{"report_id":"877c5c55-3e32-47de-9d98-ed509d1ac48c","version":6,"status":"done","tags":[],"date":"2025-11-07T16:04:14Z","url":{"schema":"https","addr":"trx-checks.com/","fqdn":"trx-checks.com","domain":"trx-checks.com","tld":"com"},"ip":{"addr":"172.86.67.69","port":0,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"trx-checks.com/","fqdn":"trx-checks.com","domain":"trx-checks.com","tld":"com"},"title":"Bybit Audit","dom":{"size":22436,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"c7aea9ee77a588078da1f6de10a9f219","sha1":"30e6a6df1a3861251b8f30bc045b1789eb24f567","sha256":"9a5ef4aa7817b3265c1f6e5daf833ff934899c24ee169157144c4a91d19c1038","sha512":"2b7e60ceb93e62ce6ee093a692d8d7bf1565590672064b1118ad2cf920420228cddf3c0a6bc9a88eab7574f16ee52d286a05d66f9c66907ce6486fdd350071aa","ssdeep":"384:4K0FBuEleJxxxxAxIEBuN44lWV0WigBS/iJiD:4K0FgEleJxxxxAxI0LiMS/iQD","tlshash":"96a2325552f310526643e0a82ff75b0a3664a407d50add283fec66d88fcb9e5dea3388","dom_hash":"domhash53263340bdc58b36c1552f8742d281b3","first_seen":"2025-11-07T14:30:10.267542Z","last_seen":"2025-11-07T16:04:17.667616Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"trx-checks.com/","fqdn":"trx-checks.com","domain":"trx-checks.com","tld":"com"},"ip":{"addr":"172.86.67.69","port":0,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"tags":["openphish"],"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-12T16:04:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"trx-checks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"trx-checks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"trx-checks.com","ip":{"addr":"172.86.67.69","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"domain_registered":"2025-11-05","domain_rank":0,"first_seen":"2025-11-07T14:30:06.004162Z","last_seen":"2025-11-07T14:30:06.004163Z","alert_count":21,"request_count":11,"received_data":114088,"sent_data":4839,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trx-checks.com/","fqdn":"trx-checks.com","domain":"trx-checks.com","tld":"com"},"ip":{"addr":"172.86.67.69","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"b905a9026fed006441dd20205b6f8274","sha1":"5602d911881a4bf41ba55616aa2a84076c9d5ba0","sha256":"cbf6f207940a94cdae5f5f3b0a48dbcbc39e35d6d1f17b306e99f49fe97ea7c2","sha512":"aa254dacb366e22bdae637a77f2fa424695f9f6bc22a74946ff075cc59013cab4c9e8be05df7d5e7c42d88bb1136d844a52bfe6f4c151ce683bc0ae3da379925","ssdeep":"","tlshash":"7bc02b3771b518f004e7b16e130b870010220043080086013f0c8dd14f108540821141","size":137,"data":"","first_seen":"2025-08-28T16:45:25.997504Z","last_seen":"2026-02-11T04:39:12.550639Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trx-checks.com/","fqdn":"trx-checks.com","domain":"trx-checks.com","tld":"com"},"ip":{"addr":"172.86.67.69","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb090c11d4bb01b2a53b853971291ea7","sha1":"ad6b88cc7735f453bc890d8ba885f5efcf3e092c","sha256":"81390a1a4c774c26fa1c10548c3be76bb6431ebb5a2c63b63512f53fcbfc1332","sha512":"63cddf2aa8d23131e7708810ca8f40421f1eb34e94b694f6392da466e95171e9c5f5ab792ab92e9a51d88069a39ef6cd63b31c4a5724eff3b7173eba246ae0b6","ssdeep":"","tlshash":"c2219d84b5fb3120401772bc47876669601c753f301c4e417e6c6562bf90176ef83be8","size":1407,"data":"","first_seen":"2025-08-28T16:45:25.999756Z","last_seen":"2026-02-11T04:39:12.551231Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trx-checks.com/","fqdn":"trx-checks.com","domain":"trx-checks.com","tld":"com"},"ip":{"addr":"172.86.67.69","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"138945350aabf997bdbc1416379ee3ba","sha1":"983968fd423ff29b2fb9c4e163e22b577f93aabd","sha256":"ec299cfb2e6863359be68816ddfd4eac12fae13809666e050ce16aebffcd032e","sha512":"0be0d3deb765400ea8796ac7516d21fcfc9ef1a87afad87b4065f387af4281f311288eca2f13c28f838716cf1a9d850a1ffa1b01e7c713a370fc91be49f2556e","ssdeep":"","tlshash":"1651746823e0a134c3239145d69bb7457230b00ba8d5686a3d0c40cc1fdd9b68ad76eb","size":2971,"data":"","first_seen":"2025-11-07T14:30:10.281977Z","last_seen":"2025-11-07T16:04:17.676413Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trx-checks.com/","fqdn":"trx-checks.com","domain":"trx-checks.com","tld":"com"},"ip":{"addr":"172.86.67.69","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-07T16:03:52.