{"report_id":"8b374a10-26ae-4915-82b0-32823abc2e36","version":0,"status":"done","tags":[],"date":"2026-08-17T14:06:56Z","url":{"schema":"https","addr":"buytrrxx.club/","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"172.67.213.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"buytrrxx.club/","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"title":"TRON Energy Rental | Simple and Secure","dom":{"size":16274,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14970)","md5":"f37a403d286e279665d185e8532f581e","sha1":"5dfd2f59d610014337e23a851a35b77cee897128","sha256":"8a7257d67f271ae98ddc81dc7c70852711a8cacaea97ed8b38d273c1a4c4b17a","sha512":"f90eedc579a3126bd34d18903252818e0012cd8ecb3c1e7c0719eba687199c23aa1fb2927fac493df6e79d5a86cba130d6477742592ec1c1b7b57d00bac5e3aa","ssdeep":"192:mJeTpxkq7C9Vj1ce3RbTBuYTI+ZAeSPkXKuyuOafu87q+No:m+px6TZ2Plup287o","tlshash":"8372c670106616bea1738bd4fae5a76d60bdd30ed9234a8c73fd50662fc3cca6c5a106","dom_hash":"domhashbf806045cb35555e5dc54fc06343f39a","first_seen":"2026-08-17T14:04:39.097156Z","last_seen":"2026-08-17T14:07:02.28854Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"buytrrxx.club/","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"172.67.213.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-21T14:06:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"buytrrxx.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-16T22:23:57.509837Z","alert_count":0,"request_count":1,"received_data":2427,"sent_data":513,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-08-16T22:53:44.913224Z","alert_count":0,"request_count":4,"received_data":5244,"sent_data":4978,"comment":"","tags":null,"fingerprints":null},{"fqdn":"buytrrxx.club","ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-10","domain_rank":0,"first_seen":"2026-08-17T14:04:34.037952Z","last_seen":"2026-08-17T14:04:34.037952Z","alert_count":21,"request_count":21,"received_data":3053908,"sent_data":11199,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-08-16T23:40:16.580041Z","alert_count":0,"request_count":1,"received_data":613,"sent_data":1727,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-16T22:20:46.906465Z","alert_count":0,"request_count":1,"received_data":32833,"sent_data":559,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-16T22:33:33.289447Z","alert_count":0,"request_count":1,"received_data":462270,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"buytrrxx.club/","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2470ab2b337ec0b5426c73024e9bfb6d","sha1":"9e3412932569766cffc7cbfef75b4cd0b7b410ef","sha256":"48f926d436a03cc79a773ea8a535a434f2326d3b307bde98de8970b4f30056a8","sha512":"af05f72912f2729635c62295446c6b21d0e6348eba3e83baa54c01a7a21a5a368340420d656386c7c0548475ec2e5b971a38190c702577c66d5392e815c562b7","ssdeep":"","tlshash":"eae0977c15c9102958b3323ca06f56e03833842360289a01fc2c82200f21e6b0150fc8","size":323,"data":"","first_seen":"2026-08-17T14:04:39.148784Z","last_seen":"2026-08-18T07:29:37.615734Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a351cace74664607922c8a681143de2","sha1":"3752a76fc71408325fd5079c314fc7471dbbba4e","sha256":"c45769c4d5f0a8a2a7091bcb06105974aa5cf7b0d09170a67ad54018db9d3095","sha512":"762ae66f7da26cf680712fcd917de6a9df8b5596a213426fdbb505135eb77755630189b90ff79b337f9ec2f38a1a296c93a68a9335a8c6682eff9cd0fa1f98eb","ssdeep":"","tlshash":"fac08c88210b0c7145eb2a068b6fa608b019225294a18931391f22444f11d0bd758854","size":187,"data":"","first_seen":"2026-08-17T14:04:39.150412Z","last_seen":"2026-08-18T07:29:37.61651Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"522b2efc07d90d2e841b5045b4f091cd","sha1":"5a4eabaa0cadc02801940e28c7a4394951d8c792","sha256":"ce69d9216fec9f869a76a915a236dd3d00f92f88277222b4cf04835c51b695c1","sha512":"4c13a584b03df3abaa3d40b63dc0a2443d0b3708bd2ff9a37fede494dca67f007925eb232febdf6420caa226f726c3cddc678288aac9bbf936701ef99faca952","ssdeep":"","tlshash":"cdc02bd598150089c87bd51b8a05084c416001c388032c8a764ce2005fc7c0dc121f37","size":183,"data":"","first_seen":"2026-08-17T14:04:39.152142Z","last_seen":"2026-08-18T07:29:37.617172Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/_next/static/K4tR_6i62b0fLGWpnGMjT/_buildManifest.js","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"afe057eeef28ee99d9f4f5cd2365d7a7","sha1":"4bd4c69f4e9196d44f51d88a09c6f91588dc0ecd","sha256":"78fec233875a2dc817a63f5cbf03aa3b914d44ad85cdf855b944ccad39c0ee73","sha512":"3a5ec2cc6cd1d8547dc7d6369a96bd0059d1bfec9f364738f530815bab17282452c728fd7605a55d790baf200d12545f7fa8752d713ff9003cab2e03178d4fc6","ssdeep":"","tlshash":"e1414c838425653126a6ccf970362f1a89626df2f6391146a5ddcfad0079bbdcb80c26","size":2179,"data":"","first_seen":"2026-08-17T14:04:39.126044Z","last_seen":"2026-08-17T14:07:02.296777Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/_next/static/K4tR_6i62b0fLGWpnGMjT/_ssgManifest.js","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-08-21T10:31:53.859941Z","times_seen":254664,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18381311821","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"636c969290603d89a5753af58ac401a7","sha1":"dde449eb774d141d4ddde900e4f478e0a5ee6e82","sha256":"2ae30d9857ffc9d82db69609c2052a0b5fe7ddd91273a9493b3e40fad57b9ef1","sha512":"9dccd08045982a834f1b10c6a89a46b202575807b192efb9f6c20e6c8e87535e601da502794bfacaecfa215b48d50b095b4a885fe83d705bd65e67e182ea7f56","ssdeep":"6144:nO/BD/1ESGC0AX3iRx9rOJYhcgLsegErl3POi6mQMAsPasHgN:nORAxAX+xM3mGEasHK","tlshash":"c4a4e7cdb3d670629396f478503f01cba57a29e2b44cc899f189d8e42e7469a4237f7c","size":461666,"data":"","first_seen":"2026-08-17T14:04:39.113381Z","last_seen":"2026-08-17T14:07:02.306075Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/_next/static/chunks/826.51a0311addc6deaa.js","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d69f3a7a9951df7032a422765a9629c","sha1":"66cf75dea450a1eaf576139d44dc011d106d39fe","sha256":"236a4ed5c1d554bdb6bafb91872568da5f93d343cfbe3a3d0fac05a0d92bcac8","sha512":"7e8178f444f85c412a83d9e2a294668ef6ded0b3fbb2017802eda1cabf63bfcf49ce5084fc97f174926507e5aec5b1a4d19b1782000c1d2df26843d7f981e75d","ssdeep":"49152:imxtryeCDtVzrByR4MY+vDYktnXVWQJTOqILf0AquYkTbER3zQGYj5WdlPfOFNmg:n7UAu","tlshash":"b395604063c47884534faebbb71bf0d5e02a1dd97188484bf618fc55e6a571afee0a32","size":1902845,"data":"","first_seen":"2026-08-17T14:04:39.154958Z","last_seen":"2026-08-17T14:07:02.325474Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/_next/static/chunks/webpack-fb868668cd29821f.js","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e5b7155eff51c9cbffa088dbabfdfb6","sha1":"5909ca089889b815da53a697bf4cf233a9e03825","sha256":"71f8478c16b07bc73356edee285ed081927e86d723dec05878b54f7cef2a9dab","sha512":"b21fc568d580f7072f7112e533b44d6aa053c9f5bbc80504e4fd31e75ff310b03f0e8c30afb83cf7691f28fbe37122cb83541b5f64593cf666f9e7fc4255e86c","ssdeep":"","tlshash":"1471969fb1a1f46a179394f1043f6456b53e24b3286fd460d72ad4f5bc348984622fb4","size":3638,"data":"","first_seen":"2026-08-17T14:04:39.120505Z","last_seen":"2026-08-17T14:07:02.312395Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/_next/static/chunks/framework-49c6cecf1f6d5795.js","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"917fe6063680e883ccfa073dc172fc4a","sha1":"7f628cd4e0b123221b8e641e3ec97383639ea86a","sha256":"2dba89adddf721172d7d45eeb740717576227bbffec79e34fdc083d83a9f8078","sha512":"deeb3f3936d062d2d82dd82a401e5462fac61967b04f707481e09efc6cac4cdd31221aa2fa9fa4612b78850f7a340b797db7917930a4c1ddbe505b807a14077d","ssdeep":"1536:PYjv9NX6lMuuPhxj3hrpvj6yede7y3UfzQN:Qj33tpr61d9bN","tlshash":"aed309e83995f6516ab311a700ef2803737d2a1b280c4960e215fd9e75b842bb17bfdd","size":140017,"data":"","first_seen":"2024-09-27T15:57:34Z","last_seen":"2026-08-20T00:48:02.894709Z","times_seen":1153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/_next/static/chunks/main-facd016a8d8eacc2.js","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5d34aa7bb4034aeecc1ea2099fdb098","sha1":"ed59e9626b0c6b8a0d9f044e7e9195a0be03dc87","sha256":"27b8f0dcd662c57bf1df8fc69da49bf9c886cd3d05bd4ae83195d61a9a6a11a1","sha512":"24eec5ec686fd8ebf4af2d076de02cd5b0bb35e0e5e97dbf1b414e5ece59cdc6e494ebc7a8cbda764cbd87c2a1511193fa3f708a3009c307b331cdf29933ffe0","ssdeep":"1536:nxjh0Q792LXdPPNSUE9cP/3YjNA1c4CMr8W4Xked2EDQoI:rYLX/Ai0NA1nCdRXkedbPI","tlshash":"36d31ab6b6d1f8a203c740e4843b0006f37a1daa145e6055f3aadcd7b9a499d90f3f79","size":131320,"data":"","first_seen":"2026-08-17T14:04:39.128039Z","last_seen":"2026-08-18T07:29:37.603157Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/_next/static/chunks/pages/_app-37af42d57464dd20.js","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"80ce6947ddf41751c4466f83c419f8cd","sha1":"5e5c25f1856df0c1911e347c2b6bee5d55b34a39","sha256":"4a693f1e4e4f14d18443b8219e4be4400d0cfa738581c22ca7c20a28ad8f19da","sha512":"005fc755029435ee19bac2c076d2addc5e749d7417746271dba921c40bb8b9bd1ff18a20dc3539a6d358cc4464240a96627ef311c7305b68dcbc6a06bc359fec","ssdeep":"12288:IOYk5s+r4IQJURC/Pm4jU01jW8G/w769qk1vqxssxAOYOW8PA:N5s+QJJmAW8G/w76wk1SxssxAOYP8PA","tlshash":"9fa4184266c07c58134b9f7b6627b4e8e56a0cee748408cbf314fca8f5f5616e9e1a34","size":490366,"data":"","first_seen":"2026-08-17T14:04:39.123689Z","last_seen":"2026-08-17T14:07:02.319944Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/_next/static/chunks/pages/index-a471d9bfb9be95ec.js","