{"report_id":"8b835662-55d6-423f-8265-504759cd57b9","version":6,"status":"done","tags":[],"date":"2026-03-15T08:15:16Z","url":{"schema":"https","addr":"www.app-nowpayments.com/pay/x8UsS7Ty","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.app-nowpayments.com/pay/x8UsS7Ty","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"title":"Payment - NOWPayments","dom":{"size":19433,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (19433), with no line terminators","md5":"79cbbea6b302e637b75ebe6b60931b2d","sha1":"c6df8f97705c65f5bde1b3b9d2a956a59a5761d6","sha256":"80b45686a6cd273c529e926c7d2793350e6325d13936b63aa6a728867a944cb1","sha512":"9af40b6f1f6c8e46097c6c9f451379aa8063100fdbdfbadd7b55a13cc509ae752be93f72ead2fa8c076ede8e1b4c1641853c163600da2f906c148bad049c003d","ssdeep":"384:Mkf+YSuPZiFSPV8NLFi+o0DNhKlCC1v3/F+jv3Xu+Vs5xZ6jKx7kDccvX54:xf+YSuxiFS62KFC1vvF+jvnt+xMzDI","tlshash":"0f92c7797801dd57586b6dc9503b9e3b51cec83fce258868879ecf490bc2df90ba8841","dom_hash":"domhash6e968d4e1c000522549619c7413927ad","first_seen":"2026-03-15T08:15:24.158463Z","last_seen":"2026-03-15T08:15:24.158463Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.app-nowpayments.com/pay/x8UsS7Ty","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-19T08:15:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-03-11T13:42:54.363339Z","alert_count":0,"request_count":1,"received_data":115283,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-08T22:15:01.701196Z","alert_count":0,"request_count":1,"received_data":49367,"sent_data":563,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.app-nowpayments.com","ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-02-26","domain_rank":0,"first_seen":"2026-03-15T08:15:20.018457Z","last_seen":"2026-03-15T08:15:20.018458Z","alert_count":43,"request_count":43,"received_data":3231294,"sent_data":21079,"comment":"","tags":null,"fingerprints":[{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-08T22:19:32.591288Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"config.ton.org","ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"domain_registered":"2003-11-13","domain_rank":0,"first_seen":"2025-10-03T21:27:24.901658Z","last_seen":"2026-03-13T09:31:04.400342Z","alert_count":0,"request_count":34,"received_data":498139,"sent_data":15422,"comment":"","tags":null,"fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"backend-production-828174075858.herokuapp.com","ip":{"addr":"18.208.60.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2010-09-19","domain_rank":0,"first_seen":"2026-02-04T20:05:52.892913Z","last_seen":"2026-03-15T08:14:05.511742Z","alert_count":0,"request_count":10,"received_data":8080,"sent_data":5645,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/main-app-c0f38927399a07c1.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0d24018ea91805eb8473209fa645c8a","sha1":"8f4e855b8eea63ca1eca4f42237424ac6d5be003","sha256":"cee189ec06b7bae1ca6ca9ac87956555f9d3a7b308a85b3d9c4edc1a2259563f","sha512":"c857df38af7f3894b3c992f464ccae762138e40d73517a4986925111a16d1f1bf6fc7fd97d41912946bfc7e48ea190633e544c4b852016ee599ffb92461cef28","ssdeep":"","tlshash":"4cf0199a4f1df81f1d22ae74fe966ce2285f9535103b4e607900ed716d27facd2a140c","size":529,"data":"","first_seen":"2026-03-15T08:15:24.216522Z","last_seen":"2026-03-15T08:17:26.17512Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/4787-72319a94f6eeaf69.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a6a15da6f4597070b478c9072095bdc","sha1":"4bb16138a9934c062a0ee4eefdcce0a325ae7e9b","sha256":"59432b50ff8e635395903a3903172cd1622a405161c0cf7eb98a2a96bc6d7ba9","sha512":"8f8b1a9c733b50ad36fe4d540844c0dd5a8e19449b9c4fbbfff09191c5212939dcfed3acf727ce05b49dec6c9db8f715ef90136a7cdbb41b1562a80234a4a6db","ssdeep":"192:ZUFUwk5M0xo+PulWITzv3L+cbYWCRJylu1j:YU80GIUTzv3LlkV","tlshash":"2b3261aa71e5b861174350f4d03b500bfb3b14350a0c91b8b369d8fe7cac98b516ae7b","size":11482,"data":"","first_seen":"2026-03-15T08:11:50.665959Z","last_seen":"2026-03-15T08:17:04.376741Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/768-594cd303437b5b3c.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d902de81a9efe36229f9277bcb9b9d40","sha1":"e0920fec58d1ce7c40395992dd29e79237ad41da","sha256":"fe1313e4fd39793bfd38ff124fc69cca8ec1ffe19c151a1b5e9778351182c966","sha512":"19fafe092dc8c6487a210d96bb1f200dc3e1bde231eeaa07b32176e16d50919cd64f6f62d900239bdf06039aa25bff1cecff4bcf3e7f7ca51a8b4ccf4c94733f","ssdeep":"384:4YoikqO5pU4HF3kW1ZZNjTgWxIrz66/chAS9HYWOgI6AEg2RmhKFe4m8+TJtpskR:jYpU63IrYzVRmhKlm8+TRRIGzyTAogL","tlshash":"e6a2e8cdb761b16b53ab51c6442f0405e2fea9a8241d096cfb51d4c3b8b8da5a0f7f38","size":22501,"data":"","first_seen":"2026-02-17T01:17:43.095163Z","last_seen":"2026-07-07T05:06:07.211894Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/app/pay/%5Bkey%5D/page-a7108d3970cbfe76.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0227cddb5c803bff03664be322e6ee8d","sha1":"f3e3e019b3322ce96b80346570e15071b07a7f43","sha256":"1c53d9fc3099e43a9f862a39c888b5e504d0282b9e3dd542a72523ab18a421f4","sha512":"5c4344589c67b5f58c8f842c2bef228cbf5bff1f2736e9456ed607e262eec6964f5dceb861f182507668f1e0bfab17c7cc3a6f4113f20cac7efa1823f28880b8","ssdeep":"384:ng7O0C+/KwdSKcJnWOofB8199B+BoqmcB/ScgxUE/P:ng7BK0IWFZ8HgoZG/tg9/P","tlshash":"c0a2331153413e1e72930505748326bc9aa6aa84c316a1363e6d853edbb47e1ece7fcf","size":21839,"data":"","first_seen":"2026-03-15T08:15:24.254787Z","last_seen":"2026-03-15T08:15:24.254787Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/app/layout-20d36e4d97353729.