9/gNMKW3F-SZuj7xmf-HYoFIez1MI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://checknextpay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32208\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 11:24:18 GMT\r\nexpires: Fri, 30 Jul 2027 11:24:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 162862\r\nlast-modified: Tue, 09 Sep 2025 19:01:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":32208,"size_decoded":33021,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32208, version 1.0","md5":"9cdb51be2e29b501a14cbc9b8152bbcf","sha1":"7813caa219726084f6a3514450859166eed6148f","sha256":"ced809142b0957d88b6dc3c632dcfb6f1dc2031d90f7eb10b1a950b41fb5cd33","sha512":"f5deeffb56bb6de99dcfcd60432dc494f316afabe18d333f4d98a0c688d9b06d2de65e59b94aee4f872df75f9427a50bfc8d6efcdbaea0b8df1fd12aba6a926d","ssdeep":"768:vlgL8mMCNR5xTt9MU4LMDW5M1V2NS9+Ff6eh1aTJD00:vGLbMk5xTQ01ZRG1aTJD00","tlshash":"11e2e2f812a4fcc52f6a8f325bad1d1b8991ca3e64b1bfb55c1f81f940ab544041b7a1","first_seen":"2025-03-13T13:24:40.496268Z","last_seen":"2026-08-01T08:40:44.723074Z","times_seen":2636,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":50,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/93564157-2e8e-4ce7-81df-b264dbee9b00?projectId=7bbb65bc98212e6aba038aac8f98ff74\u0026st=appkit\u0026sv=html-wagmi%2Csolana-1.6.9","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:42.031Z","timestamp":1785573522031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 20:58:28 GMT","end":"Thu, 10 Sep 2026 21:58:10 GMT"},"fingerprint":{"sha1":"5A:9F:85:4A:51:F4:8A:04:CC:1C:A1:DE:31:3C:94:C7:C5:F6:F0:FB","sha256":"3A:D7:9D:20:F2:66:99:35:F7:6E:20:B7:CC:CE:F1:C5:DA:4D:43:50:10:EA:CF:1E:B1:2C:71:20:5F:2F:70:C4"}}},"request":{"raw":"GET /public/getAssetImage/93564157-2e8e-4ce7-81df-b264dbee9b00?projectId=7bbb65bc98212e6aba038aac8f98ff74\u0026st=appkit\u0026sv=html-wagmi%2Csolana-1.6.9 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checknextpay.com/\r\nOrigin: https://checknextpay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 08:38:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2928\r\ncf-ray: a2438730bbecb518-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 70451\r\ncache-control: public, max-age=31536000\r\netag: \"cf1ApOabfxxTRxuFHP4nttwOIZfmDcyauXnchu_YTSDQ\"\r\nexpires: Sun, 01 Aug 2027 08:38:42 GMT\r\nserver: cloudflare\r\nvary: accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=587+0 c=0+2 v=2026.7.4 l=2928 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2928,"size_decoded":3670,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"711c83f0ff80e88da04dceb9118e6344","sha1":"e7c16915f94a38414525a2acd2929a3efbfe3e0d","sha256":"c3c7fd42c1cae833f4f4732829cf156ef9064b51df3753e0304e246cf904cc14","sha512":"597dd1ea582622aa1e30366c988851df60ab9b1372c55a4850312f05a656baa44ab0b458614de66a5c261ffe220d13f948d724a203079d3f0ef3f3a56c47120d","ssdeep":"","tlshash":"c8515c34138a1640d35f254be39993112252ee4f6705d217be47cc8e3ab943da662d2a","first_seen":"2024-07-07T11:58:42Z","last_seen":"2026-08-01T08:53:21.833665Z","times_seen":1423,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react-dom@18.2.0/umd/react-dom.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:40.816Z","timestamp":1785573520816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 17:56:32 GMT","end":"Fri, 09 Oct 2026 18:56:21 GMT"},"fingerprint":{"sha1":"81:08:7C:A2:AA:81:B4:77:02:EE:53:FB:23:6F:1D:97:C3:92:2E:A0","sha256":"13:42:07:B0:BF:53:83:27:C3:6E:69:00:B5:F0:1C:58:6C:AD:B4:DD:93:08:84:F0:97:51:3B:60:91:10:85:76"}}},"request":{"raw":"GET /react-dom@18.2.0/umd/react-dom.production.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 08:38:40 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a24387292e9a5fac-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 43006\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 01 Aug 2027 08:38:40 GMT\r\nlast-modified: Wed, 29 Jul 2026 21:08:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:IXWO0ITNDjfnNXIu5POVfqlgYoop36bDzhodR6LW5Pc=:\r\nfly-request-id: 01KYHZ7BZE186GYVP7BBR2N5B4-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":131882,"size_decoded":43852,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (945)","md5":"64141792105ea4861f9f33294d65ab81","sha1":"506d9100caa070005a890bd496de64c437d6d008","sha256":"21758ed084cd0e37e735722ee4f3957ea960628a29dfa6c3ce1a1d47a2d6e4f7","sha512":"30e0a9aa84688ac093c09f2f41089c899bf4a9ca5138289d7a4dc64c54ba293936fb2ee6ba724894a09590509863ea7712b6055c28e61639df4d34520b538759","ssdeep":"1536:XtTqru1xouE1ZTnPrMiY6WRdA2qZpXnBnK3xsVdFE7zptEvp62kdS6F:JmuWl7ndK3xsVdKEd56F","tlshash":"ebd308e87996f6426ab202ab10ef1443737c992b784c4cb1e540fddd64b8069a17ff8d","first_seen":"2023-03-07T12:38:55Z","last_seen":"2026-08-01T11:08:41.54412Z","times_seen":17155,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":1,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/assets/process-flow.svg","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:40.827Z","timestamp":1785573520827,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checknextpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 10:47:25 GMT","end":"Sat, 24 Oct 2026 10:47:24 GMT"},"fingerprint":{"sha1":"B2:B6:28:0F:AE:7D:90:26:51:0B:AB:66:A0:CE:6B:09:F6:06:0B:C3","sha256":"04:F9:C4:50:D9:CD:5B:C5:44:B9:DA:6F:BD:7B:86:61:22:1D:83:22:BD:AF:C1:2E:9C:53:C9:92:74:04:1F:48"}}},"request":{"raw":"GET /assets/process-flow.svg HTTP/1.1\r\nHost: checknextpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 01 Aug 2026 08:38:40 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 28 Jul 2026 09:04:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a687098-101f\"\r\nexpires: Sun, 01 Aug 2027 08:38:40 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4127,"size_decoded":1519,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5180f44e6418528f3e1d5c48374ebd0f","sha1":"215fd84f62ed45f922d9fbe2504676f91371bb2c","sha256":"5c183f5273372aa1e01d6c743eb7b8b762a516b908fe022d4c9e41ad16bc92e5","sha512":"8ccfd9b8868750f8874764c1cbfd203660955623c68fff7e899f03d91622f73c0f8271e060c9c1e9baed65b720e4e7189e49848ffc126a8150029404111d354a","ssdeep":"48:bcbjyq1PctKeDHHmY3/NjJqKPy83jxmJKhL/ievHjFj5iDVaX8XJFCMj+APi2ZNk:YldanmYvzXVTLbvUVYGJFCQNFZJ6","tlshash":"5d8154a131ec6c08eb04090cd34d71963a2fa2c76b55c704b84c24e99fd69c7ea9f39d","first_seen":"2026-08-01T08:39:24.32616Z","last_seen":"2026-08-01T08:40:44.73271Z","times_seen":2,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"checknextpay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"checknextpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/onest/v9/gNMKW3F-SZuj7xmb-HYoFIez1MLZPA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:40.965Z","timestamp":1785573520965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/onest/v9/gNMKW3F-SZuj7xmb-HYoFIez1MLZPA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://checknextpay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 14:10:44 GMT\r\nexpires: Thu, 29 Jul 2027 14:10:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 239276\r\nlast-modified: Tue, 09 Sep 2025 19:04:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":14236,"size_decoded":15049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14236, version 1.0","md5":"52c443f3e52d8b8b906f4f679d397c4b","sha1":"c8e2fe8ed389179f239f30b211d88a63f1c4dfd5","sha256":"c43fb45e8178433c5635a16699322d2ea2e2f00d831b3c515f0764cfd1425834","sha512":"45a3bb2e420f643ccc588787f4ce73a399391266cd0f50bb183cbe580fec1f38d7d0b8b0375f1a24a34472c7af1c3a0e7e01f06eaa42f348cd15898952f3382a","ssdeep":"192:sTGnuVLFwYGV+1vtVKYXSV2WjW9Y+u22BpkeUNv3pCo8xS2RCETF30QKfFHzx/Dr:AGnuHA8vt9OtW9cBIt3pC9EohMRd5B","tlshash":"5452c07a041153ed92b5f2f90b678b7389787519b188b2c3806a3d160364c69e3d8f3f","first_seen":"2025-03-20T06:58:10.031866Z","last_seen":"2026-08-01T08:40:44.720456Z","times_seen":448,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":34,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/assets/report-preview.svg","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:40.830Z","timestamp":1785573520830,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checknextpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 