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cc0d9ab454ca2603926e2778536e83e","sha1":"7f090f60dc298d60cf352dbcdb72062942b18c6e","sha256":"104da7d19b67c449345114c8bc8cc43cc1053c9522d731d86b16f4df93a68b69","sha512":"44365c8e8dbe14403357bcf738a754a9f16273e92f13269b3c392db3e459e0a6cc6f005fd0b8014fbdb50d37002d07ccd876aeda17b9914ed4f1cff3431d4cae","ssdeep":"384:WwF0G9wH/1tw5icOzsrDPrbglUO6Up2+1rcUhYRopQY/oEfRO7buByIutlAny3ZD:Wu0G9wHttw5icOuztO6Up2ArcUhYRGQt","tlshash":"759252043fc4ac50235b9bbf732b71e5e41a0c9ab64c184fe129bc68fcd5612ead5a35","size":20296,"data":"","first_seen":"2026-08-17T14:04:39.108802Z","last_seen":"2026-08-17T14:07:02.31759Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/_next/static/chunks/675-721f0ae618e2a73b.js","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12ea35aa43356eeef273c32d7cebb534","sha1":"ab68b1be35596ec168a13bbaac62244f8b5d50ac","sha256":"15fb6b9f4bf912943702db916ef42c3fe0668fe00795b04a5e70229c08ae9679","sha512":"6a3b99a648a6dc053f6874f57c2c0210735871f8359754c9930fcd63503427b98b7f27a4eb325219a62454ffc531ada171c9c79121f2fe809e1963d62083d341","ssdeep":"1536:0d5ES/Z8qXaXYkOcD8cpNSm6EENc2pYxUIguhKYAXKip//I:1S5aXYkOcD8cpNP1x2NXK4A","tlshash":"db439549b7c0b88407875bbb761bb0e5f52e0dee35580447e211fca4f5e4226eaf5a31","size":57866,"data":"","first_seen":"2026-08-17T14:04:39.130176Z","last_seen":"2026-08-17T14:07:02.299375Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/_next/static/chunks/260-70c1ade1603fe8d3.js","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a4d8595eb7f135b8fd87e7cf9bff9df","sha1":"292862e28e2576aef1065ef5f7712fece37a29f4","sha256":"773e10a31beda9d7f0acfb53f686c6e65ccbdf33ea8d07510022e0d74016039f","sha512":"931d9bb2dfa4bc5c58131456cbc9ae4a232148caac3dc0b4c4c271a1a958edd5d2a03b7480b52e09b08e3f87088ddbde2c7aa0cbacec7e04b92e422f5030c22e","ssdeep":"3072:qrlym0tLJOgh6G6QqG0SoEhKck6bG67IlNRZuLKkgGbDGG0:qrlym0MQMSoMkR1RZuLKkgGbJ0","tlshash":"8a14936463807191634b6b7bbbabb0f2e52f0cd9b9800587d2607cc1f569e17edd2a31","size":204785,"data":"","first_seen":"2026-08-17T14:04:39.118036Z","last_seen":"2026-08-17T14:07:02.294162Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/18381311821/?random=1201321913\u0026cv=11\u0026fst=1786975585020\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be68c1v9260897501za200zd9260897501xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~119367802~119367810~119527019~120213116~120385422\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbuytrrxx.club%2F\u0026rcb=8\u0026label=QkSXCK_H0N8cEM2e8rxE\u0026gtm_ee=1\u0026frm=0\u0026tiba=TRON%20Energy%20Rental%20%7C%20Simple%20and%20Secure\u0026value=1\u0026currency_code=USD\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=285833921.1786975585\u0026ec_mode=a\u0026oidsrc=3\u0026ecsid2=292310008.1786975585\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dconversion\u0026em=tv.1\u0026emd=tvd.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026eoid=CkQKEQjw4orUBhDQ28bt8Im8nKkBEi8AsOU7gY0vs01r5o_cy0RvegjXBVKq_L0fYojcArRddzc5SgfGgEqWYOanhCiqn_D_BwE\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCJPasQII29yxAgiH27ECCNPFsQII68yxAgjtzrECCNXPsQII9NqxAgiR67ECCMnjsQIIl9SxAgjJ27ECCM3msQIIseGxAgiz4bECCKbdsQIIgNuxAgjN4bEC\u0026cerd=ChDr370tpqe-Lf-vvi24sr4t\u0026fsk=ChEI8OKK1AYQwdDawfe8iuvkARIsAIFUdcTl1mtJce42uwTs1GKxmAQgmhhVgLNts3-eKMHdV7SOTMCnKpKKMn0aAgZ1\u0026pscrd=IhMI7JuK6OqnlgMVg_E7Ah2VvhfdQldDaEVJOE9LSzFBWVE1Tm10dTk2aW9xV3ZBUklzQUViQUZiLXJ0d084cmI4Q1UwOWhDVG9xakJ4cGN3NDlJQkpUVDhDOHhBYklVU1pEaXJTb0o3cGFOYUV6DAgJYggIABAAGAAgAA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:25.758Z","timestamp":1786975585758,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:05:56 GMT","end":"Mon, 12 Oct 2026 18:05:55 GMT"},"fingerprint":{"sha1":"A9:3F:6E:0B:AD:3D:D0:80:52:15:1D:D5:E8:C7:78:BA:77:A7:82:4B","sha256":"F1:7B:9C:4B:5F:76:59:53:51:8B:60:95:36:73:6F:F0:DA:9D:43:63:A0:64:4C:CD:48:FD:44:DC:79:FC:F2:DA"}}},"request":{"raw":"GET /pagead/1p-conversion/18381311821/?random=1201321913\u0026cv=11\u0026fst=1786975585020\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be68c1v9260897501za200zd9260897501xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~119367802~119367810~119527019~120213116~120385422\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbuytrrxx.club%2F\u0026rcb=8\u0026label=QkSXCK_H0N8cEM2e8rxE\u0026gtm_ee=1\u0026frm=0\u0026tiba=TRON%20Energy%20Rental%20%7C%20Simple%20and%20Secure\u0026value=1\u0026currency_code=USD\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=285833921.1786975585\u0026ec_mode=a\u0026oidsrc=3\u0026ecsid2=292310008.1786975585\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dconversion\u0026em=tv.1\u0026emd=tvd.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026eoid=CkQKEQjw4orUBhDQ28bt8Im8nKkBEi8AsOU7gY0vs01r5o_cy0RvegjXBVKq_L0fYojcArRddzc5SgfGgEqWYOanhCiqn_D_BwE\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCJPasQII29yxAgiH27ECCNPFsQII68yxAgjtzrECCNXPsQII9NqxAgiR67ECCMnjsQIIl9SxAgjJ27ECCM3msQIIseGxAgiz4bECCKbdsQIIgNuxAgjN4bEC\u0026cerd=ChDr370tpqe-Lf-vvi24sr4t\u0026fsk=ChEI8OKK1AYQwdDawfe8iuvkARIsAIFUdcTl1mtJce42uwTs1GKxmAQgmhhVgLNts3-eKMHdV7SOTMCnKpKKMn0aAgZ1\u0026pscrd=IhMI7JuK6OqnlgMVg_E7Ah2VvhfdQldDaEVJOE9LSzFBWVE1Tm10dTk2aW9xV3ZBUklzQUViQUZiLXJ0d084cmI4Q1UwOWhDVG9xakJ4cGN3NDlJQkpUVDhDOHhBYklVU1pEaXJTb0o3cGFOYUV6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 17 Aug 2026 14:06:25 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlocation: https://www.google.no/pagead/1p-conversion/18381311821/?random=1201321913\u0026cv=11\u0026fst=1786975585020\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be68c1v9260897501za200zd9260897501xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~119367802~119367810~119527019~120213116~120385422\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbuytrrxx.club%2F\u0026rcb=8\u0026label=QkSXCK_H0N8cEM2e8rxE\u0026gtm_ee=1\u0026frm=0\u0026tiba=TRON%20Energy%20Rental%20%7C%20Simple%20and%20Secure\u0026value=1\u0026currency_code=USD\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=285833921.1786975585\u0026ec_mode=a\u0026oidsrc=3\u0026ecsid2=292310008.1786975585\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dconversion\u0026em=tv.1\u0026emd=tvd.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026eoid=CkQKEQjw4orUBhDQ28bt8Im8nKkBEi8AsOU7gY0vs01r5o_cy0RvegjXBVKq_L0fYojcArRddzc5SgfGgEqWYOanhCiqn_D_BwE\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCJPasQII29yxAgiH27ECCNPFsQII68yxAgjtzrECCNXPsQII9NqxAgiR67ECCMnjsQIIl9SxAgjJ27ECCM3msQIIseGxAgiz4bECCKbdsQIIgNuxAgjN4bEC\u0026cerd=ChDr370tpqe-Lf-vvi24sr4t\u0026fsk=ChEI8OKK1AYQwdDawfe8iuvkARIsAIFUdcTl1mtJce42uwTs1GKxmAQgmhhVgLNts3-eKMHdV7SOTMCnKpKKMn0aAgZ1\u0026ipr=y\u0026pscrd=IhMI7JuK6OqnlgMVg_E7Ah2VvhfdQldDaEVJOE9LSzFBWVE1Tm10dTk2aW9xV3ZBUklzQUViQUZiLXJ0d084cmI4Q1UwOWhDVG9xakJ4cGN3NDlJQkpUVDhDOHhBYklVU1pEaXJTb0o3cGFOYUV6DAgJYggIABAAGAAgAA\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T10:30:41.700315Z","times_seen":18011735,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/_next/static/chunks/260-70c1ade1603fe8d3.js","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:25.110Z","timestamp":1786975585110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrrxx.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 07:51:49 GMT","end":"Sun, 08 Nov 2026 08:50:21 GMT"},"fingerprint":{"sha1":"75:64:DE:33:9E:E3:21:C4:AE:B4:F8:92:FD:5D:36:7D:7D:1B:C6:B0","sha256":"11:BB:2B:C1:8F:2D:8B:9D:A6:18:38:EB:A1:AC:91:DE:4E:DD:90:D2:48:D4:9A:E6:0D:76:53:55:A3:AF:41:DD"}}},"request":{"raw":"GET /_next/static/chunks/260-70c1ade1603fe8d3.js HTTP/1.1\r\nHost: buytrrxx.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buytrrxx.club/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.285833921.1786975585.-.-.1786975585.292310008.1786975585.1786975585\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 14:06:25 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin, same-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 16 Aug 2026 09:01:15 GMT\r\netag: W/\"31ff1-1a009cdc378\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 149\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l2Zj2n1%2FKcUmctT29zjRsnuORnYzeneVtNUJi24ft%2FFVqVI%2FG0ms4KJydYyJNJvRe4mNP5IbO5ckKXjb2NVrtne9D3es4cIeg4Yo087kd%2BMQdZw1R4sOGr%2Bu3GJ%2BGvAq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c93d3eed16783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":204785,"size_decoded":65020,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4a4d8595eb7f135b8fd87e7cf9bff9df","sha1":"292862e28e2576aef1065ef5f7712fece37a29f4","sha256":"773e10a31beda9d7f0acfb53f686c6e65ccbdf33ea8d07510022e0d74016039f","sha512":"931d9bb2dfa4bc5c58131456cbc9ae4a232148caac3dc0b4c4c271a1a958edd5d2a03b7480b52e09b08e3f87088ddbde2c7aa0cbacec7e04b92e422f5030c22e","ssdeep":"3072:qrlym0tLJOgh6G6QqG0SoEhKck6bG67IlNRZuLKkgGbDGG0:qrlym0MQMSoMkR1RZuLKkgGbJ0","tlshash":"8a14936463807191634b6b7bbbabb0f2e52f0cd9b9800587d2607cc1f569e17edd2a31","first_seen":"2026-08-17T14:04:39.118036Z","last_seen":"2026-08-17T14:07:02.294162Z","times_seen":2,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"buytrrxx.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/_next/static/K4tR_6i62b0fLGWpnGMjT/_buildManifest.js","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:24.676Z","timestamp":1786975584676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrrxx.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 07:51:49 GMT","end":"Sun, 08 Nov 2026 08:50:21 GMT"},"fingerprint":{"sha1":"75:64:DE:33:9E:E3:21:C4:AE:B4:F8:92:FD:5D:36:7D:7D:1B:C6:B0","sha256":"11:BB:2B:C1:8F:2D:8B:9D:A6:18:38:EB:A1:AC:91:DE:4E:DD:90:D2:48:D4:9A:E6:0D:76:53:55:A3:AF:41:DD"}}},"request":{"raw":"GET /_next/static/K4tR_6i62b0fLGWpnGMjT/_buildManifest.js HTTP/1.1\r\nHost: buytrrxx.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buytrrxx.club/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 14:06:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin, same-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 16 Aug 2026 09:01:15 GMT\r\netag: W/\"883-1a009cdc378\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 149\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dEDVeU8NwIp6nZxUHtZR8mCSAo3IFBPA7oxEHtKjdqTz7NewGybyHeHYx%2F7qVaAjHKzqhYaPutANyM%2FhWg4QJt54DOFNH%2FPZOIAPk9mnsZOxevghMVmm6JeaFHe5LeYY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c93d3c3cb2783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2179,"size_decoded":1676,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (2179), with no line terminators","md5":"afe057eeef28ee99d9f4f5cd2365d7a7","sha1":"4bd4c69f4e9196d44f51d88a09c6f91588dc0ecd","sha256":"78fec233875a2dc817a63f5cbf03aa3b914d44ad85cdf855b944ccad39c0ee73","sha512":"3a5ec2cc6cd1d8547dc7d6369a96bd0059d1bfec9f364738f530815bab17282452c728fd7605a55d790baf200d12545f7fa8752d713ff9003cab2e03178d4fc6","ssdeep":"","tlshash":"e1414c838425653126a6ccf970362f1a89626df2f6391146a5ddcfad0079bbdcb80c26","first_seen":"2026-08-17T14:04:39.126044Z","last_seen":"2026-08-17T14:07:02.296777Z","times_seen":2,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"buytrrxx.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/_next/static/chunks/675-721f0ae618e2a73b.js","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:25.109Z","timestamp":1786975585109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrrxx.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 07:51:49 GMT","end":"Sun, 08 Nov 2026 08:50:21 GMT"},"fingerprint":{"sha1":"75:64:DE:33:9E:E3:21:C4:AE:B4:F8:92:FD:5D:36:7D:7D:1B:C6:B0","sha256":"11:BB:2B:C1:8F:2D:8B:9D:A6:18:38:EB:A1:AC:91:DE:4E:DD:90:D2:48:D4:9A:E6:0D:76:53:55:A3:AF:41:DD"}}},"request":{"raw":"GET /_next/static/chunks/675-721f0ae618e2a73b.js HTTP/1.1\r\nHost: buytrrxx.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buytrrxx.club/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.285833921.1786975585.-.-.1786975585.292310008.1786975585.1786975585\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 14:06:25 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin, same-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 16 Aug 2026 09:01:15 GMT\r\netag: W/\"e20a-1a009cdc378\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 149\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oRfO8YnnESefsdw%2FZra%2FdMObA6AOdBI3sHsOWJIvnkIqtlLI%2F4k6vG%2Btp3ywpWGv3WtUXORn%2FWLN2f1HWfW4cXm2c4xc6MyXf412MceeiNj0G%2FNVrYdg3lNEK%2B9513Ia\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c93d3eed18783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57866,"size_decoded":21503,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (57866), with no line terminators","md5":"12ea35aa43356eeef273c32d7cebb534","sha1":"ab68b1be35596ec168a13bbaac62244f8b5d50ac","sha256":"15fb6b9f4bf912943702db916ef42c3fe0668fe00795b04a5e70229c08ae9679","sha512":"6a3b99a648a6dc053f6874f57c2c0210735871f8359754c9930fcd63503427b98b7f27a4eb325219a62454ffc531ada171c9c79121f2fe809e1963d62083d341","ssdeep":"1536:0d5ES/Z8qXaXYkOcD8cpNSm6EENc2pYxUIguhKYAXKip//I:1S5aXYkOcD8cpNP1x2NXK4A","tlshash":"db439549b7c0b88407875bbb761bb0e5f52e0dee35580447e211fca4f5e4226eaf5a31","first_seen":"2026-08-17T14:04:39.130176Z","last_seen":"2026-08-17T14:07:02.299375Z","times_seen":2,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"buytrrxx.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/conversion/18381311821/?random=1786975585020\u0026cv=11\u0026fst=1786975585020\u0026fmt=3\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be68c1v9260897501za200zd9260897501xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~119367802~119367810~119527019~120213116~120385422\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbuytrrxx.club%2F\u0026rcb=8\u0026label=QkSXCK_H0N8cEM2e8rxE\u0026gtm_ee=1\u0026frm=0\u0026tiba=TRON%20Energy%20Rental%20%7C%20Simple%20and%20Secure\u0026value=1\u0026currency_code=USD\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=285833921.1786975585\u0026ec_mode=a\u0026oid=686311000.1786975585\u0026oidsrc=3\u0026ecsid2=292310008.1786975585\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dconversion\u0026em=tv.1\u0026emd=tvd.1\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:25.119Z","timestamp":1786975585119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:05:56 GMT","end":"Mon, 12 Oct 2026 18:05:55 GMT"},"fingerprint":{"sha1":"A9:3F:6E:0B:AD:3D:D0:80:52:15:1D:D5:E8:C7:78:BA:77:A7:82:4B","sha256":"F1:7B:9C:4B:5F:76:59:53:51:8B:60:95:36:73:6F:F0:DA:9D:43:63:A0:64:4C:CD:48:FD:44:DC:79:FC:F2:DA"}}},"request":{"raw":"GET /ccm/conversion/18381311821/?random=1786975585020\u0026cv=11\u0026fst=1786975585020\u0026fmt=3\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be68c1v9260897501za200zd9260897501xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~119367802~119367810~119527019~120213116~120385422\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbuytrrxx.club%2F\u0026rcb=8\u0026label=QkSXCK_H0N8cEM2e8rxE\u0026gtm_ee=1\u0026frm=0\u0026tiba=TRON%20Energy%20Rental%20%7C%20Simple%20and%20Secure\u0026value=1\u0026currency_code=USD\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=285833921.1786975585\u0026ec_mode=a\u0026oid=686311000.1786975585\u0026oidsrc=3\u0026ecsid2=292310008.1786975585\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dconversion\u0026em=tv.1\u0026emd=tvd.1\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ndate: Mon, 17 Aug 2026 14:06:25 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Sun, 17 May 1998 03:00:00 GMT\r\nx-content-type-options: nosniff\r\ncontent-type: image/gif\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:130:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsgac:130:0\r\nreport-to: {\"group\":\"ascnsrsgac:130:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgac:130:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 35\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35,"size_decoded":871,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28d6814f309ea289f847c69cf91194c6","sha1":"0f4e929dd5bb2564f7ab9c76338e04e292a42ace","sha256":"8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015","sha512":"1d68b92e8d822fe82dc7563edd7b37f3418a02a89f1a9f0454cca664c2fc2565235e0d85540ff9be0b20175be3f5b7b4eae1175067465d5cca13486aab4c582c","ssdeep":"","tlshash":"be800003c280c002c2a2c0308e08ca802a8ab0a08a28030fb0ec3baafc2a2a20c00000","first_seen":"2023-04-05T07:36:27Z","last_seen":"2026-08-21T10:18:02.894654Z","times_seen":55978,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":3,"connect":29,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/pagead/1p-conversion/18381311821/?random=1201321913\u0026cv=11\u0026fst=1786975585020\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be68c1v9260897501za200zd9260897501xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~119367802~119367810~119527019~120213116~120385422\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbuytrrxx.club%2F\u0026rcb=8\u0026label=QkSXCK_H0N8cEM2e8rxE\u0026gtm_ee=1\u0026frm=0\u0026tiba=TRON%20Energy%20Rental%20%7C%20Simple%20and%20Secure\u0026value=1\u0026currency_code=USD\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=285833921.1786975585\u0026ec_mode=a\u0026oidsrc=3\u0026ecsid2=292310008.1786975585\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dconversion\u0026em=tv.1\u0026emd=tvd.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026eoid=CkQKEQjw4orUBhDQ28bt8Im8nKkBEi8AsOU7gY0vs01r5o_cy0RvegjXBVKq_L0fYojcArRddzc5SgfGgEqWYOanhCiqn_D_BwE\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCJPasQII29yxAgiH27ECCNPFsQII68yxAgjtzrECCNXPsQII9NqxAgiR67ECCMnjsQIIl9SxAgjJ27ECCM3msQIIseGxAgiz4bECCKbdsQIIgNuxAgjN4bEC\u0026cerd=ChDr370tpqe-Lf-vvi24sr4t\u0026fsk=ChEI8OKK1AYQwdDawfe8iuvkARIsAIFUdcTl1mtJce42uwTs1GKxmAQgmhhVgLNts3-eKMHdV7SOTMCnKpKKMn0aAgZ1\u0026ipr=y\u0026pscrd=IhMI7JuK6OqnlgMVg_E7Ah2VvhfdQldDaEVJOE9LSzFBWVE1Tm10dTk2aW9xV3ZBUklzQUViQUZiLXJ0d084cmI4Q1UwOWhDVG9xakJ4cGN3NDlJQkpUVDhDOHhBYklVU1pEaXJTb0o3cGFOYUV6DAgJYggIABAAGAAgAA","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:25.795Z","timestamp":1786975585795,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:45:35 GMT","end":"Wed, 28 Oct 2026 20:45:34 GMT"},"fingerprint":{"sha1":"A3:D5:B8:7E:BB:E7:00:BC:8A:C3:35:46:90:22:B5:AA:D9:1A:28:62","sha256":"CA:AA:8C:3F:A1:B5:07:E9:F6:48:88:B2:08:72:3A:D1:DE:45:0D:4A:74:92:1F:9C:86:B6:1B:3E:A8:92:FA:06"}}},"request":{"raw":"GET /pagead/1p-conversion/18381311821/?random=1201321913\u0026cv=11\u0026fst=1786975585020\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be68c1v9260897501za200zd9260897501xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~119367802~119367810~119527019~120213116~120385422\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbuytrrxx.club%2F\u0026rcb=8\u0026label=QkSXCK_H0N8cEM2e8rxE\u0026gtm_ee=1\u0026frm=0\u0026tiba=TRON%20Energy%20Rental%20%7C%20Simple%20and%20Secure\u0026value=1\u0026currency_code=USD\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=285833921.1786975585\u0026ec_mode=a\u0026oidsrc=3\u0026ecsid2=292310008.1786975585\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dconversion\u0026em=tv.1\u0026emd=tvd.