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c276386c674e39bca84a485f498a946b","sha1":"07ef3dbda70ed4d33ea379a0430961f92fd2d94c","sha256":"f4dc2770421b5afdbfdd422900c03da535a812d39788b3b28c9b86313da84e00","sha512":"e744b5a8833b92eb9b8fd7c259b1aed29353e7d29030bb116113e57176fadb4f45bad069e0302de41afbcb529724ab1707f0b8354399b5cb3c756f542d702c7c","ssdeep":"96:koPQkuzLD72aW0875wINApeOwiRUZexngdtjAKsSB9STzqogdvRAAJthKIJ982DU:fPQnDKZ08eOAxJMAK99STWAA/XJ98vo6","tlshash":"40d1c8492350353727db2418b9234dcc91b2b660461680bc779ce467d6b53f4eae3bee","size":6590,"data":"","first_seen":"2026-03-15T08:15:24.223226Z","last_seen":"2026-03-15T08:17:26.172589Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/app/not-found-9550bf8e57195738.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fe39a4c13724c9bd1ed7a38c7465d91","sha1":"c42b72cdf4f05de93680c9c42d2667ee0fb6faf5","sha256":"b5e83f923bcb0245024ecd05844cdd2800ac85064809d4a381978b06c4fe7485","sha512":"7cd492a0bcef5c4fd6a813df36a78cff9a8f04dfddd77e253a6e57c0117d126df464efafe344af95d7cef658e941ad96d436d6db4a6d88dad347a4ae2ab477fc","ssdeep":"384:WI6hO3o3e3qtYh7393h3+tICu328mHmnwFwpDXsF64DD3lsiye56hO3o3e3qtYhl:2Y3o3e3qtYh7393h3+tIf328mHmwGpDw","tlshash":"6672b5a8634053ecf5038778952a6555386f39fdab59c4e8d3f92830a6640f83a1bfd2","size":17129,"data":"","first_seen":"2026-03-15T08:15:24.225332Z","last_seen":"2026-03-15T08:17:26.164427Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/3699-edff3e235871c682.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6075dbcfb9d197d77d742dfb3c50d41","sha1":"567e560683380c78493427c02a0096f600eea667","sha256":"875255111e6ed383790ec89ef0ddaa0520a6c8e0084da45ae0b8e7a73e2798e6","sha512":"5108356c518b22ec15edf9eda3e08181b4444dc2ee86207acca0b26ea2e881fb9a14f52ae7437c13c1c8772a02363d5c6e1d6e506f897b6846b939f6a9c68d27","ssdeep":"768:9fl/go1+XIVlDbDrjvIxRZh59ND9CK8TVKBymA59Fm0uRFPLcE4aHceifLUAZ4HE:tDjvq4b","tlshash":"6bc29400d39dab5cf40a46fc621f643c756f19a8a70a84b5ebf86c3071190d97a5bbce","size":28114,"data":"","first_seen":"2026-03-15T08:11:50.609897Z","last_seen":"2026-03-15T08:15:24.28078Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/7891-09605e81cf6d7fef.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"01a30a31c602752971c7e50036f8dbab","sha1":"6cab2a035854e0a73b81f477e684fe8be0edf003","sha256":"bcc91362110607c6bba181a1b471a1ca70e67963e099080aeca082357a8af04d","sha512":"20e95eefa9a18b979eeb02241d9787a57589445018c8c4fa40abed683a80ad132d802e322a984410c56234f20528d4088c711bffc6b4f62b5221dc1b6fac631f","ssdeep":"3072:kEO6bQxwTj2pWPF6dZi+q252Axl2gPy6sc99iDYBuXcYZSyqbzLhZLz0iB01KyMq:kEO6bQxwTj2pWPF6dZiD252Axl2gPy6U","tlshash":"4d04e841b3523135539b120879030378e26af954671984b5b39cc0bbdbb4aedadf3be9","size":175031,"data":"","first_seen":"2026-03-15T08:12:57.890754Z","last_seen":"2026-03-15T08:17:27.418514Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/webpack-6655d0cd3b7fe641.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"056d972506f76500718626e70d8da181","sha1":"ba9c349f239a9d469b1c727542737c88cfc4eb09","sha256":"c9d5dc32e56972dc38ed36860e8f85f0bdfd9413c7485e5b934abdc35ee6fb1a","sha512":"b70f90d45491b14895c77ed750bda8b3bc31be50f85fefac962e1a91a0c7b1e666b38a7defe7a8a44fb0b0306abe7f60508d9ef33bd9d86fdada0636d6763069","ssdeep":"192:ehvqAnAp8mz86d/5EtNd1ry4sIl+9V7LOWOW3ZOKEywLESno9:ehvojzhd+5sQ+9tLC6ZOKl49s","tlshash":"57f14dab2258f97739b14444dc3a9850f10991323d2e80e2e25fcd769830fe94e37e61","size":7776,"data":"","first_seen":"2026-03-15T08:15:24.188177Z","last_seen":"2026-03-15T08:17:26.163098Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/pay/x8UsS7Ty","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-09T17:49:40.536975Z","times_seen":218685,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/5748-752d130a742693b1.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f3a86b7969cd6a59abe3c7d482fec10","sha1":"fc2ba2431b9c68296a53a450628ebabbb9012840","sha256":"100ad5056b20bbf99c990e7f10c1c5edbac94314b55f8dc537d1efbd296440d5","sha512":"d78a95e61a03a038a22b328d804705706834bede51b29a6fb2f66cbeea68dbba398aa6f09e52240dc91861eb887e2ab5d3cd9ff9c6b1d616f7945e73a300af21","ssdeep":"6144:KUx7VAoR4g1EmeTRs8Na2tCfVFhSkCkDU/:KyVAoR4gDas8NGNFhSLkDU/","tlshash":"1444092a3a5aec3b8bca11cd34bf080491fc4833615d045cfb99d59a9a687c9b177e7c","size":272096,"data":"","first_seen":"2026-02-17T01:17:43.167568Z","last_seen":"2026-07-07T05:06:07.211224Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/1531-bea1204e6916e3a9.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6609894dfb3c8a15fc55703dc532aa5d","sha1":"c2c828ff665d83fb9f65672cc7aabd7b5c091b1e","sha256":"a6e0d3178adaed2c8bbe648491fd414f66ea524dacc499e70c35551b4cd03750","sha512":"4eb8ad931b87c43d64a59958de38a40a06e4ed7ebe3c35f9c77c64cd0ed72ac503576ca18322f5609895dcddfadb9a300f8122df0289c4afeb248ad1147ebab2","ssdeep":"192:yoFxE3EqJ4RJ4eAx5cAK99ST2QA/nZ98//:7E3EQ4RJ4n5u9MaZC3","tlshash":"c6f1b349a291312667eb5418b953069cc2b4b1a1420d44787b9cd0e39bf03fedea3bed","size":7886,"data":"","first_seen":"2026-03-15T08:11:50.68355Z","last_seen":"2026-03-15T08:15:24.289507Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/4bd1b696-43ba64781d20dbb7.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"45ca197503404c3ec373884993e955e1","sha1":"36e650675619f1a0c1fd221e5c4adbcd6fe3cbd2","sha256":"98d3a8889b0fdd8156fe5ac9cf00c94dd4006abd75b7989e4a369ed4a6d82aa3","sha512":"26291fb3d9126c4feaf192d64b73bb562b61899f5f35f80720584d5a862e1f1947e2a7da51697eb7619d56f1e6d4bfdb9556a8f5d08143a5aa597c68982f7249","ssdeep":"1536:BWuX+ZW9jo1pByrzTS6BamVShi78V201vjZdq8CB8LyvKcjY8tO7r0aKoRdZidv:zjQq7SWGV2KldqOKxEr0BoD4","tlshash":"3114f7ec3d99e665aeb302a300df28037378661b240d4d60a214fd9da57845bb17bfde","size":198620,"data":"","first_seen":"2025-11-28T14:47:25.682505Z","last_seen":"2026-08-02T06:09:09.774908Z","times_seen":217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/1293-ad8b137f5002e267.