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx-checks.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Nov 2025 11:39:19 GMT","end":"Tue, 03 Feb 2026 11:39:18 GMT"},"fingerprint":{"sha1":"8B:BB:90:1B:9A:70:F1:7E:3C:EE:27:92:AE:2B:49:26:F1:AE:FE:84","sha256":"08:1B:17:B5:88:61:AA:AE:03:E3:AA:53:9A:69:AD:99:3A:8E:D6:09:B9:C1:08:6B:09:B8:B3:FB:1F:D1:64:F2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trx-checks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Nov 2025 16:03:52 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 05 Nov 2025 12:37:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690b44fa-5ac5\"\r\ncache-control: no-store\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23237,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"ba8affec2b5878cd8a29f5aabc2127ce","sha1":"0d4d121f5f34062e2933fee2ecf7f5f089c49020","sha256":"7ccd16e4e42b9284bad9621eeebaf8261954986a1b48991eb6a739ce6a1e0486","sha512":"eae1eb6860f17e4d95cbe52e35aa5e381fc1371ecfcb58ef715aba10e9ba32357d2b99d0634a42a216c56a988761c7c9fe4e3e7d6d1c79413a24041d69750f0e","ssdeep":"384:htHVgzxxxxbIESB4UXUvercO8ilr+/udiV:DVgzxxxxbIEuv7R+/uMV","tlshash":"d9a21d2492c16002a133d2a8afa31b1efb595057934691283fec67964ffb954de63fcc","first_seen":"2025-11-07T14:30:10.275149Z","last_seen":"2025-11-07T16:04:17.668539Z","times_seen":2,"resource_available":false,"data":null}},"time_used":638,"timings":{"blocked":307,"dns":257,"connect":20,"send":0,"wait":20,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"trx-checks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"trx-checks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trx-checks.com/img/logo.svg","fqdn":"trx-checks.com","domain":"trx-checks.com","tld":"com"},"ip":{"addr":"172.86.67.69","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx-checks.com/","date":"2025-11-07T16:03:52.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx-checks.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Nov 2025 11:39:19 GMT","end":"Tue, 03 Feb 2026 11:39:18 GMT"},"fingerprint":{"sha1":"8B:BB:90:1B:9A:70:F1:7E:3C:EE:27:92:AE:2B:49:26:F1:AE:FE:84","sha256":"08:1B:17:B5:88:61:AA:AE:03:E3:AA:53:9A:69:AD:99:3A:8E:D6:09:B9:C1:08:6B:09:B8:B3:FB:1F:D1:64:F2"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: trx-checks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trx-checks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Nov 2025 16:03:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 05 Nov 2025 12:37:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690b44fa-5bc\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1468,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e592090eed1fb82a0f2fa307fd4defd","sha1":"aed6448de92999c50b5684867c133fe2f38f47c6","sha256":"05197bc478bf477d3fb7f4b7f2e87a8c81501fe5be9fcc1700eeebf0ba0a0847","sha512":"ad1a202cb1c39b0dcb0e401714299ef0cf5ee72005c32af0b78d795af2a4521bdd8396421a9bd992ad082a716b3f23d7b7ff95f6736e6120d16a6b57b66070b7","ssdeep":"","tlshash":"133112ca73e9e6d4c644aba442697e3b702171f69dc5a350cf526a0734d440f08d4de8","first_seen":"2023-05-21T17:02:57Z","last_seen":"2026-07-26T04:20:56.513031Z","times_seen":164,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"trx-checks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"trx-checks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trx-checks.com/img/fast.svg","fqdn":"trx-checks.com","domain":"trx-checks.com","tld":"com"},"ip":{"addr":"172.86.67.69","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx-checks.com/","date":"2025-11-07T16:03:52.