10:47:25 GMT","end":"Sat, 24 Oct 2026 10:47:24 GMT"},"fingerprint":{"sha1":"B2:B6:28:0F:AE:7D:90:26:51:0B:AB:66:A0:CE:6B:09:F6:06:0B:C3","sha256":"04:F9:C4:50:D9:CD:5B:C5:44:B9:DA:6F:BD:7B:86:61:22:1D:83:22:BD:AF:C1:2E:9C:53:C9:92:74:04:1F:48"}}},"request":{"raw":"GET /assets/report-preview.svg HTTP/1.1\r\nHost: checknextpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 01 Aug 2026 08:38:40 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 28 Jul 2026 09:04:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a687097-1225\"\r\nexpires: Sun, 01 Aug 2027 08:38:40 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4645,"size_decoded":1829,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670727f0781845c0713b7a942e9d3432","sha1":"8c9559a9723556879cfc673d75fe38a97767fa95","sha256":"40db63ef3ce8cdfa771d78d75dd0968f0fcb0c54edba3530704904295f8b1e12","sha512":"287493d659a06ac18738fa63e036e0bd291f2f584f57a49f21d728ca3d4c8a9f31e06c3ea631237e1ea41e2b6497a9b1f4c9262a55e634d526031d07438ed141","ssdeep":"96:4/OxXHAl4AN+ixH71E+7G5XRoR9WRTc5YLsvndCMexm:4S3Afxb2Oyc","tlshash":"c4a11266b3dc882ceb10490cf70bf1b2750f80d64709970478584d669e4baefaa6f3c8","first_seen":"2026-08-01T08:39:24.329964Z","last_seen":"2026-08-01T08:40:44.729717Z","times_seen":2,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"checknextpay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"checknextpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/onest/v9/gNMKW3F-SZuj7xmf-HYoFIez1MI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:40.964Z","timestamp":1785573520964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/onest/v9/gNMKW3F-SZuj7xmf-HYoFIez1MI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://checknextpay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32208\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 11:24:18 GMT\r\nexpires: Fri, 30 Jul 2027 11:24:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 162862\r\nlast-modified: Tue, 09 Sep 2025 19:01:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":32208,"size_decoded":33021,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32208, version 1.0","md5":"9cdb51be2e29b501a14cbc9b8152bbcf","sha1":"7813caa219726084f6a3514450859166eed6148f","sha256":"ced809142b0957d88b6dc3c632dcfb6f1dc2031d90f7eb10b1a950b41fb5cd33","sha512":"f5deeffb56bb6de99dcfcd60432dc494f316afabe18d333f4d98a0c688d9b06d2de65e59b94aee4f872df75f9427a50bfc8d6efcdbaea0b8df1fd12aba6a926d","ssdeep":"768:vlgL8mMCNR5xTt9MU4LMDW5M1V2NS9+Ff6eh1aTJD00:vGLbMk5xTQ01ZRG1aTJD00","tlshash":"11e2e2f812a4fcc52f6a8f325bad1d1b8991ca3e64b1bfb55c1f81f940ab544041b7a1","first_seen":"2025-03-13T13:24:40.496268Z","last_seen":"2026-08-01T08:40:44.723074Z","times_seen":2636,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":47,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/build/ConenctComponent-CJqQKTy_.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:41.808Z","timestamp":1785573521808,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checknextpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 10:47:25 GMT","end":"Sat, 24 Oct 2026 10:47:24 GMT"},"fingerprint":{"sha1":"B2:B6:28:0F:AE:7D:90:26:51:0B:AB:66:A0:CE:6B:09:F6:06:0B:C3","sha256":"04:F9:C4:50:D9:CD:5B:C5:44:B9:DA:6F:BD:7B:86:61:22:1D:83:22:BD:AF:C1:2E:9C:53:C9:92:74:04:1F:48"}}},"request":{"raw":"GET /build/ConenctComponent-CJqQKTy_.mjs HTTP/1.1\r\nHost: checknextpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/build/index-D78iT8h3.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 01 Aug 2026 08:38:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Jul 2026 09:04:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a687089-2e290\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":189072,"size_decoded":49435,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (524)","md5":"301ae1dde2452d475f858b69990d39e7","sha1":"86370e0ddce74d041fb131a670039e388bff647a","sha256":"e606b7efc7f3a766a7db5793c4f33c2315f6a110288b6d07c619ac8a7fc3134d","sha512":"7b83245c94ba2f31f2d575bb4b44013e2da43b6e0a1850c48bf7a2052d9258c8b17c4e9546f8ec251873b180e50530a3eacd45471a2ef988967632e7cf827c5a","ssdeep":"3072:yLzaruKCMnUwUCjnVL2A8nxiLk/tlxKpOrKVExdGwyRQiQF:yLzWHBnUwUCjnVL2Bnx6SxKpOrKVKdGw","tlshash":"2a04954a3af721b21253b0791e0bd441f225e54b219dcc587e9c42f46f46a78cbf6fa8","first_seen":"2026-08-01T08:39:24.331862Z","last_seen":"2026-08-01T08:40:44.734821Z","times_seen":2,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"checknextpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"checknextpay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/build/w3m-modal-DAF78oUt.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:41.958Z","timestamp":1785573521958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checknextpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 10:47:25 GMT","end":"Sat, 24 Oct 2026 10:47:24 GMT"},"fingerprint":{"sha1":"B2:B6:28:0F:AE:7D:90:26:51:0B:AB:66:A0:CE:6B:09:F6:06:0B:C3","sha256":"04:F9:C4:50:D9:CD:5B:C5:44:B9:DA:6F:BD:7B:86:61:22:1D:83:22:BD:AF:C1:2E:9C:53:C9:92:74:04:1F:48"}}},"request":{"raw":"GET /build/w3m-modal-DAF78oUt.mjs HTTP/1.1\r\nHost: checknextpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/build/index-D78iT8h3.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 01 Aug 2026 08:38:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Jul 2026 09:04:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a687090-202d\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":8237,"size_decoded":3068,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (674)","md5":"04a48c21e63d7cf69d6dad278851306f","sha1":"e866003ef93018f439a57728bd3576c611253b4f","sha256":"bb29b75e3a403cea0fa043f75a5faae91d02d489bb00cf23f7a2a70a70b856f6","sha512":"ce19505eb9d9538d43a9c12e8e9036c381607d40bef7cffc9097b15cd7019cd064a595cb01d570e4b982a093f8887bbe03cd7b7c7c6fbfb7b7281ced0132e9c6","ssdeep":"192:RDp4Bmwly7Gn7+XLgxepe+Z/D8q0PHO8PPHAUUMiWAf+pPVd9By48xZWPSODUGzi:Xcmwc7Gn7+X0xAxZ/6lYdUoO8d","tlshash":"4702b854a7e3487d6123e25a2fef8e602214a4071947dcbe72dc62d48f8417c1db6e72","first_seen":"2026-08-01T08:39:24.333445Z","last_seen":"2026-08-01T08:40:44.728525Z","times_seen":2,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"checknextpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"checknextpay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/build/abstract-signer-Dn-4idyj.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:41.966Z","timestamp":1785573521966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checknextpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 10:47:25 GMT","end":"Sat, 24 Oct 2026 10:47:24 GMT"},"fingerprint":{"sha1":"B2:B6:28:0F:AE:7D:90:26:51:0B:AB:66:A0:CE:6B:09:F6:06:0B:C3","sha256":"04:F9:C4:50:D9:CD:5B:C5:44:B9:DA:6F:BD:7B:86:61:22:1D:83:22:BD:AF:C1:2E:9C:53:C9:92:74:04:1F:48"}}},"request":{"raw":"GET /build/abstract-signer-Dn-4idyj.mjs HTTP/1.1\r\nHost: checknextpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/build/ConenctComponent-CJqQKTy_.