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d21be57659cf037e03080fe9feb616af","sha1":"15b2d0cee69f1e60f5652a2f7b845e5f2dce5210","sha256":"50e454a64a4abe1ef67414389adc1a78d4365ad2ff7db96064e5a8a2821e5ed4","sha512":"f2304d9bf5f9ff8c74819c6c311e3df127e112271e27d08b49066205f72102aa39539c4e0fc8a58927e6001c5bd47c6a0b100a0f8098905602de2c0163d251c3","ssdeep":"384:ngnIYIOL076rKuQHoHK0V/BMbu7Q2NES3EjLl8rgatbluwPgzwFe4Sx8:gRjiIq0V/B+EQ233Et4C6gzwFa8","tlshash":"94c2f86fe2d7fb3c47defa48e22908446e1a1b59ca8461f4aac86441bc7c4d70247b77","size":27917,"data":"","first_seen":"2026-02-04T19:51:15.85156Z","last_seen":"2026-07-12T21:09:00.076657Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/pay/x8UsS7Ty","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a3a8839e76ebfe1af71112afedcc1719","sha1":"b49b43fbf07c388e4e045d6816d7a1ee7945193d","sha256":"e5d259507d4784f190996d5d2ef2a745d1052b4e29268caf6f71a186e9c694fc","sha512":"6897cd847eba5a6b7b7ebab7d94ce0be21f83948332e97d93e84aeb0acc0c29ad2f1b152e832c7eed09793b9c6b1a98378702c5b3b8b5cc2a2c5d0f7a9633203","ssdeep":"","tlshash":"a641266ff245e8d47ca3cd5f54371e3a94c9dc3a42b8e46caa4dda6b0151cbe43ac842","size":1973,"data":"","first_seen":"2026-03-15T08:15:24.298086Z","last_seen":"2026-03-15T08:15:24.298086Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/pay/x8UsS7Ty","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e436abc8dff30a4c838e33056097be8","sha1":"2259cf5df6cad5f242266080406aa36d33833f68","sha256":"20923a14742df078b05ec5ffae8d0148b9ccebeaccb80e48aabd35cae115403b","sha512":"5b2c01c49ca66c0ad5e5afb886914d11ad82d37946c3a7d9318cb07b5b6bef7704c0746d6c04c5a53d3d357ff159f77969686b9b93cd7eefb755f469e6889298","ssdeep":"","tlshash":"7661d26e2805dd4bec7e3d69063e9c3a10cd897b4750daf4c58ece142a4687527eadc0","size":3296,"data":"","first_seen":"2026-03-15T08:15:24.300442Z","last_seen":"2026-03-15T08:15:24.300442Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/52-9db9726e1c62dea7.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"34d4ffb871a52793294a75f21a62301b","sha1":"bb218971734775bd340077b509dda9de6ffb5460","sha256":"add426630965553b2a2df517bf7ff83806ef2235bd741ceee8ddf89404865046","sha512":"166370259acc6ab14c486699219de04bec6cecc61c9b43f1dfc0b8064be9decebe9796077fc1e43d084e884a7db25c39b34faa1437796d0536ed07587a48dd32","ssdeep":"768:3LAA+rdUYcjaIKFbOnazaia0qMEiFEu3hI17XI1b1lprjv+xRZh59N897gFK8Yz/:Iqlp9Mx3Zjv3V37ew1","tlshash":"cd33b605e189ab5cf41746ec615f902c757f2a98e70a48f4fbb86c3122854d43a2fbcd","size":51311,"data":"","first_seen":"2026-03-15T08:15:24.237415Z","last_seen":"2026-03-15T08:15:24.237415Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/3794-b16d22429af19980.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"132a3a987b79559e5e145d2629a2f904","sha1":"30c0b9571c7abab379aba15e72861b811347e6eb","sha256":"f377dd2981c53b54b9177262f3edc3a57de414dc849c0af9601f8089f1e38e35","sha512":"93954f7f35a93bb4f0a08c376104b1dee1b3b9f2bd0c5689e83498ecf4ad6932f61343e815c9f874589dd4c545963c7557233f4d1908a33925e85a614d74fbfe","ssdeep":"1536:5OVOEGCzPAfNuGIzANAPeEkTkbS81W/cxAhxMEbS+iBzuEOsx4vJheboQtT9elUf:8sNAPeEkQpvH3O3YbNA2FtKHm","tlshash":"1b14e9fa35d0f8a207a740e6c43f4006f2295c77145e74a0a3e6dcd975a45dea0b3faa","size":195265,"data":"","first_seen":"2026-02-04T19:51:15.86Z","last_seen":"2026-07-12T21:09:00.036638Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/9e84c5da-87a4fcd6721a0ca8.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"de5b61281836d9da597ea43a5f9fcdac","sha1":"45144de9d297ca974e0e6a9d4fe2cbaa846d78d4","sha256":"527b14e5161612ae7204c548ec8e4cc5ff7ae7e1aebce0a4d2d306b178ccac12","sha512":"89859f1b93b0c942bb79fa8a1332f21ecfd53b5563eb5ae293a8da8cf3d330010d5c2f5fc739ac70e5947c147875cd8de30cc8122d47d9db37f0d385bc02635e","ssdeep":"1536:2YoSAskvFOxKEvaMEJqVzgGjGTb5wLzRnCJ:uSAskNOxKEvxVMGaCLzVCJ","tlshash":"55631ab2bb50f02407f3519968632121f3392e8955558078f73dc8e2ae716cd93b7bba","size":71273,"data":"","first_seen":"2026-02-04T19:51:15.874585Z","last_seen":"2026-07-12T21:09:00.051538Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/6809c4f0-b55e5589f94f439d.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"947521f639a7a600afce157d322ab1f9","sha1":"5a89d321f28c96a1e9ccc4557bc70b8028a6984d","sha256":"a9b037de2b374eb94039ab3fb8293dde4146c935c8198e6704e73e5111400a21","sha512":"69c79dee0dc1749d87e5a4f26d9396a1edf5fb34cb6e704368b0e7bbfd29585efa308f6df225233563632e75d64f36f953a7b6018d7d2c47848ed315995304c3","ssdeep":"6144:2z+KTAtWq7KvsdeevgMlrCOWF92Atf6RjA+EVVGKlcM4qo9rB2WFkwC5ZUE7IHj8:+8WqqsH1l8","tlshash":"cf3429dab387b261234b47d944774152f32e18fa180d857cfb69498a3f50988d2bbbf4","size":243641,"data":"","first_seen":"2026-02-04T19:51:15.882927Z","last_seen":"2026-07-12T21:09:00.045871Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/pay/x8UsS7Ty","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"da7f17ab45c8a4382f553738cc6275f9","sha1":"fbdeb9825926f8ed7c16017112a5a9243a3a48aa","sha256":"4e7e0e40362d676c8f019e06c6b172a5a8c5c71a9fc753bc4be9e05a556b3b5b","sha512":"bc6c624c037e8289f8d9aa08140859ed16857a0b62086d01fb0d0aeb374572b084c57f55f2f627b19c3b70df129fae7b5f131a063afbcb987ea20da6e0190f83","ssdeep":"","tlshash":"d8e026a0bc02dc09e69b5f29083b4c3a22dcc7a94245918bd5d4ce240986e3009f1e82","size":344,"data":"","first_seen":"2026-03-15T08:15:24.303008Z","last_seen":"2026-03-15T08:15:24.303008Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb0a2fecf6cd27fba9cd29610fd2ccdc","sha1":"7546ed807d56be081be97fa1e4859381ecccf58e","sha256":"dc67f1e084e069a3fb629f3154765856fe0aa805a4e138bc42c228bc3d656a78","sha512":"5350795e68c371956350f88354aac62900d7fc5974817e93f49f218fa60becda436da0a8bf17d6239e2ef882cee0b18bfe66e181baa6f1ca04b57817c2920166","ssdeep":"1536:pO5TpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:s5TpRdfcKFU7Rx1H","tlshash":"31b33e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","size":114950,"data":"","first_seen":"2026-03-10T21:38:17.367441Z","last_seen":"2026-08-06T08:41:46.722793Z","times_seen":775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/920-0f0039d00f57f570.