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx-checks.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Nov 2025 11:39:19 GMT","end":"Tue, 03 Feb 2026 11:39:18 GMT"},"fingerprint":{"sha1":"8B:BB:90:1B:9A:70:F1:7E:3C:EE:27:92:AE:2B:49:26:F1:AE:FE:84","sha256":"08:1B:17:B5:88:61:AA:AE:03:E3:AA:53:9A:69:AD:99:3A:8E:D6:09:B9:C1:08:6B:09:B8:B3:FB:1F:D1:64:F2"}}},"request":{"raw":"GET /img/fast.svg HTTP/1.1\r\nHost: trx-checks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trx-checks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Nov 2025 16:03:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 507\r\nlast-modified: Wed, 05 Nov 2025 12:37:14 GMT\r\netag: \"690b44fa-1fb\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":507,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"83087e67a4866c16085ec95bd2187e21","sha1":"134ecb79756ac373650c7737fce5105b39f081ce","sha256":"2ba6dab223ae3928b3c3dbd26e7c8a5449e2c894ade64705820b7b7d3014857a","sha512":"8cea2b2cee8427318f41b1dfbdc610b97a9a8584f47b6b89cea75f2af29259b7d76d99192059403e3fea5c9107d3e14cc1d6c9cbf579652930ba37a07ae30977","ssdeep":"","tlshash":"a9f0e9f56418774c8a2b6311e2a8e59fc31e30fd758d0cd9a46c29f4e442d87da03ea4","first_seen":"2025-06-22T10:33:59.651011Z","last_seen":"2026-03-02T20:27:24.01297Z","times_seen":65,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"trx-checks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"trx-checks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trx-checks.com/img/trx.svg","fqdn":"trx-checks.com","domain":"trx-checks.com","tld":"com"},"ip":{"addr":"172.86.67.69","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx-checks.com/","date":"2025-11-07T16:03:52.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx-checks.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Nov 2025 11:39:19 GMT","end":"Tue, 03 Feb 2026 11:39:18 GMT"},"fingerprint":{"sha1":"8B:BB:90:1B:9A:70:F1:7E:3C:EE:27:92:AE:2B:49:26:F1:AE:FE:84","sha256":"08:1B:17:B5:88:61:AA:AE:03:E3:AA:53:9A:69:AD:99:3A:8E:D6:09:B9:C1:08:6B:09:B8:B3:FB:1F:D1:64:F2"}}},"request":{"raw":"GET /img/trx.svg HTTP/1.1\r\nHost: trx-checks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trx-checks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Nov 2025 16:03:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 05 Nov 2025 12:37:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690b44fa-4cd\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1229,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"258fab0fbbce8d77e60e3a1cbd6ea62b","sha1":"dcfa67e34475123ea688ee52d5de3120cca6bce6","sha256":"922e7a50a737981acf927108f361770898e4bde3a1427fb67b31ef808001dd7f","sha512":"1fab25b028c9c56e0f3f9d1bee764dfac691eda77ec30dee5f964f8572b70cbefc8071768d91b46bf49a7697361ec3a7f87749dbb8de98cc3e4241f8af779f35","ssdeep":"","tlshash":"f32151ed07e8c8cbcc14eba19b06b0bc3146e0ba96c01518e798ca5c098a4af6911fd4","first_seen":"2025-06-22T10:33:59.714169Z","last_seen":"2026-02-11T04:39:12.540867Z","times_seen":62,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"trx-checks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"trx-checks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trx-checks.com/img/fail.png","fqdn":"trx-checks.com","domain":"trx-checks.com","tld":"com"},"ip":{"addr":"172.86.67.69","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx-checks.com/","date":"2025-11-07T16:03:52.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx-checks.