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 01 Aug 2026 08:38:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Jul 2026 09:04:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a68708c-35d8a\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":220554,"size_decoded":60513,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (575)","md5":"7e66cabcb045a44375b5d2b735c59f5f","sha1":"dd550cf5262fcb93e5564823dea31598a979a771","sha256":"76ac1072e766308f9a92ef81ed5ae6a3ea952723ebec6875544cf667405881de","sha512":"e520524fc67f2e7d2800c81530bd53b3b0a06dc4f9a4b6b4833bd83e5ae93ded102ad6c004365c1631fb2b7c19994ee8f7a987bea4a0ba2a8f0b8809dcf6f7f3","ssdeep":"6144:ETMakL12KGHO+QQwKJWD7dumDC13ALs7ue0:yo+O+NALs7ue0","tlshash":"d12496443af361f24213e0b82b0bd445f629e55f229dcc58ba5c82f46f45a38c7f5ea9","first_seen":"2026-05-11T00:12:39.021977Z","last_seen":"2026-08-01T08:40:44.730391Z","times_seen":8,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"checknextpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"checknextpay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/build/index-CUTeqWhD.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:41.796Z","timestamp":1785573521796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checknextpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 10:47:25 GMT","end":"Sat, 24 Oct 2026 10:47:24 GMT"},"fingerprint":{"sha1":"B2:B6:28:0F:AE:7D:90:26:51:0B:AB:66:A0:CE:6B:09:F6:06:0B:C3","sha256":"04:F9:C4:50:D9:CD:5B:C5:44:B9:DA:6F:BD:7B:86:61:22:1D:83:22:BD:AF:C1:2E:9C:53:C9:92:74:04:1F:48"}}},"request":{"raw":"GET /build/index-CUTeqWhD.mjs HTTP/1.1\r\nHost: checknextpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/build/index-D78iT8h3.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 01 Aug 2026 08:38:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Jul 2026 09:04:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a68708f-115c\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4444,"size_decoded":1780,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"34010d79a0db3ddef880296e756e6329","sha1":"a45072c2a06b5b993e95784a63a4b739e3881eee","sha256":"713b3452ec4d010ca26afd2e0e2c233d9911f712b27a2559ed46b7c6ededb3c6","sha512":"400b2fc646f95a6671199c1f2e19fe9cb2288f8b60465ba879cf1654a64365a1b25cbb486333105912983e6dbb9b7dd3500489f3baf65e319fccefae2c68e95b","ssdeep":"96:SexIyl5aeVwWYF1ToTS2qNMnOlLWuAndTPkQ0MPTmXVaRu:tPl5X6zTouxE6LWuAd7kQtTmlac","tlshash":"da9113a627fb45744197a15c1a2fd925e124408fe908d89d3fcc52f08f8d62a8efafd4","first_seen":"2026-08-01T08:39:24.336579Z","last_seen":"2026-08-01T08:40:44.733355Z","times_seen":2,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"checknextpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"checknextpay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/build/ChainSelectModal-CyJe8vv1.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:41.803Z","timestamp":1785573521803,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checknextpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 10:47:25 GMT","end":"Sat, 24 Oct 2026 10:47:24 GMT"},"fingerprint":{"sha1":"B2:B6:28:0F:AE:7D:90:26:51:0B:AB:66:A0:CE:6B:09:F6:06:0B:C3","sha256":"04:F9:C4:50:D9:CD:5B:C5:44:B9:DA:6F:BD:7B:86:61:22:1D:83:22:BD:AF:C1:2E:9C:53:C9:92:74:04:1F:48"}}},"request":{"raw":"GET /build/ChainSelectModal-CyJe8vv1.mjs HTTP/1.1\r\nHost: checknextpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/build/index-D78iT8h3.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 01 Aug 2026 08:38:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Jul 2026 09:04:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a68708f-55b2\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":21938,"size_decoded":6776,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (449)","md5":"771c57cae3624acd373e790e4da24a78","sha1":"f6ac9f32db8be65eefbde28d32187de8497d63d6","sha256":"ba2c87c4c5ce642cee2051bb1bfbf74ed1e5611d532a89d7232df37436cb9145","sha512":"492da6a0a50b0973b8a6583c631a2e96621f37dbd7537928723afa18d301210440965d9b1f250a792aa0e443053bacfd1f2fe1b3a1d3379c37b403e56b26ed59","ssdeep":"384:x0qlNQC7sccDLJ6dwNx+B/74aVMb49dse:OqlGGsBLJ6dwNxizDVMm","tlshash":"73a2c415c7b0226a2667217c195f8a657231048f0f19beac3f8c11a08f5c66f2df67ee","first_seen":"2026-08-01T08:39:24.339055Z","last_seen":"2026-08-01T08:40:44.739695Z","times_seen":2,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"checknextpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"checknextpay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/build/transaltions-C-R9BBi2.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:41.941Z","timestamp":1785573521941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checknextpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 10:47:25 GMT","end":"Sat, 24 Oct 2026 10:47:24 GMT"},"fingerprint":{"sha1":"B2:B6:28:0F:AE:7D:90:26:51:0B:AB:66:A0:CE:6B:09:F6:06:0B:C3","sha256":"04:F9:C4:50:D9:CD:5B:C5:44:B9:DA:6F:BD:7B:86:61:22:1D:83:22:BD:AF:C1:2E:9C:53:C9:92:74:04:1F:48"}}},"request":{"raw":"GET /build/transaltions-C-R9BBi2.mjs HTTP/1.1\r\nHost: checknextpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/build/ChainSelectModal-CyJe8vv1.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 01 Aug 2026 08:38:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Jul 2026 09:04:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a687089-1388\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5000,"size_decoded":1654,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"a5434989cacfdb90097368c81e198048","sha1":"e04832a1f00ff4d9f03cd41f7e3137d97ee3b94a","sha256":"db1fef39c5c2d2043ec629846d92e2d87fd972bf8ffd2e2d857e6e348732c83f","sha512":"47075662ce3d9cdb1e0fadd1e7826cb76664674559e833b87142ce54d13fb3f4908f3599d3e6c350a22045ddaebf6e45f7ba37e6eed37003a20f28f570e878d0","ssdeep":"96:7RjG4bxGEBuaY74toSli21MaYMY6f2iq+M9EqgK:7RjyaY7+aAI+lqT","tlshash":"4da11db2c98d21641282550fcb577e1f20d604bf9f56733a37d009f57ba622b853b29e","first_seen":"2026-05-11T00:12:39.060797Z","last_seen":"2026-08-01T08:40:44.724047Z","times_seen":8,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"checknextpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"checknextpay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:42.025Z","timestamp":1785573522025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 01 Aug 2026 08:38:42 GMT\r\ndate: Sat, 01 Aug 2026 08:38:42 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1427,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-08-01T11:18:16.958976Z","times_seen":38838,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/app.js?v=menu-3","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:40.819Z","timestamp":1785573520819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checknextpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 10:47:25 GMT","end":"Sat, 24 Oct 2026 10:47:24 GMT"},"fingerprint":{"sha1":"B2:B6:28:0F:AE:7D:90:26:51:0B:AB:66:A0:CE:6B:09:F6:06:0B:C3","sha256":"04:F9:C4:50:D9:CD:5B:C5:44:B9:DA:6F:BD:7B:86:61:22:1D:83:22:BD:AF:C1:2E:9C:53:C9:92:74:04:1F:48"}}},"request":{"raw":"GET /app.js?v=menu-3 HTTP/1.1\r\nHost: checknextpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 01 Aug 2026 08:38:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Jul 2026 09:04:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a687099-34a5\"\r\nexpires: Sun, 01 Aug 2027 08:38:40 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":13477,"size_decoded":4266,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d95371457b4162e75069d4390d2a7112","sha1":"57829053de456b2c8774be72b8e3967c73884af9","sha256":"02bf98d921aee570fe2579f61ec16fcdb4b3f5a552f01d27a6dff25965fcdcbd","sha512":"754b05c3d0cb64c1f0965e08c0b8a2225752647736c123e637db2f4a80a3361100ada300c98ec06920dfcb2cc4c135de90c23f7f1d909e36e1c9e86526629304","ssdeep":"192:IKoRhZrIPMGpTHDEyaGlQ5Ch1l/8IGgoMg+MgD1AeMDQLPn0n8PCEclwNIexGjri:VohIPnlai1LPnYLA1","tlshash":"80529795907b253f01bb529e73cb659936300053a0068d0b3fac9e881fda862d5f6af8","first_seen":"2026-08-01T08:39:24.34711Z","last_seen":"2026-08-01T08:40:44.725763Z","times_seen":2,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"checknextpay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"checknextpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/assets/risk-map.svg","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:40.828Z","timestamp":1785573520828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checknextpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 