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9411c2ff52a439eece5755e368e809a4","sha1":"2c7ac7b1466d8ffe8fb901928487bafbb8d0166a","sha256":"a152bbad468503db79028a84740c4b2a1eaa15410244e9ae0afa13c3863f3560","sha512":"b426e206b6e34c7d55d3dd75eb62f1d2cddca3aa5db4597839b44e819c66cba0cc4c2508bb19d833944205429ee3984860b27fa96082763bdbfa59844e224596","ssdeep":"24576:ewdjy5+HetrFafFNP/l/xVjdbMn7e+07QOCYH:eWHedcfFNP/l/xVjdbMn7j07QCH","tlshash":"8e556d957361f43643db419aa47a1102f2389858141d842cf7ececebbb989c992bff71","size":1394280,"data":"","first_seen":"2026-02-17T01:17:43.181758Z","last_seen":"2026-04-11T23:48:54.379962Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/1293-ad8b137f5002e267.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:54.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/chunks/1293-ad8b137f5002e267.js HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 15 Mar 2026 08:14:54 GMT\r\netag: W/\"6d0d-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562494\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562494\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27917,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (26830)","md5":"d21be57659cf037e03080fe9feb616af","sha1":"15b2d0cee69f1e60f5652a2f7b845e5f2dce5210","sha256":"50e454a64a4abe1ef67414389adc1a78d4365ad2ff7db96064e5a8a2821e5ed4","sha512":"f2304d9bf5f9ff8c74819c6c311e3df127e112271e27d08b49066205f72102aa39539c4e0fc8a58927e6001c5bd47c6a0b100a0f8098905602de2c0163d251c3","ssdeep":"384:ngnIYIOL076rKuQHoHK0V/BMbu7Q2NES3EjLl8rgatbluwPgzwFe4Sx8:gRjiIq0V/B+EQ233Et4C6gzwFa8","tlshash":"94c2f86fe2d7fb3c47defa48e22908446e1a1b59ca8461f4aac86441bc7c4d70247b77","first_seen":"2026-02-04T19:51:15.85156Z","last_seen":"2026-07-12T21:09:00.076657Z","times_seen":52,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:54.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 15 Mar 2026 08:14:55 GMT\r\ndate: Sun, 15 Mar 2026 08:14:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-08-09T17:48:56.821552Z","times_seen":39880,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":172,"dns":1,"connect":21,"send":0,"wait":33,"receive":0,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/tonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/tonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 5386\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-405f39761858734f885828eed45c72ff-648e198e1fa4961a-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-150a\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc14\r\nage: 13\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:43+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"bd4264d4c32c16d646517faf4462e5be","sha1":"df6493d70355759579c8941728747814ac5f081d","sha256":"6da4766fae3c3ba2cb931c8b3485461fddc96d6244cdc45fdb800e70e0e1a0ec","sha512":"1e63fc6f27b609bf8386333b3a535cc0a08c18594681c6344ea96dda3582ed5bb85f1bbb53f0f7c9d6b7659ec61a14c8da6b13d5f30a556779b2ebb6a39a40ce","ssdeep":"96:HzmLnGewr7Elc/cd0sNz13DX8DxS6fzuenbEdUApFXnEVMNlW75wm+o:HyDyrkbRzJDMDxREbFXgMrAw8","tlshash":"38b18e5f3da8d243ab5c913f455cc44e3201cc857a8c4a1176acc64f606a2628feea1f","first_seen":"2025-03-22T03:47:07.763738Z","last_seen":"2026-08-07T16:44:13.660292Z","times_seen":1017,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":262,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/media/e4af272ccee01ff0-s.p.woff2","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:54.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/media/e4af272ccee01ff0-s.p.woff2 HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: font/woff2\r\ndate: Sun, 15 Mar 2026 08:14:54 GMT\r\netag: W/\"bd30-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562494\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562494\"\r\nserver: Heroku\r\nvia: 2.0 heroku-router\r\ncontent-length: 48432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-08-09T17:48:19.344979Z","times_seen":88454,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/miraiapp_tg.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/miraiapp_tg.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 14743\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-bcdd5dca953b67defd94d8e68efba1be-ca7c8e6c740c8849-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-3997\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc22\r\nage: 14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":14743,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"4183f4114e1e2fb9f436d5ff9b7debc6","sha1":"c11f74163dc7a56bfb2e9adec8e34b35413a27b7","sha256":"0e9842f97a85f5a3317ae59868dd7a98c706ac325249ace72b3511db7a6ce0c0","sha512":"69a2c21046972f4d38ea697aa5d85e7e5c3305b450292b47a017a0ba4bdcd72f4f8563a4965c9849d311ba8499cee43d41a5924ff0177b0687a7783267b9c406","ssdeep":"384:fx2yKuzEkkTr9SfDDm8JH0o/CgLcjTZEEAPSdn:fx2yKuzjkTrM/H0o/CnjT6EAqdn","tlshash":"6862c047856cdce7d0a16dfdf3e9beb71e73063475a64004a3ae0af1eab2b400687016","first_seen":"2025-11-22T11:30:21.467365Z","last_seen":"2026-08-07T16:44:13.792534Z","times_seen":405,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":254,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/echoootonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/echoootonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 56008\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-2e3a286df921769f6a8e37f9f4b5c311-adbb421628a7eb9a-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-dac8\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc19\r\nage: 64\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:13:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"0045354563623ba7033b82568a35011b","sha1":"d30a9a2cba690a17b513a8cc91edc1166f807213","sha256":"b795fde982e92cc1ba959c241406c4708c085481ead3d10f56dee883cb4742f8","sha512":"3a2f5a407d92e20d81bd44b566edbe377f7ae52e53d8167fc601204dfbe7ff2563abd6d05ce2693d6ace7441f930dc6a7de4a114877ef762b02aecaef0298afb","ssdeep":"1536:ONwl6IKG8c33My8czUrOrqIHc2XkV79P2uIZ998V+1EYG6:D6IKenMy8cYItHSV7jIZj8V+1T","tlshash":"4b4301dabdcc4f123ff773d7e0094366ee4872492732543801de65c62668b6679fa148","first_seen":"2025-11-22T11:30:21.508458Z","last_seen":"2026-08-07T16:44:13.738002Z","times_seen":405,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":246,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend-production-828174075858.herokuapp.com/client","fqdn":"backend-production-828174075858.herokuapp.com","domain":"backend-production-828174075858.