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026eoid=CkQKEQjw4orUBhDQ28bt8Im8nKkBEi8AsOU7gY0vs01r5o_cy0RvegjXBVKq_L0fYojcArRddzc5SgfGgEqWYOanhCiqn_D_BwE\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCJPasQII29yxAgiH27ECCNPFsQII68yxAgjtzrECCNXPsQII9NqxAgiR67ECCMnjsQIIl9SxAgjJ27ECCM3msQIIseGxAgiz4bECCKbdsQIIgNuxAgjN4bEC\u0026cerd=ChDr370tpqe-Lf-vvi24sr4t\u0026fsk=ChEI8OKK1AYQwdDawfe8iuvkARIsAIFUdcTl1mtJce42uwTs1GKxmAQgmhhVgLNts3-eKMHdV7SOTMCnKpKKMn0aAgZ1\u0026ipr=y\u0026pscrd=IhMI7JuK6OqnlgMVg_E7Ah2VvhfdQldDaEVJOE9LSzFBWVE1Tm10dTk2aW9xV3ZBUklzQUViQUZiLXJ0d084cmI4Q1UwOWhDVG9xakJ4cGN3NDlJQkpUVDhDOHhBYklVU1pEaXJTb0o3cGFOYUV6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 17 Aug 2026 14:06:25 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":613,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T10:30:41.700315Z","times_seen":18011735,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":2,"connect":14,"send":0,"wait":38,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/albertsans/v4/i7dOIFdwYjGaAMFtZd_QA1ZbYFc.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:25.112Z","timestamp":1786975585112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/albertsans/v4/i7dOIFdwYjGaAMFtZd_QA1ZbYFc.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://buytrrxx.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32020\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 08:32:28 GMT\r\nexpires: Fri, 13 Aug 2027 08:32:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 365637\r\nlast-modified: Wed, 10 Sep 2025 16:49:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32020,"size_decoded":32833,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32020, version 1.0","md5":"d33f7bf3ed27b8dc8d0c873f4faa7cf2","sha1":"8b024ffd39102a6340b3943b500a01cc1b1aa380","sha256":"c2fb6fda415c7bf5926c15aa98f759da45cdc5ac4ac6925a72a84db4eb3862a3","sha512":"39370f211c5645621065d695de795b58b6f21d40d3b00f2c2dbe1e20058859622256d242d721b1a9526408b153c522b966d3f927c9e0d808c2f0e77356bbee2c","ssdeep":"768:A9C/VxAVUUa5JWTAz9tsWXWwzRev0B6Qymr7Y+Vz5uJHL:kC/VxAVUBXY6Wyhbymr7Y+Vz4B","tlshash":"dbe2f10408c55fa4c8f755bc7da1317cada3168f569db4be2fee416a0c7fc4a252c492","first_seen":"2025-05-30T17:07:37.876502Z","last_seen":"2026-08-21T10:03:59.370271Z","times_seen":2401,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":4,"connect":30,"send":0,"wait":16,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=8\u0026frm=0\u0026apvc=1\u0026auid=285833921.1786975585\u0026dt=TRON%20Energy%20Rental%20%7C%20Simple%20and%20Secure\u0026tid=AW-18381311821\u0026en=page_view\u0026dl=https%3A%2F%2Fbuytrrxx.club%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=13274376.1786975585\u0026navt=n\u0026npa=1\u0026gtm=45be68c1v9260897501za200zd9260897501xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~119367802~119367810~119527019~120213116~120385422\u0026tft=1786975585030\u0026tfd=1293\u0026tids=AW-18381311821\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:25.116Z","timestamp":1786975585116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:05:56 GMT","end":"Mon, 12 Oct 2026 18:05:55 GMT"},"fingerprint":{"sha1":"A9:3F:6E:0B:AD:3D:D0:80:52:15:1D:D5:E8:C7:78:BA:77:A7:82:4B","sha256":"F1:7B:9C:4B:5F:76:59:53:51:8B:60:95:36:73:6F:F0:DA:9D:43:63:A0:64:4C:CD:48:FD:44:DC:79:FC:F2:DA"}}},"request":{"raw":"POST /ccm/collect?rcb=8\u0026frm=0\u0026apvc=1\u0026auid=285833921.1786975585\u0026dt=TRON%20Energy%20Rental%20%7C%20Simple%20and%20Secure\u0026tid=AW-18381311821\u0026en=page_view\u0026dl=https%3A%2F%2Fbuytrrxx.club%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=13274376.1786975585\u0026navt=n\u0026npa=1\u0026gtm=45be68c1v9260897501za200zd9260897501xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~119367802~119367810~119527019~120213116~120385422\u0026tft=1786975585030\u0026tfd=1293\u0026tids=AW-18381311821\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: null\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain\r\npragma: no-cache\r\ndate: Mon, 17 Aug 2026 14:06:25 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: null\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":525,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T10:30:41.700315Z","times_seen":18011735,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/img/usdt.png","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:25.290Z","timestamp":1786975585290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrrxx.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 07:51:49 GMT","end":"Sun, 08 Nov 2026 08:50:21 GMT"},"fingerprint":{"sha1":"75:64:DE:33:9E:E3:21:C4:AE:B4:F8:92:FD:5D:36:7D:7D:1B:C6:B0","sha256":"11:BB:2B:C1:8F:2D:8B:9D:A6:18:38:EB:A1:AC:91:DE:4E:DD:90:D2:48:D4:9A:E6:0D:76:53:55:A3:AF:41:DD"}}},"request":{"raw":"GET /img/usdt.png HTTP/1.1\r\nHost: buytrrxx.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buytrrxx.club/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.285833921.1786975585.-.-.1786975585.292310008.1786975585.1786975585\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 14:06:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin, same-origin\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Mar 2026 17:18:36 GMT\r\netag: W/\"1ea2-19d2b27b5e0\"\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=5,i\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cKDRdiQn7L4Js0ihVKXWpbln0O0cUTqUaz0c8QlcmmkYi%2FDIiHuxtmSfGM15DbFHH2kT4sxrf2LBOXnewsShxwT%2FB%2FSDSwraZIZu9G5b7oKVJiTD7uu0PTeT0j%2BiGXnX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c93d400d3c783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7842,"size_decoded":7879,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"8418a9e2231e14be024341a848802f26","sha1":"5dcda7dde375e4ba7c3403dc183b33845b067687","sha256":"014a5b538f2ff188725402119ceb6d62b3b1bb74c41c8445e0e6f7505c884505","sha512":"7c156570fb28d5e9ac77fd6b273a9553397f5a7db4ecc425ca60ea2fe343094b2080966023404391eba87213a7f1786f507f29f1cef62784cba1c3118ac8a418","ssdeep":"192:CS3ykn0gqSjhV1K6JiVoL4YATFeEc2Nawr+CY:dBn0gqSjtYKL4YWFedmfJY","tlshash":"2df19d28a6d42800a70da666b1ac04e34a6f96d886d0c6ae7ccfdc438df61f9c94d390","first_seen":"2025-06-26T16:07:51.28824Z","last_seen":"2026-08-18T07:29:37.586667Z","times_seen":177,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"buytrrxx.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/img/tronlink.png","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:25.295Z","timestamp":1786975585295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrrxx.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 07:51:49 GMT","end":"Sun, 08 Nov 2026 08:50:21 GMT"},"fingerprint":{"sha1":"75:64:DE:33:9E:E3:21:C4:AE:B4:F8:92:FD:5D:36:7D:7D:1B:C6:B0","sha256":"11:BB:2B:C1:8F:2D:8B:9D:A6:18:38:EB:A1:AC:91:DE:4E:DD:90:D2:48:D4:9A:E6:0D:76:53:55:A3:AF:41:DD"}}},"request":{"raw":"GET /img/tronlink.png HTTP/1.1\r\nHost: buytrrxx.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buytrrxx.club/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.285833921.1786975585.-.-.1786975585.292310008.1786975585.1786975585\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 14:06:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin, same-origin\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Mar 2026 17:18:36 GMT\r\netag: W/\"1bc6-19d2b27b5e0\"\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=5,i\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kg3H%2BrKlDaJ2dHPwiOwbGswxej%2B7oqPv%2FzpH7Hnc6CR0nfFdnZMqWh5499GBpJHofNprfun9AmGZl6VqEiHnmsD8pWPlsFZ7Yim2J%2FgjJWS5CqrZR6Twl9sZ8ndj5QtJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c93d401d40783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7110,"size_decoded":8043,"mime_type":"image/png","magic":"PNG image data, 93 x 93, 8-bit/color RGBA, non-interlaced","md5":"41d851008b4090fca47edb4af65821b5","sha1":"a85f4865794e504d274e9ab5d5e0d79829697246","sha256":"fb1612c3f4cbad017db9eb194a166f42b266e0927b619b879c0ac8714d204daf","sha512":"515e0b544ee25d6469df54f317612c6212f55152e0c9acca8b31740e483f5f0752e4fe85572116594f7abdb98761713d7c03e74d2038b1396a340c61964316d2","ssdeep":"96:7SHy5TwYKL2vD0bWgJP4x/S19U0/ssFtdcGPfssctmHMSVIET+pWsrujnsvaSEKM:OHuwYy+DlG6q1mQsac/H3phujE3477oy","tlshash":"65e1ae92f348b471769d2163efa3510890bcdcc887afca08a013ed2de88c13b854b772","first_seen":"2023-07-31T21:17:56Z","last_seen":"2026-08-18T07:29:37.614495Z","times_seen":188,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"buytrrxx.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/_next/static/css/59ea74a340a9c9e6.css","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:24.663Z","timestamp":1786975584663,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrrxx.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 07:51:49 GMT","end":"Sun, 08 Nov 2026 08:50:21 GMT"},"fingerprint":{"sha1":"75:64:DE:33:9E:E3:21:C4:AE:B4:F8:92:FD:5D:36:7D:7D:1B:C6:B0","sha256":"11:BB:2B:C1:8F:2D:8B:9D:A6:18:38:EB:A1:AC:91:DE:4E:DD:90:D2:48:D4:9A:E6:0D:76:53:55:A3:AF:41:DD"}}},"request":{"raw":"GET /_next/static/css/59ea74a340a9c9e6.css HTTP/1.1\r\nHost: buytrrxx.