10:47:25 GMT","end":"Sat, 24 Oct 2026 10:47:24 GMT"},"fingerprint":{"sha1":"B2:B6:28:0F:AE:7D:90:26:51:0B:AB:66:A0:CE:6B:09:F6:06:0B:C3","sha256":"04:F9:C4:50:D9:CD:5B:C5:44:B9:DA:6F:BD:7B:86:61:22:1D:83:22:BD:AF:C1:2E:9C:53:C9:92:74:04:1F:48"}}},"request":{"raw":"GET /assets/risk-map.svg HTTP/1.1\r\nHost: checknextpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 01 Aug 2026 08:38:40 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 28 Jul 2026 09:04:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a687099-d2e\"\r\nexpires: Sun, 01 Aug 2027 08:38:40 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3374,"size_decoded":1547,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a7e71b7eb7f396a5aa333d6a643b6d91","sha1":"538e705b31f42f2fdfba0e439d768736174bd0eb","sha256":"cfc1415a4541d5d21d01d2132e77807d9190f3a84e0cb7d984f07e856b37f9bc","sha512":"e9f96e2ba26a8fe3e6a3a670cc33acb7b1714ad0edd990667d6c48a72610ee6ee7d7af94ecc1a180a519e07144a3b3b2151dbf1e47ee1b5ae26a774ae8752076","ssdeep":"","tlshash":"fc61c0a261f8a42de614cb0d8707b1a6bb0f60c76319c344f55c4d8a4f879d7e99b3d8","first_seen":"2026-08-01T08:39:24.349064Z","last_seen":"2026-08-01T08:40:44.722053Z","times_seen":2,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"checknextpay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"checknextpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/onest/v9/gNMKW3F-SZuj7xmb-HYoFIez1MLZPA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:40.962Z","timestamp":1785573520962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/onest/v9/gNMKW3F-SZuj7xmb-HYoFIez1MLZPA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://checknextpay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 14:10:44 GMT\r\nexpires: Thu, 29 Jul 2027 14:10:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 239276\r\nlast-modified: Tue, 09 Sep 2025 19:04:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":14236,"size_decoded":15049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14236, version 1.0","md5":"52c443f3e52d8b8b906f4f679d397c4b","sha1":"c8e2fe8ed389179f239f30b211d88a63f1c4dfd5","sha256":"c43fb45e8178433c5635a16699322d2ea2e2f00d831b3c515f0764cfd1425834","sha512":"45a3bb2e420f643ccc588787f4ce73a399391266cd0f50bb183cbe580fec1f38d7d0b8b0375f1a24a34472c7af1c3a0e7e01f06eaa42f348cd15898952f3382a","ssdeep":"192:sTGnuVLFwYGV+1vtVKYXSV2WjW9Y+u22BpkeUNv3pCo8xS2RCETF30QKfFHzx/Dr:AGnuHA8vt9OtW9cBIt3pC9EohMRd5B","tlshash":"5452c07a041153ed92b5f2f90b678b7389787519b188b2c3806a3d160364c69e3d8f3f","first_seen":"2025-03-20T06:58:10.031866Z","last_seen":"2026-08-01T08:40:44.720456Z","times_seen":448,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":29,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=7bbb65bc98212e6aba038aac8f98ff74\u0026st=appkit\u0026sv=html-wagmi%2Csolana-1.6.9\u0026page=1\u0026entries=1\u0026chains=eip155%3A56\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:41.786Z","timestamp":1785573521786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 20:58:28 GMT","end":"Thu, 10 Sep 2026 21:58:10 GMT"},"fingerprint":{"sha1":"5A:9F:85:4A:51:F4:8A:04:CC:1C:A1:DE:31:3C:94:C7:C5:F6:F0:FB","sha256":"3A:D7:9D:20:F2:66:99:35:F7:6E:20:B7:CC:CE:F1:C5:DA:4D:43:50:10:EA:CF:1E:B1:2C:71:20:5F:2F:70:C4"}}},"request":{"raw":"GET /getWallets?projectId=7bbb65bc98212e6aba038aac8f98ff74\u0026st=appkit\u0026sv=html-wagmi%2Csolana-1.6.9\u0026page=1\u0026entries=1\u0026chains=eip155%3A56\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checknextpay.com/\r\nOrigin: https://checknextpay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 08:38:41 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncf-ray: a243872f4abab518-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 504\r\ncache-control: public, max-age=43200\r\nexpires: Sat, 01 Aug 2026 20:38:41 GMT\r\nlast-modified: Sat, 01 Aug 2026 08:30:17 GMT\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1143,"size_decoded":1095,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e55f922ace882ef6e265a86b1eae8d0b","sha1":"08cc8a993c1301b479358754a776f934f329829a","sha256":"4bb2cfb97eac7a32693654070c7827212d404adbe06ac5f193f55a546caa9151","sha512":"56f0d91556034b6d34aaf36f6bed0cf0f17407353a66d1334787cb41a35fe5b0bc91cd91b82c63ba84dc443c86ec97bfe8cc63154f3ec045cf52cbc80a59b6a6","ssdeep":"","tlshash":"f621039e57949c6b6f30ab84f14cf9cad83e851741c494aba0f0463941fe927b3119f5","first_seen":"2026-02-06T23:20:07.134745Z","last_seen":"2026-08-01T08:40:44.721204Z","times_seen":802,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":3,"connect":13,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/build/TronConnectButton-tQDh3wmv.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:41.799Z","timestamp":1785573521799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checknextpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 10:47:25 GMT","end":"Sat, 24 Oct 2026 10:47:24 GMT"},"fingerprint":{"sha1":"B2:B6:28:0F:AE:7D:90:26:51:0B:AB:66:A0:CE:6B:09:F6:06:0B:C3","sha256":"04:F9:C4:50:D9:CD:5B:C5:44:B9:DA:6F:BD:7B:86:61:22:1D:83:22:BD:AF:C1:2E:9C:53:C9:92:74:04:1F:48"}}},"request":{"raw":"GET /build/TronConnectButton-tQDh3wmv.mjs HTTP/1.1\r\nHost: checknextpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/build/index-D78iT8h3.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 01 Aug 2026 08:38:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Jul 2026 09:04:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a687088-19b5c0\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1684928,"size_decoded":373607,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (664)","md5":"8049a309958262ad3dfb83bd4830fb53","sha1":"3916bd513eb5d3436720d5277a37a06e000d51cd","sha256":"aae4691ce3c1f3d42c010b846002392488866aa5931a7cdcae271b5af7d475cc","sha512":"7ad15b3e0c788432b5d993c8a2df8a4ad318ba0df2d7b139b4f82b3e1fa0af35132d398a5199f9d124949a6e406a64460d912033b00d009aa3fae5b4661f904a","ssdeep":"24576:y6zo8ulhXw2OL+//EwW4/qbdGwDWvS8c18ZAXTec6WA:y6zo8ulhXw2OL+//EI/qbdGwDWvS8c1k","tlshash":"2625a3086bf721324217f0795a1fdc05b238981b219ddd4dba9c92f86f4853887f6ee9","first_seen":"2026-08-01T08:39:24.352053Z","last_seen":"2026-08-01T08:40:44.741417Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"checknextpay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"checknextpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/styles.css","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:40.812Z","timestamp":1785573520812,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checknextpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 10:47:25 GMT","end":"Sat, 24 Oct 2026 10:47:24 GMT"},"fingerprint":{"sha1":"B2:B6:28:0F:AE:7D:90:26:51:0B:AB:66:A0:CE:6B:09:F6:06:0B:C3","sha256":"04:F9:C4:50:D9:CD:5B:C5:44:B9:DA:6F:BD:7B:86:61:22:1D:83:22:BD:AF:C1:2E:9C:53:C9:92:74:04:1F:48"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: checknextpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 01 Aug 2026 08:38:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Jul 2026 09:03:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a68707a-7567\"\r\nexpires: Sun, 01 Aug 2027 08:38:40 