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"18.208.60.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:56.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.herokuapp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BC:F1:45:C8:21:19:7F:72:A4:09:2F:2F:B0:51:8E:A3:9E:AF:0F:BF","sha256":"7C:C7:DF:0A:D1:20:69:CA:B9:7F:44:40:75:60:56:00:94:ED:A3:72:FD:A6:ED:DC:49:F8:84:38:52:8C:55:88"}}},"request":{"raw":"OPTIONS /client HTTP/1.1\r\nHost: backend-production-828174075858.herokuapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.app-nowpayments.com/\r\nOrigin: https://www.app-nowpayments.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: *\r\nDate: Sun, 15 Mar 2026 08:14:56 GMT\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=wt57b4U6ND9Wm8wmCTBHvGUvEFE8B1GEJElqpRvCa%2B0%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1773562496\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=wt57b4U6ND9Wm8wmCTBHvGUvEFE8B1GEJElqpRvCa%2B0%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1773562496\"\r\nServer: Heroku\r\nVary: Access-Control-Request-Headers\r\nVia: 1.1 heroku-router\r\nX-Powered-By: Express\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:49:05.676991Z","times_seen":17803399,"resource_available":true,"data":null}},"time_used":1096,"timings":{"blocked":0,"dns":0,"connect":95,"send":0,"wait":99,"receive":0,"ssl":810},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/nowpayments/payment-lines-top-icon.svg","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:56.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /nowpayments/payment-lines-top-icon.svg HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/_next/static/css/e4565120a7b98071.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/svg+xml\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\netag: W/\"ce-19caa0f0120\"\r\nlast-modified: Sun, 01 Mar 2026 15:40:36 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=l3uj9V0mdbXYeVDVN6CXwtjm6Cqd78W5s8l6LoixoQc%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562496\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=l3uj9V0mdbXYeVDVN6CXwtjm6Cqd78W5s8l6LoixoQc%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562496\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\ncontent-length: 206\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":206,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2e63b4e59aad05b3fe93e7511112a1f","sha1":"59a8f740aa4baf39b6c3cf651d103f86ca4c0c4e","sha256":"2df248c61889f9131f0104b829cdc7cc5993b61b3283d2cacd73f29f8dbd651f","sha512":"79a23f03549329e028bd8321dd2a555b902fae0fa2fa9b1272d77480a4b6bebd49332dd222757960b8278cdfa58da33b34e4ea21d001dcf7c6dbbd2d16ba05e3","ssdeep":"","tlshash":"78d02228e6891874a4208a44db3ce618236b207b038f898df4d57879635438b2cba2ac","first_seen":"2026-03-15T08:15:24.170532Z","last_seen":"2026-03-15T08:15:24.170532Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/tokenpocket.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/tokenpocket.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 5985\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-21ea7ed22af7e6e8dd813ca61012d971-52498fdc6a6b5b32-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-1761\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc21\r\nage: 14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":5985,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, interlaced","md5":"987444e9a03d1c96165134993befbf9e","sha1":"f10357bacad45366cb96605509f7d5ac4533ac35","sha256":"3dcd239d221b091127db2a3dd71d63f0885105b244ceb32962f9fca4dc2f6982","sha512":"1daa7d636e12964377287fd733a9c8d5fae5d28ef4fba8a68eb0d1d7f0c36868b76d9436b991588bf83c3311818c3ebad599111398cbb3538bbf77f9cb2b7abf","ssdeep":"96:mgpKD/yRZMOU/XHJBNt/8kBIU93p9MztPvzoAM8GqlSvQF0epLhExssssTsPHNsX:vRevz05U9DMztHzoJASvQF3pL+lsPtzs","tlshash":"3dc14cde48dbae57754e4b726b625319c1a543f6e0f2ce4b4d078a30797b6507433148","first_seen":"2025-11-22T11:30:21.530051Z","last_seen":"2026-08-07T16:44:13.593431Z","times_seen":405,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":251,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/nowpayments/logo/nowpayments.svg","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /nowpayments/logo/nowpayments.svg HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sun, 15 Mar 2026 08:14:55 GMT\r\netag: W/\"153f-19caa0f0120\"\r\nlast-modified: Sun, 01 Mar 2026 15:40:36 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=Yjwl4jzqqf3ldpf10B%2BxcN2dNYws5z%2Bq75HIYohs5Q0%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562495\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=Yjwl4jzqqf3ldpf10B%2BxcN2dNYws5z%2Bq75HIYohs5Q0%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562495\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\ncontent-length: 2199\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5439,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0f1578949904ed4f62f397e21760babb","sha1":"4ffff18e520f389dc205547fa690fef1d4929d22","sha256":"4755d5b8f22ef5e69f6fccbc005fd22997ebe710de9416009e1a19061388b487","sha512":"d76d8afdf8c1e2b6733e2030f8b2e5091efb89b137cdab6ca0ed293481f7e9a5440ceb3dd58af9919db0a77ac98185d65ef3b90e694234a124322a3e3914adac","ssdeep":"96:LjtrJH5/SxCC/A6CveprEmR8sOtgKdt8Badton68NTgXSo6FOotr1VEXt0hHoCiv:hR5/m46CmOKf1Pn68tg36FfEXyHoCiTD","tlshash":"f9b175db1760929cedced97eef267974940664f5b6bbc081468f8b08a44fcc8e709c80","first_seen":"2026-03-15T08:15:24.175604Z","last_seen":"2026-07-15T08:04:06.480855Z","times_seen":7,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/favicon.ico","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/x-icon\r\ndate: Sun, 15 Mar 2026 08:14:55 GMT\r\netag: W/\"358-19caa0f0120\"\r\nlast-modified: Sun, 01 Mar 2026 15:40:36 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=Yjwl4jzqqf3ldpf10B%2BxcN2dNYws5z%2Bq75HIYohs5Q0%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562495\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=Yjwl4jzqqf3ldpf10B%2BxcN2dNYws5z%2Bq75HIYohs5Q0%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562495\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\ncontent-length: 856\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":856,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced","md5":"d999311a8506a6e8739bb504ed06b009","sha1":"ab10d6fc14c8780e3eca25ce0fcedd3a4bdfae20","sha256":"39b7dbded284d8d5b9ddc44722b75eb5f804cbfceb56c22e2fe9434a5b833b20","sha512":"3e8983b34b630f54dce5db1d038bea6224767bd4bdbb89ad241bb0ea21b485553d38ecb7c03b1088608210a4b41b1c32968f597d75c853334f66116ad8f1aea5","ssdeep":"","tlshash":"8511daf668c65854c23978366f72e9f94373c02540d5c8883286f8e601b82fca139795","first_seen":"2026-02-04T19:51:15.853891Z","last_seen":"2026-08-02T04:22:45.06525Z","times_seen":55,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/9e84c5da-87a4fcd6721a0ca8.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:54.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/chunks/9e84c5da-87a4fcd6721a0ca8.js HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 15 Mar 2026 08:14:54 GMT\r\netag: W/\"11669-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562494\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562494\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":71273,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"de5b61281836d9da597ea43a5f9fcdac","sha1":"45144de9d297ca974e0e6a9d4fe2cbaa846d78d4","sha256":"527b14e5161612ae7204c548ec8e4cc5ff7ae7e1aebce0a4d2d306b178ccac12","sha512":"89859f1b93b0c942bb79fa8a1332f21ecfd53b5563eb5ae293a8da8cf3d330010d5c2f5fc739ac70e5947c147875cd8de30cc8122d47d9db37f0d385bc02635e","ssdeep":"1536:2YoSAskvFOxKEvaMEJqVzgGjGTb5wLzRnCJ:uSAskNOxKEvxVMGaCLzVCJ","tlshash":"55631ab2bb50f02407f3519968632121f3392e8955558078f73dc8e2ae716cd93b7bba","first_seen":"2026-02-04T19:51:15.874585Z","last_seen":"2026-07-12T21:09:00.051538Z","times_seen":52,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/1531-bea1204e6916e3a9.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:54.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/chunks/1531-bea1204e6916e3a9.js HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 15 Mar 2026 08:14:54 GMT\r\netag: W/\"1ece-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562494\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562494\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\ncontent-length: 2697\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7886,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7872), with no line terminators","md5":"6609894dfb3c8a15fc55703dc532aa5d","sha1":"c2c828ff665d83fb9f65672cc7aabd7b5c091b1e","sha256":"a6e0d3178adaed2c8bbe648491fd414f66ea524dacc499e70c35551b4cd03750","sha512":"4eb8ad931b87c43d64a59958de38a40a06e4ed7ebe3c35f9c77c64cd0ed72ac503576ca18322f5609895dcddfadb9a300f8122df0289c4afeb248ad1147ebab2","ssdeep":"192:yoFxE3EqJ4RJ4eAx5cAK99ST2QA/nZ98//:7E3EQ4RJ4n5u9MaZC3","tlshash":"c6f1b349a291312667eb5418b953069cc2b4b1a1420d44787b9cd0e39bf03fedea3bed","first_seen":"2026-03-15T08:11:50.68355Z","last_seen":"2026-03-15T08:15:24.289507Z","times_seen":4,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/openmask.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/openmask.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 4441\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-ae86383c1a24c39dbebd6d4deeab06fe-a16d5247474477c6-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-1159\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc15\r\nage: 14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4441,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"ec081e53ad51c57d64e634569182acce","sha1":"4a4fb1ce3714e386197cc321460177367014fe58","sha256":"773c0248eae5d85ac71cf6f4e4cf4f57160e448a68178cac269c33badf4ffb8d","sha512":"b2e8d498747d61c8defb07867cc333429afae8abb90b082538d17e0c8a5ca8fc631efe1500834be01a40daf2896873f5fe7e1a26e21b598ff5931449fb426003","ssdeep":"96:DhV3jO9vXvgpAhSstqNNE2/F6/d0O1256XClGogKDDvc+x9:DXC9vvgKzqNNE296/OO1Gb0ovDvc+n","tlshash":"80917dced641c49fe92241e2ce7fbdd21d15ee29c804768032aa11254df711e6bd609e","first_seen":"2025-11-22T11:30:21.537023Z","last_seen":"2026-08-07T16:44:13.687183Z","times_seen":405,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":268,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/bitgetweb3.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/bitgetweb3.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 1176\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-853312bec000feb3d0b4243036502059-b5369efb5689d022-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-498\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc19\r\nage: 14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1176,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"5d9631b0982fce76f8acc8c1c1f29e3c","sha1":"7e9d2c3adaf1a34c615c802c6ca5008ea9e46e5d","sha256":"da61705b68b0f898ebbf4416c74a0bbc94d98253af445b4b93f5498905d81111","sha512":"a00da5a594b804cf3bedf492e48b6f09287fd208c4e3b0c24b75808207ec66d264842b8ec528b6b56dfd1a698e0986c5e5d3794d0df10a8cad3bf0dc8c2707b1","ssdeep":"","tlshash":"2d2111ebcd5a11bf145b620a024b35d054b6d56f25028ecedf15287808075d6f6b6a87","first_seen":"2025-11-22T11:30:21.528379Z","last_seen":"2026-08-07T16:44:13.722417Z","times_seen":405,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":266,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/cactuslink.