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buytrrxx.club/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 14:06:24 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin, same-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 16 Aug 2026 09:01:15 GMT\r\netag: W/\"a658-1a009cdc378\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 149\r\npriority: u=0,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x3POOjVPKnp0yjFQDdh%2BmQdD85QPlN70PovX0NaMy0ZCRzjxs1aFJbc28chUgOv7HYY0BEJ%2F5VG0Bzis7P3HdYzGASYt7bHctptxpgsz2kYUC31kar2X6ScdMKiiC2iK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c93d3c2ca8783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42584,"size_decoded":10088,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (40170)","md5":"6ee5dbb60bc11910e222b763e684b945","sha1":"1f6cf4596fca83adcf9d4b7dd4ff10e160047d10","sha256":"ddb9c9b8bd0d1bb30c365db032413f92fd835d2b40aa2f1ea7ed802ffe0ca77f","sha512":"f2cefc41b7e016f90513f26160fe4473f7efa47ec68831dd0b4166ab8945e37fc5f193c19e00ef05dd7991de0a17e27a263859fd7a874526d0f7244ab73d7021","ssdeep":"768:ZGH5Kwp6rTla1JFhKG9k+UX+Cg+UerbD/:wH16rTla1Tw+UX+Cg+r","tlshash":"391365257a00043fbd03d5f9e0e4e94db05bf1c4ef2a5b697d826110ab922fbe9e3651","first_seen":"2026-08-17T14:04:39.135757Z","last_seen":"2026-08-18T07:29:37.601708Z","times_seen":4,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"buytrrxx.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18381311821","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:24.662Z","timestamp":1786975584662,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:22 GMT","end":"Wed, 28 Oct 2026 20:42:21 GMT"},"fingerprint":{"sha1":"0C:36:58:3E:92:12:11:BD:3B:2C:77:32:B6:09:4D:99:02:12:5E:BB","sha256":"4C:2B:BB:AD:FE:07:99:6D:8E:58:81:DD:95:E6:E7:0B:1E:E2:BE:C1:0C:B5:DD:78:EB:1E:D6:2C:91:CE:30:0E"}}},"request":{"raw":"GET /gtag/js?id=AW-18381311821 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 17 Aug 2026 14:06:24 GMT\r\nexpires: Mon, 17 Aug 2026 14:06:24 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 159336\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":461666,"size_decoded":159940,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6662)","md5":"636c969290603d89a5753af58ac401a7","sha1":"dde449eb774d141d4ddde900e4f478e0a5ee6e82","sha256":"2ae30d9857ffc9d82db69609c2052a0b5fe7ddd91273a9493b3e40fad57b9ef1","sha512":"9dccd08045982a834f1b10c6a89a46b202575807b192efb9f6c20e6c8e87535e601da502794bfacaecfa215b48d50b095b4a885fe83d705bd65e67e182ea7f56","ssdeep":"6144:nO/BD/1ESGC0AX3iRx9rOJYhcgLsegErl3POi6mQMAsPasHgN:nORAxAX+xM3mGEasHK","tlshash":"c4a4e7cdb3d670629396f478503f01cba57a29e2b44cc899f189d8e42e7469a4237f7c","first_seen":"2026-08-17T14:04:39.113381Z","last_seen":"2026-08-17T14:07:02.306075Z","times_seen":2,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":33,"receive":43,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/_next/static/chunks/826.51a0311addc6deaa.js","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:25.111Z","timestamp":1786975585111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrrxx.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 07:51:49 GMT","end":"Sun, 08 Nov 2026 08:50:21 GMT"},"fingerprint":{"sha1":"75:64:DE:33:9E:E3:21:C4:AE:B4:F8:92:FD:5D:36:7D:7D:1B:C6:B0","sha256":"11:BB:2B:C1:8F:2D:8B:9D:A6:18:38:EB:A1:AC:91:DE:4E:DD:90:D2:48:D4:9A:E6:0D:76:53:55:A3:AF:41:DD"}}},"request":{"raw":"GET /_next/static/chunks/826.51a0311addc6deaa.js HTTP/1.1\r\nHost: buytrrxx.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buytrrxx.club/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.285833921.1786975585.-.-.1786975585.292310008.1786975585.1786975585\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 14:06:25 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin, same-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 16 Aug 2026 09:01:15 GMT\r\netag: W/\"1d08fd-1a009cdc378\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 149\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZwkKORXOVGN3db0YLucX%2FI2b985qo00lfQujDT%2FWFNhbUzCseA7esi6CvHCuOWnwdFBA2mhDPGujZ4Pbwh5kFWXgo6nVrqOi3i7Svga8E7WLoIoAOPBHzpzJKUPNEDC9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c93d3eed1a783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1902845,"size_decoded":598816,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e23bc256faee25465ea6c43804da2605","sha1":"eadb5737203bfc0d75dbd212d3521bc1f84a02c5","sha256":"a9f5f60a9ed95c14ed141b24f42426ac13ddbb57189e1b6217eba174cb15e768","sha512":"b48cc9ed19d8965c0ebf3eff699b05edaff8ca59f170bec96c9486aafdcb7fea17a4fd15c0801ee3fec98becfdd268704c00a09f9877a1b6978af04311338eed","ssdeep":"24576:i6r9yOtryeCDtVzrByR4MF6+usDYktnXVWQJTOAWjoNILf0AquYkTbER3zQY/FYT:imxtryeCDtVzrByR4MY+vDYktnXVWQJw","tlshash":"dc25848463c5b890134bae77bb2bf0d9f03e1dd97184444be218fc94f6a5719eae1a31","first_seen":"2026-08-17T14:04:39.141431Z","last_seen":"2026-08-17T14:07:02.307525Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"buytrrxx.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/favicon.svg","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:25.219Z","timestamp":1786975585219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrrxx.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 07:51:49 GMT","end":"Sun, 08 Nov 2026 08:50:21 GMT"},"fingerprint":{"sha1":"75:64:DE:33:9E:E3:21:C4:AE:B4:F8:92:FD:5D:36:7D:7D:1B:C6:B0","sha256":"11:BB:2B:C1:8F:2D:8B:9D:A6:18:38:EB:A1:AC:91:DE:4E:DD:90:D2:48:D4:9A:E6:0D:76:53:55:A3:AF:41:DD"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: buytrrxx.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buytrrxx.club/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.285833921.1786975585.-.-.1786975585.292310008.1786975585.1786975585\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 14:06:25 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin, same-origin\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 15 Apr 2026 01:30:36 GMT\r\netag: W/\"3af-19d8ec2fa60\"\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WgU8yLNTic0gXm8vrHL5I2kWQsc1od%2FBP8pC3rZTGQjz%2Fqa%2BQAkOcSKVJrxcv1Y5ux3ek%2FwRo5ySn6JFLlZbvT2hOta4EvqZHReWlyzmuvMNfmBE7nyC5e4sZzb08GCe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c93d3f9d2d783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":943,"size_decoded":1351,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0ea85fc6a879864cb5eb4202af1d0783","sha1":"d967a5b3506790cf74eb9fd3eadebc01e7a61f75","sha256":"72d4ea5b8f8c84caa6e229b4a832b2fdbee68c08c4e7ee898173d4e674645f97","sha512":"4ff66b6da69ffb0e2391113f1eed832a798abe39c394a89d730d6535543375779ec5bdc3508c430e8bf83b3b166c2a705b190c341bddac97dde0169c00a81a99","ssdeep":"","tlshash":"49119938f56ca913e704c24aee58b43d305c50d78b958251b88eaf5e4b388cb9c677ec","first_seen":"2026-08-17T14:04:39.138579Z","last_seen":"2026-08-18T07:29:37.590816Z","times_seen":4,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"buytrrxx.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/img/Trust.png","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:25.293Z","timestamp":1786975585293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrrxx.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 07:51:49 GMT","end":"Sun, 08 Nov 2026 08:50:21 GMT"},"fingerprint":{"sha1":"75:64:DE:33:9E:E3:21:C4:AE:B4:F8:92:FD:5D:36:7D:7D:1B:C6:B0","sha256":"11:BB:2B:C1:8F:2D:8B:9D:A6:18:38:EB:A1:AC:91:DE:4E:DD:90:D2:48:D4:9A:E6:0D:76:53:55:A3:AF:41:DD"}}},"request":{"raw":"GET /img/Trust.png HTTP/1.1\r\nHost: buytrrxx.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buytrrxx.club/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.285833921.1786975585.-.-.1786975585.292310008.1786975585.1786975585\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 14:06:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin, same-origin\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Mar 2026 17:18:36 GMT\r\netag: W/\"1015-19d2b27b5e0\"\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=5,i\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yg8WihIHNM56ZcaHdE569weNQ0JXtfEXtQlR87klBHkBm8YF9j%2BCTsiNNujgFiFi3qGLfwwVJ%2FdS2QmqMPCPblk2AsUFRJkzwKDTbZ0NA97f3qx3ZqYPCUQEgJXaM4jw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c93d401d3f783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4117,"size_decoded":5046,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"93b67a3e4ea968584b96307da79079d7","sha1":"44d4108bc0cfe97dc16aa97090502014bb0cb5f0","sha256":"2b28e10267c900818bdd8c1cff14472cc6e70c81ebe8eba7c7d7fe27cc007bc2","sha512":"29f0a6afd9eb034b74550e85f62c8fc1d2bb5a135c6d6c680b180859d0bbaf58b31f112e6fbc93d56752b372cb6b72b76e10a65470db770f7c02268a5762c179","ssdeep":"96:FHvPzwSrSzezoQzqhixJHvVoiHtciiAvuP/t+:F38SuzkoYRxNNoAKcQ+","tlshash":"06818ecfa991c5345a106fbc1c8100b4b679396991b52a3d0cac2b2d458ad68cbb53dc","first_seen":"2025-06-26T16:07:51.291178Z","last_seen":"2026-08-18T07:29:37.607302Z","times_seen":167,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"buytrrxx.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/img/tokenpocket.png","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:25.296Z","timestamp":1786975585296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrrxx.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 07:51:49 GMT","end":"Sun, 08 Nov 2026 08:50:21 GMT"},"fingerprint":{"sha1":"75:64:DE:33:9E:E3:21:C4:AE:B4:F8:92:FD:5D:36:7D:7D:1B:C6:B0","sha256":"11:BB:2B:C1:8F:2D:8B:9D:A6:18:38:EB:A1:AC:91:DE:4E:DD:90:D2:48:D4:9A:E6:0D:76:53:55:A3:AF:41:DD"}}},"request":{"raw":"GET /img/tokenpocket.png HTTP/1.1\r\nHost: buytrrxx.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buytrrxx.club/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.285833921.1786975585.-.-.1786975585.292310008.1786975585.1786975585\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 14:06:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin, same-origin\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Mar 2026 17:18:36 GMT\r\netag: W/\"887-19d2b27b5e0\"\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=5,i\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=exBGQKLF0PuXj88tRf39mE2daspPb2FR6Zoq1cMWAAxNuwhLV8ccMzt6r35wASH5YkU5eAEHFWKaX2aHCm%2BfcBxsJurwOUmbHctmpU7Ewu9IDTxZYN0rk%2FvcVvxwnCOs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c93d401d42783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2183,"size_decoded":3111,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGB, non-interlaced","md5":"76df18a0c5becd5d1b79210d373e2589","sha1":"e6e294024e8c7be243f0585b5493489e57bc9f8a","sha256":"bd99cba9c06e7c20913639fd05e89d844272c11f5f7e17d271053d9bc6131445","sha512":"9eca78c8e38e82db6f576920adf6c5206fc067b827a4265d0008dd114937c04467a33390a3fc8fe1c3ad233b435c786e94a0a33d879155d4d4180ae906a7e706","ssdeep":"","tlshash":"88412bda22249367c89f3b3d70f4d8e091e484a711598d903f8d9e4035d521a70af2ed","first_seen":"2025-06-26T16:07:51.296732Z","last_seen":"2026-08-18T07:29:37.596167Z","times_seen":156,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"buytrrxx.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/_next/static/chunks/webpack-fb868668cd29821f.js","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:24.664Z","timestamp":1786975584664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrrxx.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 07:51:49 GMT","end":"Sun, 08 Nov 2026 08:50:21 GMT"},"fingerprint":{"sha1":"75:64:DE:33:9E:E3:21:C4:AE:B4:F8:92:FD:5D:36:7D:7D:1B:C6:B0","sha256":"11:BB:2B:C1:8F:2D:8B:9D:A6:18:38:EB:A1:AC:91:DE:4E:DD:90:D2:48:D4:9A:E6:0D:76:53:55:A3:AF:41:DD"}}},"request":{"raw":"GET /_next/static/chunks/webpack-fb868668cd29821f.js HTTP/1.1\r\nHost: buytrrxx.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buytrrxx.club/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 14:06:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin, same-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 16 Aug 2026 09:01:15 GMT\r\netag: W/\"e36-1a009cdc378\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 149\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oG5q2L6mDLDkKDncPQapymLe3prak5Gmru%2B3IVTssXvhjqxPMHmPDrIuwjopSxeOFgrKGBVaVf84zuzBkeVGy%2Fha99ZTJAjodADW8upSLKW2IXnIYdxM0QCOkPOJQMfQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c93d3c2caa783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3638,"size_decoded":2842,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3638), with no line terminators","md5":"0e5b7155eff51c9cbffa088dbabfdfb6","sha1":"5909ca089889b815da53a697bf4cf233a9e03825","sha256":"71f8478c16b07bc73356edee285ed081927e86d723dec05878b54f7cef2a9dab","sha512":"b21fc568d580f7072f7112e533b44d6aa053c9f5bbc80504e4fd31e75ff310b03f0e8c30afb83cf7691f28fbe37122cb83541b5f64593cf666f9e7fc4255e86c","ssdeep":"","tlshash":"1471969fb1a1f46a179394f1043f6456b53e24b3286fd460d72ad4f5bc348984622fb4","first_seen":"2026-08-17T14:04:39.120505Z","last_seen":"2026-08-17T14:07:02.312395Z","times_seen":2,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"buytrrxx.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/img/trx.png","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:25.291Z","timestamp":1786975585291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrrxx.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 07:51:49 GMT","end":"Sun, 08 Nov 2026 08:50:21 GMT"},"fingerprint":{"sha1":"75:64:DE:33:9E:E3:21:C4:AE:B4:F8:92:FD:5D:36:7D:7D:1B:C6:B0","sha256":"11:BB:2B:C1:8F:2D:8B:9D:A6:18:38:EB:A1:AC:91:DE:4E:DD:90:D2:48:D4:9A:E6:0D:76:53:55:A3:AF:41:DD"}}},"request":{"raw":"GET /img/trx.png HTTP/1.1\r\nHost: buytrrxx.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buytrrxx.club/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.285833921.1786975585.-.-.1786975585.292310008.1786975585.1786975585\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 14:06:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin, same-origin\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Mar 2026 17:18:36 GMT\r\netag: W/\"1ea7-19d2b27b5e0\"\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=5,i\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RiVc1ZrHYWwy7QeXQUhgd1LelZvq%2BpHcFcXhAxUwCO9nTIHOc3qVXqaEs7eVvtkzpq8RtWCb%2FFqIvL9QywUvORv5e5z41seDlvggSU%2FKU3SCIU66a7CtJW8PPlElilxM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c93d400d3d783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7847,"size_decoded":7723,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"029b0580175550cbe067bf8781e69a40","sha1":"46b168adb93aeb70a6a8253b1c8e3c10374592b0","sha256":"bb8241a147d46fd92dc194cd463f3bb615161b5d03cbaa21ea147fc9b17a1401","sha512":"3d7f016df41eaf21bc57aabf74624c9c5d4f0511d08cc62a516c4fbdc97456e510f5d9a8d5e21e04c0efdb8461b06ceeeef65fc4b92a9b6775339283a2e61c94","ssdeep":"192:CS66knlg4JWiUWq9gOfKRziMyDba4kYjhoE4mCiMfSJHcHKMXJaZYAX9sBmHpGu:d6Jnlg4JW3F9gOfKROMoe4pL4mCnfS5p","tlshash":"4ef17d46fe42b858860cdf087aeea32723bb4ac6cb8af141fcdac615bde1038d545185","first_seen":"2023-11-01T19:36:22Z","last_seen":"2026-08-18T07:29:37.600257Z","times_seen":206,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"buytrrxx.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/_next/data/K4tR_6i62b0fLGWpnGMjT/index.json","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:25.339Z","timestamp":1786975585339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrrxx.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 07:51:49 GMT","end":"Sun, 08 Nov 2026 08:50:21 GMT"},"fingerprint":{"sha1":"75:64:DE:33:9E:E3:21:C4:AE:B4:F8:92:FD:5D:36:7D:7D:1B:C6:B0","sha256":"11:BB:2B:C1:8F:2D:8B:9D:A6:18:38:EB:A1:AC:91:DE:4E:DD:90:D2:48:D4:9A:E6:0D:76:53:55:A3:AF:41:DD"}}},"request":{"raw":"GET /_next/data/K4tR_6i62b0fLGWpnGMjT/index.json HTTP/1.1\r\nHost: buytrrxx.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buytrrxx.club/\r\npurpose: prefetch\r\nx-middleware-prefetch: 1\r\nx-nextjs-data: 1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.285833921.1786975585.-.-.1786975585.292310008.1786975585.1786975585\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 14:06:25 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin, same-origin\r\nx-matched-path: /\r\nx-middleware-skip: 1\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R%2FW7UMdRAUhumHzY9ITtaLkR2wmOVGDCLBbTZWj%2F6twaUg1vGt5vibNa3%2BIQpBJIjayOhLj%2FP3EkrONtqPrmPTxKoxlpvRzXQxDf9yoM8WpudSXoFqqn6y%2FLx%2BS6C93k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c93d405d4e783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":868,"mime_type":"text/plain","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-21T10:27:58.447126Z","times_seen":764102,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"buytrrxx.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-17T14:06:23.788Z","timestamp":1786975583788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrrxx.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 07:51:49 GMT","end":"Sun, 08 Nov 2026 08:50:21 GMT"},"fingerprint":{"sha1":"75:64:DE:33:9E:E3:21:C4:AE:B4:F8:92:FD:5D:36:7D:7D:1B:C6:B0","sha256":"11:BB:2B:C1:8F:2D:8B:9D:A6:18:38:EB:A1:AC:91:DE:4E:DD:90:D2:48:D4:9A:E6:0D:76:53:55:A3:AF:41:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: buytrrxx.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 14:06:24 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin, same-origin\r\nx-powered-by: Next.js\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JHK3MOhY%2FC6vrbxBBLxBOOmjCphdHx1Go05f%2F5vTd2PGBsPulEAHB3NUVjWKau4pVmrPxEjOruVHnLxVfm4k9ajeqJy4QJtlFixPLQOIRyLh5Wza%2BWSlNc9r%2FKRxROMj\"}]}\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a2c93d36cea40b61-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":2473,"size_decoded":2060,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1165)","md5":"b382d5433e1c975962075d43b4264a2b","sha1":"d6d9e19087585213289a8f4b2da7fdf6024bf4ce","sha256":"a9ad96d0f0f70791ef5528e5e1821b5d169cfd814ddb2b4158146205093489c4","sha512":"28e86a0aab676af34c23ec34739e1eb4b4957203f21e837e1f47f024f449392e2c79a3c9b3db774a0a28fd2d070fa7fe7a1d0c48c3ac974d5a9c8d578fa6c939","ssdeep":"","tlshash":"f15113879c0bc90d086399aca67fb20d616ad427e564dc447adcd19c0f92fdf8f48d44","first_seen":"2026-08-17T14:04:39.146749Z","last_seen":"2026-08-17T14:07:02.314812Z","times_seen":2,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":411,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"buytrrxx.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/_next/static/chunks/framework-49c6cecf1f6d5795.js","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:24.666Z","timestamp":1786975584666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrrxx.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 07:51:49 GMT","end":"Sun, 08 Nov 2026 08:50:21 GMT"},"fingerprint":{"sha1":"75:64:DE:33:9E:E3:21:C4:AE:B4:F8:92:FD:5D:36:7D:7D:1B:C6:B0","sha256":"11:BB:2B:C1:8F:2D:8B:9D:A6:18:38:EB:A1:AC:91:DE:4E:DD:90:D2:48:D4:9A:E6:0D:76:53:55:A3:AF:41:DD"}}},"request":{"raw":"GET /_next/static/chunks/framework-49c6cecf1f6d5795.js HTTP/1.1\r\nHost: buytrrxx.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buytrrxx.club/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 14:06:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin, same-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 16 Aug 2026 09:01:15 GMT\r\netag: W/\"222f1-1a009cdc378\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 149\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2BeLjjMbPc%2BBSbheOpxUH29gmjlX67D5Qg0s9qE%2FLl4RM34s8hhdKbZv5qnQffGAa0F41XrHQxjQcAh1MJHGDl7qlL6%2FfIKp33stJgtQQELhb85ngVo%2F3JUAw1NjTLXw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c93d3c2cab783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140017,"size_decoded":45991,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"917fe6063680e883ccfa073dc172fc4a","sha1":"7f628cd4e0b123221b8e641e3ec97383639ea86a","sha256":"2dba89adddf721172d7d45eeb740717576227bbffec79e34fdc083d83a9f8078","sha512":"deeb3f3936d062d2d82dd82a401e5462fac61967b04f707481e09efc6cac4cdd31221aa2fa9fa4612b78850f7a340b797db7917930a4c1ddbe505b807a14077d","ssdeep":"1536:PYjv9NX6lMuuPhxj3hrpvj6yede7y3UfzQN:Qj33tpr61d9bN","tlshash":"aed309e83995f6516ab311a700ef2803737d2a1b280c4960e215fd9e75b842bb17bfdd","first_seen":"2024-09-27T15:57:34Z","last_seen":"2026-08-20T00:48:02.894709Z","times_seen":1153,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"buytrrxx.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/_next/static/chunks/main-facd016a8d8eacc2.js","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:24.668Z","timestamp":1786975584668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrrxx.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 07:51:49 GMT","end":"Sun, 08 Nov 2026 08:50:21 GMT"},"fingerprint":{"sha1":"75:64:DE:33:9E:E3:21:C4:AE:B4:F8:92:FD:5D:36:7D:7D:1B:C6:B0","sha256":"11:BB:2B:C1:8F:2D:8B:9D:A6:18:38:EB:A1:AC:91:DE:4E:DD:90:D2:48:D4:9A:E6:0D:76:53:55:A3:AF:41:DD"}}},"request":{"raw":"GET /_next/static/chunks/main-facd016a8d8eacc2.js HTTP/1.1\r\nHost: buytrrxx.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buytrrxx.club/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 14:06:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin, same-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 16 Aug 2026 09:01:15 GMT\r\netag: W/\"200f8-1a009cdc378\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 149\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4DkKA8KDybX%2BQVXc2d1ZYEXEKZcc%2FRgNV25tt5XvmIa0BATSb0wwYMRZD3bcchEzxKCM5%2Fz8AMF%2BHlRo7nf5HvfotoxqojdDf2ei4Wp9BS9fA3mekD0CKqfBmMyAs0Nw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c93d3c2cac783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131320,"size_decoded":39875,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b5d34aa7bb4034aeecc1ea2099fdb098","sha1":"ed59e9626b0c6b8a0d9f044e7e9195a0be03dc87","sha256":"27b8f0dcd662c57bf1df8fc69da49bf9c886cd3d05bd4ae83195d61a9a6a11a1","sha512":"24eec5ec686fd8ebf4af2d076de02cd5b0bb35e0e5e97dbf1b414e5ece59cdc6e494ebc7a8cbda764cbd87c2a1511193fa3f708a3009c307b331cdf29933ffe0","ssdeep":"1536:nxjh0Q792LXdPPNSUE9cP/3YjNA1c4CMr8W4Xked2EDQoI:rYLX/Ai0NA1nCdRXkedbPI","tlshash":"36d31ab6b6d1f8a203c740e4843b0006f37a1daa145e6055f3aadcd7b9a499d90f3f79","first_seen":"2026-08-17T14:04:39.128039Z","last_seen":"2026-08-18T07:29:37.603157Z","times_seen":4,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"buytrrxx.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/_next/static/chunks/pages/index-a471d9bfb9be95ec.js","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:24.674Z","timestamp":1786975584674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrrxx.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 07:51:49 GMT","end":"Sun, 08 Nov 2026 08:50:21 GMT"},"fingerprint":{"sha1":"75:64:DE:33:9E:E3:21:C4:AE:B4:F8:92:FD:5D:36:7D:7D:1B:C6:B0","sha256":"11:BB:2B:C1:8F:2D:8B:9D:A6:18:38:EB:A1:AC:91:DE:4E:DD:90:D2:48:D4:9A:E6:0D:76:53:55:A3:AF:41:DD"}}},"request":{"raw":"GET /_next/static/chunks/pages/index-a471d9bfb9be95ec.js HTTP/1.1\r\nHost: buytrrxx.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buytrrxx.club/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 14:06:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin, same-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 16 Aug 2026 09:01:15 GMT\r\netag: W/\"4f48-1a009cdc378\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 149\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2UL2PpvGqpS5FPXUxvk4ncTrA2vmDDlS1QvDV%2FTwtEZ%2FSJGjfx1H%2FLB9848evXYeLX%2BMYjeF5itUT5WKHhUI3d5GQe2San6ZNZVl1lYTG1YJFMqttQx03uiHNYoZNv7j\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c93d3c3cb1783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20296,"size_decoded":8567,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20296), with no line terminators","md5":"5cc0d9ab454ca2603926e2778536e83e","sha1":"7f090f60dc298d60cf352dbcdb72062942b18c6e","sha256":"104da7d19b67c449345114c8bc8cc43cc1053c9522d731d86b16f4df93a68b69","sha512":"44365c8e8dbe14403357bcf738a754a9f16273e92f13269b3c392db3e459e0a6cc6f005fd0b8014fbdb50d37002d07ccd876aeda17b9914ed4f1cff3431d4cae","ssdeep":"384:WwF0G9wH/1tw5icOzsrDPrbglUO6Up2+1rcUhYRopQY/oEfRO7buByIutlAny3ZD:Wu0G9wHttw5icOuztO6Up2ArcUhYRGQt","tlshash":"759252043fc4ac50235b9bbf732b71e5e41a0c9ab64c184fe129bc68fcd5612ead5a35","first_seen":"2026-08-17T14:04:39.108802Z","last_seen":"2026-08-17T14:07:02.31759Z","times_seen":2,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"buytrrxx.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Albert+Sans:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:24.728Z","timestamp":1786975584728,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Albert+Sans:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 17 Aug 2026 14:06:24 GMT\r\ndate: Mon, 17 Aug 2026 14:06:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1743,"size_decoded":1118,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"eae7ee24db4d1f59103925efa6f42ba7","sha1":"07a77f8723aa86add6da35c2e244373074cc2b2c","sha256":"afc0858b4c5562ed3773a49b0ec593fbbb6d7459ed9ade3329a8dbb3fe4f2776","sha512":"cdabb4f5173999ea4cef0adec92aa4b3c95619ba1f806aa77cb7bac68d3d15c4ced1c0a640b00b90a47495440039903e1cd1ac0c689e66e27a620206bacad409","ssdeep":"","tlshash":"e3310181086ba914db930dc622ce7d37ee1ea160a4449e3caffe14c8fc56d2a637170d","first_seen":"2025-09-13T14:50:08.086633Z","last_seen":"2026-08-18T07:29:37.610982Z","times_seen":630,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":2,"connect":14,"send":0,"wait":32,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/18381311821/?random=1786975585020\u0026cv=11\u0026fst=1786975585020\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be68c1v9260897501za200zd9260897501xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~119367802~119367810~119527019~120213116~120385422\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbuytrrxx.club%2F\u0026rcb=8\u0026label=QkSXCK_H0N8cEM2e8rxE\u0026gtm_ee=1\u0026frm=0\u0026tiba=TRON%20Energy%20Rental%20%7C%20Simple%20and%20Secure\u0026value=1\u0026currency_code=USD\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=285833921.1786975585\u0026ec_mode=a\u0026oid=686311000.1786975585\u0026oidsrc=3\u0026ecsid2=292310008.1786975585\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dconversion\u0026em=tv.1\u0026emd=tvd.1\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:25.113Z","timestamp":1786975585113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:05:56 GMT","end":"Mon, 12 Oct 2026 18:05:55 GMT"},"fingerprint":{"sha1":"A9:3F:6E:0B:AD:3D:D0:80:52:15:1D:D5:E8:C7:78:BA:77:A7:82:4B","sha256":"F1:7B:9C:4B:5F:76:59:53:51:8B:60:95:36:73:6F:F0:DA:9D:43:63:A0:64:4C:CD:48:FD:44:DC:79:FC:F2:DA"}}},"request":{"raw":"POST /pagead/1p-conversion/18381311821/?random=1786975585020\u0026cv=11\u0026fst=1786975585020\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be68c1v9260897501za200zd9260897501xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~119367802~119367810~119527019~120213116~120385422\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbuytrrxx.club%2F\u0026rcb=8\u0026label=QkSXCK_H0N8cEM2e8rxE\u0026gtm_ee=1\u0026frm=0\u0026tiba=TRON%20Energy%20Rental%20%7C%20Simple%20and%20Secure\u0026value=1\u0026currency_code=USD\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=285833921.1786975585\u0026ec_mode=a\u0026oid=686311000.1786975585\u0026oidsrc=3\u0026ecsid2=292310008.1786975585\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dconversion\u0026em=tv.1\u0026emd=tvd.1\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: null\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 302 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 17 Aug 2026 14:06:25 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\nlocation: https://www.google.com/pagead/1p-conversion/18381311821/?random=1201321913\u0026cv=11\u0026fst=1786975585020\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be68c1v9260897501za200zd9260897501xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~119367802~119367810~119527019~120213116~120385422\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbuytrrxx.club%2F\u0026rcb=8\u0026label=QkSXCK_H0N8cEM2e8rxE\u0026gtm_ee=1\u0026frm=0\u0026tiba=TRON%20Energy%20Rental%20%7C%20Simple%20and%20Secure\u0026value=1\u0026currency_code=USD\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=285833921.1786975585\u0026ec_mode=a\u0026oidsrc=3\u0026ecsid2=292310008.1786975585\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dconversion\u0026em=tv.1\u0026emd=tvd.