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Nov 2025 11:39:19 GMT","end":"Tue, 03 Feb 2026 11:39:18 GMT"},"fingerprint":{"sha1":"8B:BB:90:1B:9A:70:F1:7E:3C:EE:27:92:AE:2B:49:26:F1:AE:FE:84","sha256":"08:1B:17:B5:88:61:AA:AE:03:E3:AA:53:9A:69:AD:99:3A:8E:D6:09:B9:C1:08:6B:09:B8:B3:FB:1F:D1:64:F2"}}},"request":{"raw":"GET /img/fail.png HTTP/1.1\r\nHost: trx-checks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trx-checks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Nov 2025 16:03:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 9821\r\nlast-modified: Wed, 05 Nov 2025 12:37:14 GMT\r\netag: \"690b44fa-265d\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9821,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"318f89bd9ccd1755bd8d0c8516bed8a4","sha1":"d8da3a48814d6d7aef1e733b867310c492c9cf99","sha256":"efdacd559f79382d54a545baa37899e9140d1fd51d0c6bd84b0a01ec9fa983ad","sha512":"5ee2dbe597a1a7b4232e8bf232a4bbc0af035f11384eb3d84196c75fddc93a6371bcd6e02e24e4ded01b3869373b6e25b8ed86bfe009ea04c11390dd8ffd8c82","ssdeep":"192:cS18zXmIPMDH/vxe3bQ+IWpp2MpArKRFMOtuNDQrxwvXZrHeBmecP+NMZz9nbz:b18zXmBDnwdDpsrgLtei6fteBmDP+NMD","tlshash":"ad12bf5cc3562eba893dc037cf1aa643b06ba787d3c2c65c609b1415feb485a4b13d1b","first_seen":"2025-06-22T10:33:59.694437Z","last_seen":"2026-03-02T20:27:23.98715Z","times_seen":62,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"trx-checks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"trx-checks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trx-checks.com/img/done.png","fqdn":"trx-checks.com","domain":"trx-checks.com","tld":"com"},"ip":{"addr":"172.86.67.69","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx-checks.com/","date":"2025-11-07T16:03:52.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx-checks.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Nov 2025 11:39:19 GMT","end":"Tue, 03 Feb 2026 11:39:18 GMT"},"fingerprint":{"sha1":"8B:BB:90:1B:9A:70:F1:7E:3C:EE:27:92:AE:2B:49:26:F1:AE:FE:84","sha256":"08:1B:17:B5:88:61:AA:AE:03:E3:AA:53:9A:69:AD:99:3A:8E:D6:09:B9:C1:08:6B:09:B8:B3:FB:1F:D1:64:F2"}}},"request":{"raw":"GET /img/done.png HTTP/1.1\r\nHost: trx-checks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trx-checks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Nov 2025 16:03:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 9345\r\nlast-modified: Wed, 05 Nov 2025 12:37:14 GMT\r\netag: \"690b44fa-2481\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9345,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"244c520b68d55cef3cf6b66b9967e047","sha1":"fd4d708991659fb45503cf522bcdd81128fa84ea","sha256":"8eb0164564fdf89ac1721256974a0c97f84ce3cef63029112caff54a6be9825f","sha512":"85bf2ea758a50ab61f63cb8c30a63dc77c1fc929a26cb74b9966acf089bb0721a77270d9abbb12593efde2e86d9ddc032ab4809c301baf648713b2e6a286fbed","ssdeep":"192:cSifj4E69BXoxfBS++0xKUHAFhy57mYFZR/gNvhl4glOXp/YbRr5kY32EAf:bifj4Dz+pBYUmhqTpINvQSOGbRVNmdf","tlshash":"d312afd8c69e40ad50e4ef3e9e9ee09d745316c1408308e46204ddf8fc28a85a7ebf97","first_seen":"2025-07-23T16:15:52.393936Z","last_seen":"2026-02-11T04:39:12.542239Z","times_seen":62,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"trx-checks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trx-checks.com/img/dot.png","fqdn":"trx-checks.com","domain":"trx-checks.com","tld":"com"},"ip":{"addr":"172.86.67.69","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx-checks.com/","date":"2025-11-07T16:03:52.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx-checks.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Nov 2025 11:39:19 GMT","end":"Tue, 03 Feb 2026 11:39:18 GMT"},"fingerprint":{"sha1":"8B:BB:90:1B:9A:70:F1:7E:3C:EE:27:92:AE:2B:49:26:F1:AE:FE:84","sha256":"08:1B:17:B5:88:61:AA:AE:03:E3:AA:53:9A:69:AD:99:3A:8E:D6:09:B9:C1:08:6B:09:B8:B3:FB:1F:D1:64:F2"}}},"request":{"raw":"GET /img/dot.png HTTP/1.1\r\nHost: trx-checks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trx-checks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Nov 2025 16:03:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 50653\r\nlast-modified: Wed, 05 Nov 2025 12:37:14 GMT\r\netag: \"690b44fa-c5dd\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 