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/cactuslink.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 2402\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-e5bb53cb4f0916563266376ffef50ba4-b0c6e5a06be9f534-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-962\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc22\r\nage: 14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2402,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"9571ca461ce9dd8f0f042f28d3a1c27e","sha1":"d0eeaaf50dde6b257b1b04a67a9ff0330cfb36e7","sha256":"20c297ad923829fae31753cb8d1bb92f5955e117052f7eacc962b25c0f60dc2f","sha512":"d336ceff51fb4d0309bb95e2eebbd657f09d12ce577b0a3ca514837e32aabbb7bd3d888016eb4b6fa3fb70fed617e468d4a8127f9b2d749aa9f6400bb5498a38","ssdeep":"","tlshash":"ba412a430319bf3175e18a155b61978edf6ec89cdf2c48acf59b660a1915388aac26c8","first_seen":"2025-11-22T11:30:21.490083Z","last_seen":"2026-08-07T16:44:13.711354Z","times_seen":405,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":242,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/webpack-6655d0cd3b7fe641.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:54.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/chunks/webpack-6655d0cd3b7fe641.js HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 15 Mar 2026 08:14:54 GMT\r\netag: W/\"1e60-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562494\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562494\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7776,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7776), with no line terminators","md5":"056d972506f76500718626e70d8da181","sha1":"ba9c349f239a9d469b1c727542737c88cfc4eb09","sha256":"c9d5dc32e56972dc38ed36860e8f85f0bdfd9413c7485e5b934abdc35ee6fb1a","sha512":"b70f90d45491b14895c77ed750bda8b3bc31be50f85fefac962e1a91a0c7b1e666b38a7defe7a8a44fb0b0306abe7f60508d9ef33bd9d86fdada0636d6763069","ssdeep":"192:ehvqAnAp8mz86d/5EtNd1ry4sIl+9V7LOWOW3ZOKEywLESno9:ehvojzhd+5sQ+9tLC6ZOKl49s","tlshash":"57f14dab2258f97739b14444dc3a9850f10991323d2e80e2e25fcd769830fe94e37e61","first_seen":"2026-03-15T08:15:24.188177Z","last_seen":"2026-03-15T08:17:26.163098Z","times_seen":2,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/7891-09605e81cf6d7fef.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:54.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/chunks/7891-09605e81cf6d7fef.js HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 15 Mar 2026 08:14:54 GMT\r\netag: W/\"2abb7-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562494\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562494\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":175031,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (40792)","md5":"01a30a31c602752971c7e50036f8dbab","sha1":"6cab2a035854e0a73b81f477e684fe8be0edf003","sha256":"bcc91362110607c6bba181a1b471a1ca70e67963e099080aeca082357a8af04d","sha512":"20e95eefa9a18b979eeb02241d9787a57589445018c8c4fa40abed683a80ad132d802e322a984410c56234f20528d4088c711bffc6b4f62b5221dc1b6fac631f","ssdeep":"3072:kEO6bQxwTj2pWPF6dZi+q252Axl2gPy6sc99iDYBuXcYZSyqbzLhZLz0iB01KyMq:kEO6bQxwTj2pWPF6dZiD252Axl2gPy6U","tlshash":"4d04e841b3523135539b120879030378e26af954671984b5b39cc0bbdbb4aedadf3be9","first_seen":"2026-03-15T08:12:57.890754Z","last_seen":"2026-03-15T08:17:27.418514Z","times_seen":6,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/api/ton-wallets","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /api/ton-wallets HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=3600, s-maxage=3600\r\ncontent-type: application/json\r\ndate: Sun, 15 Mar 2026 08:14:55 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=Yjwl4jzqqf3ldpf10B%2BxcN2dNYws5z%2Bq75HIYohs5Q0%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562495\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=Yjwl4jzqqf3ldpf10B%2BxcN2dNYws5z%2Bq75HIYohs5Q0%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562495\"\r\nserver: Heroku\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14841,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"14caea9d8a2ed0394c2e3c9d9052b939","sha1":"83a0883c2c5cd9fe823aad7187339f7469114fd9","sha256":"fa12f12deebe6e0547b12e736951efaba8941d38f67d60608b0df5c89cd377b1","sha512":"35b4acf5e73e8d7c13859362e06789519e39c8e00c4925f46780f42d2a7e4c0e1e566e7a54c97d282e1d87148ed4ab7754834e7f656e909cff585f995b7fb74b","ssdeep":"96:uh9mqXn4q9AcOR+ssTUi/DFiEvFFCnYdWK5QSEeTE1NFaaE2kaxceVBCjJBlLpJe:yvX4fczr06FCum81hTEfws","tlshash":"8062dcab17a46c3e2751a3c5b88b3e4ee152258bd9c1fcb9d604dce8d2ad6dc001365f","first_seen":"2026-03-15T08:11:50.656375Z","last_seen":"2026-04-07T01:39:05.063747Z","times_seen":14,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/tonkeeper_pro.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/tonkeeper_pro.