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":30055,"size_decoded":6587,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"cbf636dededeff50768cdbe5cf994c07","sha1":"1d3a2c3887763ec13c9ccdb16b85c54a6aeafe78","sha256":"f48d931412c79ccca2b50aea3496ba6d52a87ab4c325c8e1d375dadfdbebc7a7","sha512":"1990d156d18e0b25ae46b20ea35e9452326af4f0685e62a91a675da38fc691298c26ba764ff4d29802f9cc2a5600cf7e9b36af1c88bb742c61395f4de71005c5","ssdeep":"384:3x2vNz6va+/ahQGJg7PA8Ad/YajVhWA/BFGYJ:hU2va+/aCGJg748A9YmWA/BF7J","tlshash":"52d254a126745574f93fe99876c79b48736cd013860ece796ff4104caf842eda262b4c","first_seen":"2026-08-01T08:39:24.353844Z","last_seen":"2026-08-01T08:40:44.735994Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"checknextpay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"checknextpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/assets/logo.png","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:40.824Z","timestamp":1785573520824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checknextpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 10:47:25 GMT","end":"Sat, 24 Oct 2026 10:47:24 GMT"},"fingerprint":{"sha1":"B2:B6:28:0F:AE:7D:90:26:51:0B:AB:66:A0:CE:6B:09:F6:06:0B:C3","sha256":"04:F9:C4:50:D9:CD:5B:C5:44:B9:DA:6F:BD:7B:86:61:22:1D:83:22:BD:AF:C1:2E:9C:53:C9:92:74:04:1F:48"}}},"request":{"raw":"GET /assets/logo.png HTTP/1.1\r\nHost: checknextpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 01 Aug 2026 08:38:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 8217\r\nlast-modified: Tue, 28 Jul 2026 09:04:24 GMT\r\netag: \"6a687098-2019\"\r\nexpires: Sun, 01 Aug 2027 08:38:40 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":8217,"size_decoded":8568,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"f5f6a58015fc97b12a0969673d640d32","sha1":"711376a7a0145973215d165cbc5ca6d04b1cfeba","sha256":"001e09e65485e42a1f968a65affef942f7ef0cfa8321a0520c7749255feca8e4","sha512":"c0e9b4bdafbbe5957c42551853e99d94c69ca19585f231453cb7d3eba769e26e1441499dc335dfaedd4cfb30928d1c50cf83ed30655406a9b5a4cd614506a389","ssdeep":"192:avY02lggcGiKWcolgHfSRIWCaWoVkQyF5PnYrsDt:aIgkiFcoKWxCaWo6QyXfBR","tlshash":"5a02bf1adbd1aa3da72d7b22010329a1738007c51ea31126c0107f5795f637cc1dcc9e","first_seen":"2025-06-17T10:18:12.433659Z","last_seen":"2026-08-01T08:40:44.737912Z","times_seen":19,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"checknextpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"checknextpay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/build/mui-aN3YpZsM.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:40.891Z","timestamp":1785573520891,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checknextpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 10:47:25 GMT","end":"Sat, 24 Oct 2026 10:47:24 GMT"},"fingerprint":{"sha1":"B2:B6:28:0F:AE:7D:90:26:51:0B:AB:66:A0:CE:6B:09:F6:06:0B:C3","sha256":"04:F9:C4:50:D9:CD:5B:C5:44:B9:DA:6F:BD:7B:86:61:22:1D:83:22:BD:AF:C1:2E:9C:53:C9:92:74:04:1F:48"}}},"request":{"raw":"GET /build/mui-aN3YpZsM.mjs HTTP/1.1\r\nHost: checknextpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/build/integration.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 01 Aug 2026 08:38:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Jul 2026 09:03:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a68707f-4bdf2\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":310770,"size_decoded":83789,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4178)","md5":"af4e473a276686b0bde13e8de01d6349","sha1":"7ed92de68326c0c9e73f16bf4d2d37d8c8ac59f7","sha256":"551d59ba5f40312bd8b5ac15e655c253cefae3643fa3a795dd573bab5e2186bd","sha512":"3fc6dd7a679df2be1783e663b8fd3fc8d91c1ad545b6b23aee70fe2ad623df372a1d62589a3d96e8faddb570f62ddc7b11fb9d71606020e4d78c2954f3530399","ssdeep":"3072:CpfmmQpzHI4aBX0brnymY/jW+CZpVxc9xacelNvgk:CpZeI44EvujW+yxc9xAlNx","tlshash":"2264c60966f120310513e0b95a1fcd1ab62955076e6efd68badc92682f4d03cd2f3bed","first_seen":"2026-05-11T00:12:38.992437Z","last_seen":"2026-08-01T08:40:44.73661Z","times_seen":8,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"checknextpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"checknextpay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/onest/v9/gNMKW3F-SZuj7xmb-HYoFIez1MLZPA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:40.950Z","timestamp":1785573520950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/onest/v9/gNMKW3F-SZuj7xmb-HYoFIez1MLZPA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://checknextpay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 14:10:44 GMT\r\nexpires: Thu, 29 Jul 2027 14:10:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 239276\r\nlast-modified: Tue, 09 Sep 2025 19:04:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":14236,"size_decoded":15049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14236, version 1.0","md5":"52c443f3e52d8b8b906f4f679d397c4b","sha1":"c8e2fe8ed389179f239f30b211d88a63f1c4dfd5","sha256":"c43fb45e8178433c5635a16699322d2ea2e2f00d831b3c515f0764cfd1425834","sha512":"45a3bb2e420f643ccc588787f4ce73a399391266cd0f50bb183cbe580fec1f38d7d0b8b0375f1a24a34472c7af1c3a0e7e01f06eaa42f348cd15898952f3382a","ssdeep":"192:sTGnuVLFwYGV+1vtVKYXSV2WjW9Y+u22BpkeUNv3pCo8xS2RCETF30QKfFHzx/Dr:AGnuHA8vt9OtW9cBIt3pC9EohMRd5B","tlshash":"5452c07a041153ed92b5f2f90b678b7389787519b188b2c3806a3d160364c69e3d8f3f","first_seen":"2025-03-20T06:58:10.031866Z","last_seen":"2026-08-01T08:40:44.720456Z","times_seen":448,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":20,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/unbounded/v12/Yq6W-LOTXCb04q32xlpwv8ZfvRQkSJZH09E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:40.957Z","timestamp":1785573520957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/unbounded/v12/Yq6W-LOTXCb04q32xlpwv8ZfvRQkSJZH09E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://checknextpay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31396\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 01 Aug 2026 08:38:41 GMT\r\nexpires: Sun, 01 Aug 2027 08:38:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:45:18 GMT\r\ncontent-type: font/woff2\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":31396,"size_decoded":32204,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31396, version 1.0","md5":"c0b6d60da574412c566fad21bdef4ea8","sha1":"829624d41f893c408eb216465b264239bae811eb","sha256":"648169b2446cfc17f3450aa3061ed58b68fbbf062a0a1811b8fce167b9f8f165","sha512":"71fd9292951a619af5ecb56ee8f4c2b9ef6a8cb15c800aca40e2770c62a8c803700922ef180529013b99b31ddf8b840b6bec0f9db206987e7dd50b2b1673fa96","ssdeep":"768:uxIdML0V8AJLWpvW9oOeckx3GKWx9stgrLWRLC:GPL0JJLWVWCh97k9ZvQW","tlshash":"16e2f1c10bebe99fc4c5577ab3490c98f7e91458289807b037cadcae1ca287955f874d","first_seen":"2025-02-11T21:57:21.432782Z","last_seen":"2026-08-01T08:51:37.463253Z","times_seen":375,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/unbounded/v12/Yq6W-LOTXCb04q32xlpwv8ZfvRQkSJZH09E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:40.960Z","timestamp":1785573520960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/unbounded/v12/Yq6W-LOTXCb04q32xlpwv8ZfvRQkSJZH09E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://checknextpay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31396\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 01 Aug 2026 08:38:41 GMT\r\nexpires: Sun, 01 Aug 2027 08:38:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 0\r\nlast-modified: Wed, 10 Sep 2025 16:45:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":31396,"size_decoded":32204,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31396, version 