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026eoid=CkQKEQjw4orUBhDQ28bt8Im8nKkBEi8AsOU7gY0vs01r5o_cy0RvegjXBVKq_L0fYojcArRddzc5SgfGgEqWYOanhCiqn_D_BwE\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCJPasQII29yxAgiH27ECCNPFsQII68yxAgjtzrECCNXPsQII9NqxAgiR67ECCMnjsQIIl9SxAgjJ27ECCM3msQIIseGxAgiz4bECCKbdsQIIgNuxAgjN4bEC\u0026cerd=ChDr370tpqe-Lf-vvi24sr4t\u0026fsk=ChEI8OKK1AYQwdDawfe8iuvkARIsAIFUdcTl1mtJce42uwTs1GKxmAQgmhhVgLNts3-eKMHdV7SOTMCnKpKKMn0aAgZ1\u0026pscrd=IhMI7JuK6OqnlgMVg_E7Ah2VvhfdQldDaEVJOE9LSzFBWVE1Tm10dTk2aW9xV3ZBUklzQUViQUZiLXJ0d084cmI4Q1UwOWhDVG9xakJ4cGN3NDlJQkpUVDhDOHhBYklVU1pEaXJTb0o3cGFOYUV6DAgJYggIABAAGAAgAA\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T10:30:41.700315Z","times_seen":18011735,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/img/us.png","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:25.288Z","timestamp":1786975585288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrrxx.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 07:51:49 GMT","end":"Sun, 08 Nov 2026 08:50:21 GMT"},"fingerprint":{"sha1":"75:64:DE:33:9E:E3:21:C4:AE:B4:F8:92:FD:5D:36:7D:7D:1B:C6:B0","sha256":"11:BB:2B:C1:8F:2D:8B:9D:A6:18:38:EB:A1:AC:91:DE:4E:DD:90:D2:48:D4:9A:E6:0D:76:53:55:A3:AF:41:DD"}}},"request":{"raw":"GET /img/us.png HTTP/1.1\r\nHost: buytrrxx.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buytrrxx.club/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.285833921.1786975585.-.-.1786975585.292310008.1786975585.1786975585\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 14:06:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin, same-origin\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Mar 2026 17:18:36 GMT\r\netag: W/\"ba-19d2b27b5e0\"\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=5,i\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ywx%2FAL6leGHi7ZfFOhx1SHv6MXJLYH%2Fuq%2FZVZj7baTQbG1L7eadZX79f0YBqFUiuKYXhf6b5fLyXTME6dDNam7mqWkPXrShksCqXiqbaiq5LKeRUaH1iep%2BUWPLvgFZn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c93d400d3b783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":186,"size_decoded":1117,"mime_type":"image/png","magic":"PNG image data, 20 x 11, 4-bit colormap, non-interlaced","md5":"9cc0a94a208dd8a2a73848f51d008df2","sha1":"bb04b071595e3c2df682cc6d02fe29122ecab245","sha256":"82eb2432bd1044ea81f7583cbfce93c0901295b9207a20e0b1336ebf1d0ead9e","sha512":"60ca8c77e9fd0c223add987cdfe73110f299b99f5a714983908a0a69861b385de06cfbef79ed6fd329ac34496581c460e2cb655f570e469f5f5f195b784410d6","ssdeep":"","tlshash":"d6c0c0b3a365ee44c10e251390e8030177743f250d31b01ea1cc895b049e34300c1dd3","first_seen":"2023-12-21T13:01:40Z","last_seen":"2026-08-18T07:29:37.591831Z","times_seen":691,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"buytrrxx.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/_next/static/chunks/pages/_app-37af42d57464dd20.js","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:24.673Z","timestamp":1786975584673,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrrxx.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 07:51:49 GMT","end":"Sun, 08 Nov 2026 08:50:21 GMT"},"fingerprint":{"sha1":"75:64:DE:33:9E:E3:21:C4:AE:B4:F8:92:FD:5D:36:7D:7D:1B:C6:B0","sha256":"11:BB:2B:C1:8F:2D:8B:9D:A6:18:38:EB:A1:AC:91:DE:4E:DD:90:D2:48:D4:9A:E6:0D:76:53:55:A3:AF:41:DD"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-37af42d57464dd20.js HTTP/1.1\r\nHost: buytrrxx.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buytrrxx.club/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 14:06:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin, same-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 16 Aug 2026 09:01:15 GMT\r\netag: W/\"77b7e-1a009cdc378\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 149\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y2c1rVZzGaxFOVrlf50hEUOaKlQR5pZUyepw3Kj0kEd2pmnBq0HLpp4eH9L4JAXsnz6g8Cn0f%2FQli%2FVPU%2FG8gDs0CR6LhuJVyYx91HbgjbydM9suHc2yi%2B8ekI72yql9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c93d3c3cb0783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":490366,"size_decoded":185300,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"80ce6947ddf41751c4466f83c419f8cd","sha1":"5e5c25f1856df0c1911e347c2b6bee5d55b34a39","sha256":"4a693f1e4e4f14d18443b8219e4be4400d0cfa738581c22ca7c20a28ad8f19da","sha512":"005fc755029435ee19bac2c076d2addc5e749d7417746271dba921c40bb8b9bd1ff18a20dc3539a6d358cc4464240a96627ef311c7305b68dcbc6a06bc359fec","ssdeep":"12288:IOYk5s+r4IQJURC/Pm4jU01jW8G/w769qk1vqxssxAOYOW8PA:N5s+QJJmAW8G/w76wk1SxssxAOYP8PA","tlshash":"9fa4184266c07c58134b9f7b6627b4e8e56a0cee748408cbf314fca8f5f5616e9e1a34","first_seen":"2026-08-17T14:04:39.123689Z","last_seen":"2026-08-17T14:07:02.319944Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"buytrrxx.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/_next/static/K4tR_6i62b0fLGWpnGMjT/_ssgManifest.js","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:24.677Z","timestamp":1786975584677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrrxx.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 07:51:49 GMT","end":"Sun, 08 Nov 2026 08:50:21 GMT"},"fingerprint":{"sha1":"75:64:DE:33:9E:E3:21:C4:AE:B4:F8:92:FD:5D:36:7D:7D:1B:C6:B0","sha256":"11:BB:2B:C1:8F:2D:8B:9D:A6:18:38:EB:A1:AC:91:DE:4E:DD:90:D2:48:D4:9A:E6:0D:76:53:55:A3:AF:41:DD"}}},"request":{"raw":"GET /_next/static/K4tR_6i62b0fLGWpnGMjT/_ssgManifest.js HTTP/1.1\r\nHost: buytrrxx.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buytrrxx.club/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 14:06:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin, same-origin\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Sun, 16 Aug 2026 09:01:15 GMT\r\netag: W/\"4d-1a009cdc378\"\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 149\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HiOu%2BAZ%2FWqLER8VPtBY0duks77RgI8TYB6Tq%2BAo5ujJ1bdzvCws3EP4zwt3lRfi8HPU64BOXDcTxmvsv5UH8jUh9vhxZnp0uhsJKO%2Ft4%2Bq33VKXC2J%2BEhMSI7iiqszvE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c93d3c3cb3783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77,"size_decoded":1050,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-08-21T10:31:53.859941Z","times_seen":254664,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"buytrrxx.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrrxx.club/img/WalletConnect.png","fqdn":"buytrrxx.club","domain":"buytrrxx.club","tld":"club"},"ip":{"addr":"104.21.35.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrrxx.club/","date":"2026-08-17T14:06:25.292Z","timestamp":1786975585292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrrxx.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 07:51:49 GMT","end":"Sun, 08 Nov 2026 08:50:21 GMT"},"fingerprint":{"sha1":"75:64:DE:33:9E:E3:21:C4:AE:B4:F8:92:FD:5D:36:7D:7D:1B:C6:B0","sha256":"11:BB:2B:C1:8F:2D:8B:9D:A6:18:38:EB:A1:AC:91:DE:4E:DD:90:D2:48:D4:9A:E6:0D:76:53:55:A3:AF:41:DD"}}},"request":{"raw":"GET /img/WalletConnect.png HTTP/1.1\r\nHost: buytrrxx.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buytrrxx.club/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.285833921.1786975585.-.-.1786975585.292310008.1786975585.1786975585\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 14:06:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin, same-origin\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Mar 2026 17:18:36 GMT\r\netag: W/\"1394-19d2b27b5e0\"\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=5,i\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n2gr%2FUbWGDH1XRJLo4qDISVyqXgjycV62szxyJmaeobx6Y%2FYejA1j%2BZyCqsVs7Tha7ppGZDQYsFMyUeeeIj1dViII5UuPVodAPAAuT8WZ3Mho0jZ6WkMspje2XjuRsxi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c93d401d3e783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5012,"size_decoded":5348,"mime_type":"image/png","magic":"PNG image data, 1000 x 692, 8-bit colormap, non-interlaced","md5":"e4d5216b884d99bb09fc59c1e4bf9a67","sha1":"58d905084f7abe2b2e5c3e3fd59a29c24a7fb7b2","sha256":"0fe9c0181028aeb6a46f07ce131a3c912fec5c632cddfb13eb2e1ca39da9505f","sha512":"17f258b7b2063205f9105a7ce1251225afca63f2398f1bc7ca3e501c793333024e0762e428fda9608da1739e88ffc2bf89894295de59dbcf3816cd58072454b5","ssdeep":"96:XStJiGUbFMArS6lfHpn4TgSuTmaF/ipkbnXpejT9RxaPbKkxOz7LNIT:XStJiGUbFwSp1SuFiybn5ejTGbKl/BM","tlshash":"e2a15bd2a4ebac81cbd412751421dc52bd27c972c6c2c1a7eb3b982d09d6ea94c3a31c","first_seen":"2025-06-26T16:07:51.289575Z","last_seen":"2026-08-18T07:29:37.613011Z","times_seen":158,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"buytrrxx.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}