424, 8-bit/color RGBA, non-interlaced","md5":"3f32a7713666bd5e6291f4f77bbdf8ab","sha1":"2fbee7f161fde2fa84525c5887ffd497f494b389","sha256":"3ae6ade587e89bc93b63f0195aecd8197ee4d33e131002a26e9d571d81e45d34","sha512":"d82bbdb33ec1a9f724230a19490380c2b05037e4336a26a9521f327f3c7c48e1fd01a5647339738c526e5b365bca51be7fd9b2fa243cfb80cae60adda2b0e97e","ssdeep":"768:koA04+DiQ29zPrMpm3R1UMoGQfNKT8MHV/8Wzy3JPrOh+8w5KcJqR:3xJi1Km3kWQfUT/1/8Sy3JDO+KuqR","tlshash":"7c33f25a4150dd2ffac8507cb34493bd0b22d24be7b15810abb9440b8d5a6d3dc8ddbe","first_seen":"2025-06-22T10:33:59.67159Z","last_seen":"2026-03-02T20:27:23.998561Z","times_seen":57,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"trx-checks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"trx-checks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trx-checks.com/img/icon.png","fqdn":"trx-checks.com","domain":"trx-checks.com","tld":"com"},"ip":{"addr":"172.86.67.69","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx-checks.com/","date":"2025-11-07T16:03:52.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx-checks.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Nov 2025 11:39:19 GMT","end":"Tue, 03 Feb 2026 11:39:18 GMT"},"fingerprint":{"sha1":"8B:BB:90:1B:9A:70:F1:7E:3C:EE:27:92:AE:2B:49:26:F1:AE:FE:84","sha256":"08:1B:17:B5:88:61:AA:AE:03:E3:AA:53:9A:69:AD:99:3A:8E:D6:09:B9:C1:08:6B:09:B8:B3:FB:1F:D1:64:F2"}}},"request":{"raw":"GET /img/icon.png HTTP/1.1\r\nHost: trx-checks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trx-checks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Nov 2025 16:03:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 2015\r\nlast-modified: Wed, 05 Nov 2025 12:37:14 GMT\r\netag: \"690b44fa-7df\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2015,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"052374b43a2a8bf7a0c661ec08d19918","sha1":"f4b3334409917f14dd09018f8078897f53c24dd8","sha256":"08c694f640edd49c3e1bb391c5e52b064cfbe590a6aef5e0c1f72a228be4dab1","sha512":"db6c05cee45bec5195e2ae490e0b11511e1cbb945eea854063fb20778639d8945839d135a4d1d317ccc6e6871d96d695070d52486963f5859d6446cc425919bf","ssdeep":"","tlshash":"45412d5239ed4d79d4ec9132910b973d38659ff3131733d42451b1686224f6ba20bdb2","first_seen":"2025-06-22T10:33:59.706214Z","last_seen":"2026-02-22T19:17:44.732012Z","times_seen":61,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"trx-checks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"trx-checks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trx-checks.com/img/big.svg","fqdn":"trx-checks.com","domain":"trx-checks.com","tld":"com"},"ip":{"addr":"172.86.67.69","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx-checks.com/","date":"2025-11-07T16:03:52.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx-checks.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Nov 2025 11:39:19 GMT","end":"Tue, 03 Feb 2026 11:39:18 GMT"},"fingerprint":{"sha1":"8B:BB:90:1B:9A:70:F1:7E:3C:EE:27:92:AE:2B:49:26:F1:AE:FE:84","sha256":"08:1B:17:B5:88:61:AA:AE:03:E3:AA:53:9A:69:AD:99:3A:8E:D6:09:B9:C1:08:6B:09:B8:B3:FB:1F:D1:64:F2"}}},"request":{"raw":"GET /img/big.svg HTTP/1.1\r\nHost: trx-checks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trx-checks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Nov 2025 16:03:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 05 Nov 2025 