1.0","md5":"c0b6d60da574412c566fad21bdef4ea8","sha1":"829624d41f893c408eb216465b264239bae811eb","sha256":"648169b2446cfc17f3450aa3061ed58b68fbbf062a0a1811b8fce167b9f8f165","sha512":"71fd9292951a619af5ecb56ee8f4c2b9ef6a8cb15c800aca40e2770c62a8c803700922ef180529013b99b31ddf8b840b6bec0f9db206987e7dd50b2b1673fa96","ssdeep":"768:uxIdML0V8AJLWpvW9oOeckx3GKWx9stgrLWRLC:GPL0JJLWVWCh97k9ZvQW","tlshash":"16e2f1c10bebe99fc4c5577ab3490c98f7e91458289807b037cadcae1ca287955f874d","first_seen":"2025-02-11T21:57:21.432782Z","last_seen":"2026-08-01T08:51:37.463253Z","times_seen":375,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/assets/logo.png","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:41.326Z","timestamp":1785573521326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checknextpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 10:47:25 GMT","end":"Sat, 24 Oct 2026 10:47:24 GMT"},"fingerprint":{"sha1":"B2:B6:28:0F:AE:7D:90:26:51:0B:AB:66:A0:CE:6B:09:F6:06:0B:C3","sha256":"04:F9:C4:50:D9:CD:5B:C5:44:B9:DA:6F:BD:7B:86:61:22:1D:83:22:BD:AF:C1:2E:9C:53:C9:92:74:04:1F:48"}}},"request":{"raw":"GET /assets/logo.png HTTP/1.1\r\nHost: checknextpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 01 Aug 2026 08:38:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 8217\r\nlast-modified: Tue, 28 Jul 2026 09:04:24 GMT\r\netag: \"6a687098-2019\"\r\nexpires: Sun, 01 Aug 2027 08:38:41 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":8217,"size_decoded":8568,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"f5f6a58015fc97b12a0969673d640d32","sha1":"711376a7a0145973215d165cbc5ca6d04b1cfeba","sha256":"001e09e65485e42a1f968a65affef942f7ef0cfa8321a0520c7749255feca8e4","sha512":"c0e9b4bdafbbe5957c42551853e99d94c69ca19585f231453cb7d3eba769e26e1441499dc335dfaedd4cfb30928d1c50cf83ed30655406a9b5a4cd614506a389","ssdeep":"192:avY02lggcGiKWcolgHfSRIWCaWoVkQyF5PnYrsDt:aIgkiFcoKWxCaWo6QyXfBR","tlshash":"5a02bf1adbd1aa3da72d7b22010329a1738007c51ea31126c0107f5795f637cc1dcc9e","first_seen":"2025-06-17T10:18:12.433659Z","last_seen":"2026-08-01T08:40:44.737912Z","times_seen":19,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"checknextpay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"checknextpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/build/requests-erbSI-H8.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:41.959Z","timestamp":1785573521959,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checknextpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 10:47:25 GMT","end":"Sat, 24 Oct 2026 10:47:24 GMT"},"fingerprint":{"sha1":"B2:B6:28:0F:AE:7D:90:26:51:0B:AB:66:A0:CE:6B:09:F6:06:0B:C3","sha256":"04:F9:C4:50:D9:CD:5B:C5:44:B9:DA:6F:BD:7B:86:61:22:1D:83:22:BD:AF:C1:2E:9C:53:C9:92:74:04:1F:48"}}},"request":{"raw":"GET /build/requests-erbSI-H8.mjs HTTP/1.1\r\nHost: checknextpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/build/SolanaConnectComponent-DZ16DysV.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 01 Aug 2026 08:38:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Jul 2026 09:04:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a68708e-29fe7\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":172007,"size_decoded":38259,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2177)","md5":"0cbf48a2e3ae796e70da6453cc1e1b1b","sha1":"d05367e89e95146a827316fe7acea57ecf7828df","sha256":"a3fde7dac24687146ae78c5e464219fe3e83fb73a83f8584953aab58a25427e7","sha512":"32a13aef27fec321229eab6b7ddcedabd30e6eb715a8f28431395d066722bc30860a7d387b0f14cd13349b5309eea6b113463222785284c58acd0ed63852babc","ssdeep":"3072:GPsj/XP72/53Gc6U54vvhiQGHiSLdXqi1aQwGzn5UK+UzVIHbWqhvjaMZRVwnJEu:jj/XP72/53Gc6U54vvhiQGHiSLd6i1ai","tlshash":"6bf3638a6de324c0622bf438072f9845e166341b1e29fc0d745d96b48f5d62d0bfafb9","first_seen":"2026-08-01T08:39:24.359828Z","last_seen":"2026-08-01T08:40:44.738527Z","times_seen":2,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"checknextpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"checknextpay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-01T08:38:40.133Z","timestamp":1785573520133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checknextpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 10:47:25 GMT","end":"Sat, 24 Oct 2026 10:47:24 GMT"},"fingerprint":{"sha1":"B2:B6:28:0F:AE:7D:90:26:51:0B:AB:66:A0:CE:6B:09:F6:06:0B:C3","sha256":"04:F9:C4:50:D9:CD:5B:C5:44:B9:DA:6F:BD:7B:86:61:22:1D:83:22:BD:AF:C1:2E:9C:53:C9:92:74:04:1F:48"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: checknextpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 01 Aug 2026 08:38:40 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 28 Jul 2026 09:03:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a687079-4a24\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}],"data":{"size":18980,"size_decoded":4997,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"931e6e2b60c0216afbc8b1d66991ff56","sha1":"ce39fd0a4c3e5d78173de49f72d4e85fb957d2a9","sha256":"04d054b2562c23a0f65255d5fe6fb8f8a3907c7a7b8aca6615b17aa6ab604273","sha512":"040d7430e0102778935fc7471dedd2bd3e986cc23f490c7655390469d5bbc21e491b99f37f6108b44768ec9d4788163879a250d87b8da0782070c78e207f7efc","ssdeep":"192:XhfpIIyFShYZaiaSURl+uSdc/FS+8AOgoSHey4xBMsSO5SSGT:XjIIyFShYZvajRl+u//FHnODaeBMLFz","tlshash":"4382006064f954eb0106a4879d526f0a3ee5c5bfee6b1315327c1fad2fe2c00da2721e","first_seen":"2026-08-01T08:39:24.361425Z","last_seen":"2026-08-01T08:40:44.72911Z","times_seen":2,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":68,"connect":60,"send":0,"wait":60,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"checknextpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"checknextpay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/react@18.2.0/umd/react.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:40.814Z","timestamp":1785573520814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 17:56:32 GMT","end":"Fri, 09 Oct 2026 18:56:21 GMT"},"fingerprint":{"sha1":"81:08:7C:A2:AA:81:B4:77:02:EE:53:FB:23:6F:1D:97:C3:92:2E:A0","sha256":"13:42:07:B0:BF:53:83:27:C3:6E:69:00:B5:F0:1C:58:6C:AD:B4:DD:93:08:84:F0:97:51:3B:60:91:10:85:76"}}},"request":{"raw":"GET /react@18.2.0/umd/react.production.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 08:38:40 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a24387292e985fac-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 54575\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 01 Aug 2027 08:38:40 GMT\r\nlast-modified: Mon, 04 May 2026 22:25:52 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:S0lp+k7zWUMk2ixteM6HZvu8L9Eh//OVrt+ZfbCpmgY=:\r\nfly-request-id: 01KQAXJ3FPVDE7QQ3S4TZK9NQ7-arn\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":10737,"size_decoded":5133,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (630)","md5":"d86dcdbfed4c273c4742744941259902","sha1":"98089a33d0cf2fa4b3e1ba9b7eeb9b8ba0ac82a7","sha256":"4b4969fa4ef3594324da2c6d78ce8766fbbc2fd121fff395aedf997db0a99a06","sha512":"f10e98f579d36ce13e24dbe3050c09d87f12f94578b80ea1891ca485db48c83619d93a6b74d99639468a746cce872af8742ca4dbcece7a36cfbf097b96b7eaad","ssdeep":"96:DIxuZlZJFupWXpi0pGZBnXQd2q7s0ZiZmdUYe3egbwZqw8+mwoChzSBmqZTZ+Z33:kEXdMAFJdUTTE77tYHD4egFj2MFpKHc","tlshash":"6e22d5e4b952f0448a7338f1117f540f727eaea9b88c8d70a196d9d43db44ad9127f0e","first_seen":"2023-03-07T12:38:55Z","last_seen":"2026-08-01T11:08:41.542254Z","times_seen":17278,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":2,"connect":12,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/onest/v9/gNMKW3F-SZuj7xmf-HYoFIez1MI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:40.948Z","timestamp":1785573520948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/onest/v9/gNMKW3F-SZuj7xmf-HYoFIez1MI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://checknextpay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32208\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 11:24:18 GMT\r\nexpires: Fri, 30 Jul 2027 11:24:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 162862\r\nlast-modified: Tue, 09 Sep 2025 19:01:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":32208,"size_decoded":33021,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32208, version 1.0","md5":"9cdb51be2e29b501a14cbc9b8152bbcf","sha1":"7813caa219726084f6a3514450859166eed6148f","sha256":"ced809142b0957d88b6dc3c632dcfb6f1dc2031d90f7eb10b1a950b41fb5cd33","sha512":"f5deeffb56bb6de99dcfcd60432dc494f316afabe18d333f4d98a0c688d9b06d2de65e59b94aee4f872df75f9427a50bfc8d6efcdbaea0b8df1fd12aba6a926d","ssdeep":"768:vlgL8mMCNR5xTt9MU4LMDW5M1V2NS9+Ff6eh1aTJD00:vGLbMk5xTQ01ZRG1aTJD00","tlshash":"11e2e2f812a4fcc52f6a8f325bad1d1b8991ca3e64b1bfb55c1f81f940ab544041b7a1","first_seen":"2025-03-13T13:24:40.496268Z","last_seen":"2026-08-01T08:40:44.723074Z","times_seen":2636,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":25,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/onest/v9/gNMKW3F-SZuj7xmf-HYoFIez1MI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:40.953Z","timestamp":1785573520953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/onest/v9/gNMKW3F-SZuj7xmf-HYoFIez1MI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://checknextpay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32208\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 11:24:18 GMT\r\nexpires: Fri, 30 Jul 2027 11:24:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 162862\r\nlast-modified: Tue, 09 Sep 2025 19:01:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":32208,"size_decoded":33021,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32208, version 1.0","md5":"9cdb51be2e29b501a14cbc9b8152bbcf","sha1":"7813caa219726084f6a3514450859166eed6148f","sha256":"ced809142b0957d88b6dc3c632dcfb6f1dc2031d90f7eb10b1a950b41fb5cd33","sha512":"f5deeffb56bb6de99dcfcd60432dc494f316afabe18d333f4d98a0c688d9b06d2de65e59b94aee4f872df75f9427a50bfc8d6efcdbaea0b8df1fd12aba6a926d","ssdeep":"768:vlgL8mMCNR5xTt9MU4LMDW5M1V2NS9+Ff6eh1aTJD00:vGLbMk5xTQ01ZRG1aTJD00","tlshash":"11e2e2f812a4fcc52f6a8f325bad1d1b8991ca3e64b1bfb55c1f81f940ab544041b7a1","first_seen":"2025-03-13T13:24:40.496268Z","last_seen":"2026-08-01T08:40:44.723074Z","times_seen":2636,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":39,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.walletconnect.org/v1/supported-chains?st=appkit\u0026sv=html-wagmi%2Csolana-1.6.9\u0026projectId=7bbb65bc98212e6aba038aac8f98ff74","fqdn":"rpc.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"35.158.74.100","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:41.784Z","timestamp":1785573521784,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rpc.walletconnect.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Sat, 14 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:E6:43:A0:F8:F2:8D:21:9C:36:21:F5:DB:3B:F9:93:F7:7B:C4:8B","sha256":"09:1F:96:1E:4B:E3:8B:06:C3:8F:0A:2E:0F:79:E7:43:9C:B4:45:CC:26:0C:77:C5:50:CD:15:A8:7D:1D:83:DB"}}},"request":{"raw":"GET /v1/supported-chains?st=appkit\u0026sv=html-wagmi%2Csolana-1.6.9\u0026projectId=7bbb65bc98212e6aba038aac8f98ff74 HTTP/1.1\r\nHost: rpc.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checknextpay.com/\r\nOrigin: https://checknextpay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 01 Aug 2026 08:38:41 GMT\r\ncontent-type: application/json\r\ncontent-length: 1322\r\ncache-control: public, max-age=86400, s-maxage=86400\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\nx-request-id: 8be208ab-a4c2-43a2-85df-3d85214e0aca\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1322,"size_decoded":1663,"mime_type":"application/json","magic":"JSON text data","md5":"a786b1a9174036f8c50f3c48d2194a93","sha1":"ea04010041dcd524df04dd70cb1fdf71791c9b04","sha256":"2cf896eca188bec591f28b3b788e9392268f69865fc6e5516ba0dfd73211605d","sha512":"7fe4873aef1edb053c6cc012ca134a57b3eb8ec9fabb4a62d4dbe935f4172d42a7f22e53abab7d2f665addfc2c68dcd96be2b392c4bfaf47320f8d41a0ca5989","ssdeep":"","tlshash":"2121638c84800c40dcb4c388dbfce8db816ef01399cd289959f81cb045fd6b3365226a","first_seen":"2026-08-01T08:31:21.267181Z","last_seen":"2026-08-01T08:40:44.727014Z","times_seen":3,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":4,"connect":25,"send":0,"wait":27,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/build/SolanaConnectComponent-DZ16DysV.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:41.806Z","timestamp":1785573521806,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checknextpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 10:47:25 GMT","end":"Sat, 24 Oct 2026 10:47:24 GMT"},"fingerprint":{"sha1":"B2:B6:28:0F:AE:7D:90:26:51:0B:AB:66:A0:CE:6B:09:F6:06:0B:C3","sha256":"04:F9:C4:50:D9:CD:5B:C5:44:B9:DA:6F:BD:7B:86:61:22:1D:83:22:BD:AF:C1:2E:9C:53:C9:92:74:04:1F:48"}}},"request":{"raw":"GET /build/SolanaConnectComponent-DZ16DysV.mjs HTTP/1.1\r\nHost: checknextpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/build/index-D78iT8h3.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 01 Aug 2026 08:38:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Jul 2026 09:04:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a687093-270f9\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":159993,"size_decoded":43562,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (490)","md5":"01bc6bc49c87c25a708319d09612e252","sha1":"23cb69a142254f0c44e0baac41600645bc76ee67","sha256":"34ef9dc66d4e5cc72b00b8e535b2a1b0f24b425b1ba99f6f1d97a93f85a67c40","sha512":"99097c7da2bf841d6c39578a3d7c9d23cc847d45a8770384a187cdb847873b43654d438e566b90a3e9aedb24ab37578614a306f24d97ecb17a8a8e373245941a","ssdeep":"3072:n29T1gfxwUPVSjKV0VxWHgZakWqBhiXiolyyVRQAMdWYkCT8xAtIH:29T6nPVSjKV0VxWOjZpaAGH","tlshash":"d9f3b559a7f324348227f07a1a1fd819b229a40b358eee547e8c42945f4953cc7f6bec","first_seen":"2026-08-01T08:39:24.365712Z","last_seen":"2026-08-01T08:40:44.733995Z","times_seen":2,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"checknextpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"checknextpay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/build/connectors-CWtDSj7T.mjs","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:41.939Z","timestamp":1785573521939,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checknextpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 10:47:25 GMT","end":"Sat, 24 Oct 2026 10:47:24 GMT"},"fingerprint":{"sha1":"B2:B6:28:0F:AE:7D:90:26:51:0B:AB:66:A0:CE:6B:09:F6:06:0B:C3","sha256":"04:F9:C4:50:D9:CD:5B:C5:44:B9:DA:6F:BD:7B:86:61:22:1D:83:22:BD:AF:C1:2E:9C:53:C9:92:74:04:1F:48"}}},"request":{"raw":"GET /build/connectors-CWtDSj7T.mjs HTTP/1.1\r\nHost: checknextpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/build/index-CUTeqWhD.