12:37:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690b44fa-291e\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10526,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7d6a36fb03eec6fc719fbef3794794c5","sha1":"a7dcedf82f5b2c53d8932fe537d0042e0634a65f","sha256":"b1b26deaa3b37fa1af0b53df25d0e3ebd6cc1541223b4ac8ff2df5252d59239f","sha512":"353cbd32389ae71701380eb6f8a584b11ba1bdbac05666e76d9fa067a486deda27bb03dc93e00ad86ca8cb3c00adada517f47c47fb4efbe152ec466859825f4d","ssdeep":"96:ay7CTqN955Sjlcm/A6S5EbuxGxQxQy19hA8uFjR9qrvcEQF5K0aCHBmSCyx8WSL:aq5Y58A6ztuR93F5K0agBmSBxm","tlshash":"ee2240cb671cddfca81b056cef61b56a173fa1a8720e61c4a47ede35021394de62bc80","first_seen":"2025-06-22T10:33:59.717929Z","last_seen":"2026-03-02T20:27:24.019053Z","times_seen":66,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"trx-checks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"trx-checks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trx-checks.com/img/pdf.svg","fqdn":"trx-checks.com","domain":"trx-checks.com","tld":"com"},"ip":{"addr":"172.86.67.69","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx-checks.com/","date":"2025-11-07T16:03:52.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx-checks.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Nov 2025 11:39:19 GMT","end":"Tue, 03 Feb 2026 11:39:18 GMT"},"fingerprint":{"sha1":"8B:BB:90:1B:9A:70:F1:7E:3C:EE:27:92:AE:2B:49:26:F1:AE:FE:84","sha256":"08:1B:17:B5:88:61:AA:AE:03:E3:AA:53:9A:69:AD:99:3A:8E:D6:09:B9:C1:08:6B:09:B8:B3:FB:1F:D1:64:F2"}}},"request":{"raw":"GET /img/pdf.svg HTTP/1.1\r\nHost: trx-checks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trx-checks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Nov 2025 16:03:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 05 Nov 2025 12:37:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690b44fa-500\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1280,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b35d92bfa90cd0d492ed30ac77c80ead","sha1":"59d952c9f0495552bc8656ccea7a9887ff5dc859","sha256":"f5b24f521717e9e2e197d4ffcaeee416cabd36e6b282f4365dca64e51fa2f37a","sha512":"87e815bf47535c039672cbc0dab4fc37359affaab20c27875f33c24257dc0786e938e562f04faf717ade6e722c0d29e2ad2b612e0038df77ba5b223948cc674f","ssdeep":"","tlshash":"5021f0e2266800dd5a5a8695bf39b5c5438d60ea72af85c6895d0fbcd40ddd4f213a40","first_seen":"2025-06-22T10:33:59.647863Z","last_seen":"2026-03-02T20:27:24.010422Z","times_seen":65,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"trx-checks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"trx-checks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trx-checks.com/img/time.svg","fqdn":"trx-checks.com","domain":"trx-checks.com","tld":"com"},"ip":{"addr":"172.86.67.69","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx-checks.com/","date":"2025-11-07T16:03:52.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx-checks.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Nov 2025 11:39:19 GMT","end":"Tue, 03 Feb 2026 11:39:18 GMT"},"fingerprint":{"sha1":"8B:BB:90:1B:9A:70:F1:7E:3C:EE:27:92:AE:2B:49:26:F1:AE:FE:84","sha256":"08:1B:17:B5:88:61:AA:AE:03:E3:AA:53:9A:69:AD:99:3A:8E:D6:09:B9:C1:08:6B:09:B8:B3:FB:1F:D1:64:F2"}}},"request":{"raw":"GET /img/time.svg HTTP/1.1\r\nHost: trx-checks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trx-checks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Nov 2025 16:03:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 923\r\nlast-modified: Wed, 05 Nov 2025 12:37:14 GMT\r\netag: \"690b44fa-39b\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":923,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c41ceccd15d8ecf7798b1e7592e30136","sha1":"2571c4c1141909ee19ffce298139d66986a3249a","sha256":"3c777256fb463bca7d0c5a71d92dfd8a9e7098cdf2c742a58527253dc4c0afa2","sha512":"b732a8d2a434e10962c47def834de840fc236e9fe683f3f33cefc28343c874df3dd73ec54e979d9998c67071c9e2863f35362cc8e10a5b6a41f3bdc6abdfd9b4","ssdeep":"","tlshash":"c71134f1b82c45bc4a1293913b79d18c9769a1ad77ff8cb5ad4c0ab45043ea4fa03d85","first_seen":"2025-06-22T10:33:59.668275Z","last_seen":"2026-03-02T20:27:24.014257Z","times_seen":65,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"trx-checks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"trx-checks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}