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 01 Aug 2026 08:38:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 41\r\nlast-modified: Tue, 28 Jul 2026 09:04:00 GMT\r\netag: \"6a687080-29\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":41,"size_decoded":343,"mime_type":"application/javascript","magic":"ASCII text","md5":"efc74bd93a86088993588f965c56d238","sha1":"1d94951245b86d53b87c680ab9ac39433006fe26","sha256":"d759293fe0280013a94611db5f12e07961b7094755ac3af6ad640226227c3212","sha512":"48d5aa6842a32436150697a74a728a42f57651896dc81223c76d588a16ee6ca65d82719dc1b5b3a11ec96c7b71d839573a1fe93687a55ad795a24f81f65c3dea","ssdeep":"","tlshash":"0f9004151051c3150011d345115cc41371104d54350f34c040cc0dd473134045410300","first_seen":"2026-05-11T00:12:39.041272Z","last_seen":"2026-08-01T08:40:44.727604Z","times_seen":8,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"checknextpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"checknextpay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apivin1.pro/user/metadata","fqdn":"apivin1.pro","domain":"apivin1.pro","tld":"pro"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:42.233Z","timestamp":1785573522233,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apivin1.pro","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 19:58:48 GMT","end":"Sun, 04 Oct 2026 19:58:47 GMT"},"fingerprint":{"sha1":"3F:9D:B7:49:88:9E:60:30:AC:D1:7E:5F:E9:9D:1B:89:BD:68:08:41","sha256":"7B:F7:8E:33:A1:63:D6:8B:C7:7E:3C:80:8F:AF:5F:DC:87:8C:79:19:5A:23:41:A7:1A:0D:36:DB:86:2C:78:B0"}}},"request":{"raw":"POST /user/metadata HTTP/1.1\r\nHost: apivin1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 334\r\nOrigin: https://checknextpay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":334,"data":"{\"payload\":\"U2FsdGVkX1/dmjDrI/5i0RKqnc+iAz/l7tPQLrbExRwCgpoV+XopM3xImdynaSGR8PUUgn5ZkYGSIX2y94OCNQVKj+YX/Qwq1nl4PPjda/On6EnGRqx6Avy5vUTxlUWNlYajeIHyXjWIbHj3Xke/aAaceYGoggKwkSkyZAb3s8BWQnSkf2utesTiPZjwC0dXW/6QRtf7TqSS3bcK9pQCqTQDfxwJKteonBUa8VbuZDN7ZajNIlB0zfBlp/dDjk/0mfZfLaL/B8byp7vMpm2bPfk7c9CGotSC4ulq1HY2cEcNWzMpcSCdcXyJ3l0CVofR\"}"}},"response":{"raw":"HTTP/2 201 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 01 Aug 2026 08:38:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 55\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"37-RbgkUIJIxHjVcbEnEtK2AB2SBvI\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":55,"size_decoded":322,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"52bac05f23aece6a51c8382534049e5a","sha1":"45b824508248c478d571b12712d2b6001d9206f2","sha256":"6e0aac68f5f33d1d067c3b406592da954b2485c0025b047ced608ccab0e6a141","sha512":"c67d8fb12337fb7719c4b2dfb76acfe4f3bf6eb25c558a814f2bb004102fef95fa648bd3554e201800ed4247c73fb378db1c0f7c92227ba67eb0206ee9af9d2a","ssdeep":"","tlshash":"f490020212816a254659068a72256241b41aa4744891b44aa49c440d824a56a9151552","first_seen":"2025-04-18T11:56:07.734963Z","last_seen":"2026-08-01T08:40:44.72465Z","times_seen":689,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"apivin1.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"apivin1.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Onest:wght@400;500;600;700;800\u0026family=Unbounded:wght@600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:40.810Z","timestamp":1785573520810,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Onest:wght@400;500;600;700;800\u0026family=Unbounded:wght@600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 01 Aug 2026 08:38:40 GMT\r\ndate: Sat, 01 Aug 2026 08:38:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12968,"size_decoded":1494,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fa573c69982839f7bc41e3f382b9d4e5","sha1":"8bfaa4eabf66c4ccf7d86e58f22cc6ca2fd8f8d5","sha256":"a4e0b5ff33ac77b72b6aecc3c6d1609a10b8d815ffd8fdb4c7727698e553463d","sha512":"052290182b7ca7c36aa9b102f72f52c6e38a5c01902506de7344dc30e51f9ea35d1e7bf32227dbac637e23142b69aa7b8ccfee1c96b6a19a0884c9ffc59ce92c","ssdeep":"192:iuy5GcEuhKGjNuInGmOuPAGFfu+FGAkVJdsy8r/Vadzh8EuVzda08xc:NM8UMPLaoAJ5","tlshash":"8242ca91442be404ef831cc133cf7f26ae4e51652445c5baaffe2ca8acaad36131975d","first_seen":"2026-08-01T08:39:24.368903Z","last_seen":"2026-08-01T08:40:44.742098Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":33,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checknextpay.com/assets/hero-aml-network.png","fqdn":"checknextpay.com","domain":"checknextpay.com","tld":"com"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:40.826Z","timestamp":1785573520826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checknextpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Jul 2026 10:47:25 GMT","end":"Sat, 24 Oct 2026 10:47:24 GMT"},"fingerprint":{"sha1":"B2:B6:28:0F:AE:7D:90:26:51:0B:AB:66:A0:CE:6B:09:F6:06:0B:C3","sha256":"04:F9:C4:50:D9:CD:5B:C5:44:B9:DA:6F:BD:7B:86:61:22:1D:83:22:BD:AF:C1:2E:9C:53:C9:92:74:04:1F:48"}}},"request":{"raw":"GET /assets/hero-aml-network.png HTTP/1.1\r\nHost: checknextpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checknextpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 01 Aug 2026 08:38:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 1581102\r\nlast-modified: Tue, 28 Jul 2026 09:04:23 GMT\r\netag: \"6a687097-18202e\"\r\nexpires: Sun, 01 Aug 2027 08:38:40 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1581102,"size_decoded":1581458,"mime_type":"image/png","magic":"PNG image data, 1717 x 916, 8-bit/color RGB, non-interlaced","md5":"4364610d335009bdb28620f4cf711d6a","sha1":"99778f217e8a991ad810ec4279d1738357b57c1f","sha256":"328923724b9861c8e964758a9143f25eeac4096c23059c28d345dc2a838d3b80","sha512":"9475edf36ef0d3dd645e317a105e27aa152e37db0509c0426ae0dd6bb5f6e7e278ae5c171c83a77f90f9a3bcc9f2092ef63327d73b74d9cfaac79fb4004cbb3f","ssdeep":"24576:JRbiwmkWRxcdMbxqprYBaD/BD7Fk0ztk8OXlcrCa8gyy/+aMi464f:iwtWDYMEprY6pDBk0fb5X4rf","tlshash":"b3253307dd367ac3ee50b6332bd354189036a07fd845f29fb1f1a6a06861e83176b25d","first_seen":"2026-08-01T08:39:24.371637Z","last_seen":"2026-08-01T08:40:44.740296Z","times_seen":2,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":314,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"checknextpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"checknextpay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/unbounded/v12/Yq6W-LOTXCb04q32xlpwu8ZfvRQkSJZH.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:40.959Z","timestamp":1785573520959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/unbounded/v12/Yq6W-LOTXCb04q32xlpwu8ZfvRQkSJZH.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://checknextpay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 16:23:00 GMT\r\nexpires: Thu, 29 Jul 2027 16:23:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 231340\r\nlast-modified: Wed, 10 Sep 2025 16:47:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":50928,"size_decoded":51741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50928, version 1.0","md5":"05d155aeb9312622bb55344a904c67a7","sha1":"7179f28585e79eb649070109ff59446ae8cadacf","sha256":"4b69ae920ef9fb5868c8255f5176e799e96d820db11a9e23da7de2ffd2af190b","sha512":"ce6260761e9fbaf82c95fe980b4bacc4dbbc96aecee4e5b70f7f57db488b29f7351c9a047be5a52de94a1e1bf05ffda15b4bd1ea59597d070ceda52ce51641d4","ssdeep":"1536:YavAFuYIsPewmVKgN/gy2DOZfOlgJeQ9nc:YavAcwmVK8x2yZf4gJeQ9c","tlshash":"2733028520f7291fc67232b74f68aaa4347163dea531d18e320970c8e9c665e6e3193a","first_seen":"2025-09-11T17:16:41.899057Z","last_seen":"2026-08-01T08:51:37.462657Z","times_seen":267956,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":54,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apivin1.pro/user/metadata","fqdn":"apivin1.pro","domain":"apivin1.pro","tld":"pro"},"ip":{"addr":"158.94.209.240","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://checknextpay.com/","date":"2026-08-01T08:38:42.235Z","timestamp":1785573522235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apivin1.pro","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 19:58:48 GMT","end":"Sun, 04 Oct 2026 19:58:47 GMT"},"fingerprint":{"sha1":"3F:9D:B7:49:88:9E:60:30:AC:D1:7E:5F:E9:9D:1B:89:BD:68:08:41","sha256":"7B:F7:8E:33:A1:63:D6:8B:C7:7E:3C:80:8F:AF:5F:DC:87:8C:79:19:5A:23:41:A7:1A:0D:36:DB:86:2C:78:B0"}}},"request":{"raw":"OPTIONS /user/metadata HTTP/1.1\r\nHost: apivin1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://checknextpay.com/\r\nOrigin: https://checknextpay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sat, 01 Aug 2026 08:38:42 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":302,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T11:16:09.048076Z","times_seen":17652088,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":0,"dns":85,"connect":61,"send":0,"wait":62,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"apivin1.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"apivin1.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}