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 18520\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-6db734391f1825f99da68a7f68687912-c4496568234998ba-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-4858\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc15\r\nage: 14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18520,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"3c952c0c19268d9ede72dba2b327d99c","sha1":"1b1e98ee3538963e3dc9089746386d6acf397e80","sha256":"2d0ab9711dbced8b88b2f207a139e623641ddb8c40e375cfa888016d32aa01ca","sha512":"e3bd01ffedf9d33530a5e5246cee26f8a54e17423861d6b595952024e9c6baecac67fa4d7f1250103cc46ae83428c82403cdff7751a665c760e01ab50b551af4","ssdeep":"192:uiYxYUIKZ50p++PRy145vrPXZNAvccFB6B6EfkpFcLYp29BTW8q2dqojHOX9k9uL:u9EKMn4SjXrA0cYjLYStPHMw/NfIBN/","tlshash":"af82d01622a3994d2f79a9f8ee25fa38344102dd5fdab8d9cdd6c0ce184ca64e533c61","first_seen":"2025-05-19T03:10:12.400525Z","last_seen":"2026-08-07T16:44:13.723604Z","times_seen":961,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":249,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/koloweb3wallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/koloweb3wallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 9346\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-a2e0016c52ac0b1b7f2ac5f00009f6e2-925859ae8eda0ad1-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-2482\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc21\r\nage: 14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":9346,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"f446d0b0b827dc92763198290f6d1913","sha1":"04594a5bf79e05ce7877e4f71c7900d7fe01f0d1","sha256":"835ac69b7fcb8a385ab079c693ee6a2c40a0185932816448de9067e132e548c1","sha512":"ae8496a514ffe87c754ab51530eec863d0980b87876bacfe98dff71835d68f936e2372f4e0675e374bf3285e57775aed390c3391978b6846b06a7b32a758a401","ssdeep":"192:oK2RPyVPVwevy1jvZpWZqXYTNsQFia/QX3mTnVBMTk8WAC:oFdyVNwnjvZsoXsNvFias38nzVx5","tlshash":"60129f81b6d20209e7bf62db2ec9bbc254a7ad374c39917e1b55e08138f14b681c5dc7","first_seen":"2025-11-22T11:30:21.47152Z","last_seen":"2026-08-07T16:44:13.739465Z","times_seen":405,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":244,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend-production-828174075858.herokuapp.com/pay/x8UsS7Ty","fqdn":"backend-production-828174075858.herokuapp.com","domain":"backend-production-828174075858.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"18.208.60.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:56.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.herokuapp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BC:F1:45:C8:21:19:7F:72:A4:09:2F:2F:B0:51:8E:A3:9E:AF:0F:BF","sha256":"7C:C7:DF:0A:D1:20:69:CA:B9:7F:44:40:75:60:56:00:94:ED:A3:72:FD:A6:ED:DC:49:F8:84:38:52:8C:55:88"}}},"request":{"raw":"GET /pay/x8UsS7Ty HTTP/1.1\r\nHost: backend-production-828174075858.herokuapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.app-nowpayments.com/\r\nContent-Type: application/json\r\nOrigin: https://www.app-nowpayments.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 168\r\nContent-Type: application/json; charset=utf-8\r\nDate: Sun, 15 Mar 2026 08:14:56 GMT\r\nEtag: W/\"a8-fGtf8Wx6C6IJTjUegfUwK6pizGU\"\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=wt57b4U6ND9Wm8wmCTBHvGUvEFE8B1GEJElqpRvCa%2B0%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1773562496\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=wt57b4U6ND9Wm8wmCTBHvGUvEFE8B1GEJElqpRvCa%2B0%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1773562496\"\r\nServer: Heroku\r\nVia: 1.1 heroku-router\r\nX-Powered-By: Express\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":168,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"520851ad2ffa9cd218f0ffdb84b2830a","sha1":"7c6b5ff16c7a0ba2094e351e81f5302baa62cc65","sha256":"54d415fcbf2fc9d3ba020736726e6eb28627c77deadcc39f99d7b23f44013d4f","sha512":"5330a7852002e399b5f4edf8fa9d19ec57c4f08cf585491f21225de0878ab88fa9599c52d6f9ed8ec5b6b54f446e11e86da80c77c3d4215fe86df9041a9979ef","ssdeep":"","tlshash":"65c08ca237111bb48e091bc45c95142217b8314382450898c9afdaa8812ce323803f0a","first_seen":"2026-03-15T08:15:24.198643Z","last_seen":"2026-03-15T08:15:24.198643Z","times_seen":1,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/nowpayments/payment/status-waiting-active.svg","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:56.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /nowpayments/payment/status-waiting-active.svg HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:49:05.676991Z","times_seen":17803399,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/nowpayments/payment/status-finished-new.svg","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:56.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /nowpayments/payment/status-finished-new.svg HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\netag: W/\"a1f-19caa0f0120\"\r\nlast-modified: Sun, 01 Mar 2026 15:40:36 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=l3uj9V0mdbXYeVDVN6CXwtjm6Cqd78W5s8l6LoixoQc%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562496\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=l3uj9V0mdbXYeVDVN6CXwtjm6Cqd78W5s8l6LoixoQc%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562496\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\ncontent-length: 1274\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2591,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c61633890799e56947964a0886c5c896","sha1":"81e7910f7584b37ab681640da55fdae23b54a2f2","sha256":"31af82c6aeb72689e56bf828f9c456fdd228432448813db230f3a5d785804914","sha512":"c48b83aca8636ccc4451229865dfe090457e1b777cf4852a229d5b2234873038508d2e1803db3c94a2184b5c85449bfe47e70e824feaab4a585b2bdfa11f4d44","ssdeep":"","tlshash":"dd5110c65620d3cd95c9d86fdf76ad981007b0aa69fe8ac1ceaf5608405fc8cf718d44","first_seen":"2026-03-15T08:15:24.20227Z","last_seen":"2026-07-12T18:43:07.387016Z","times_seen":3,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/gatewallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/gatewallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 6751\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-6e0eda73409bf0f490e4104f4200f21f-7e1242171b76dc63-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-1a5f\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc16\r\nage: 14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":6751,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"851d63e4f663bfecd0370dfcdb0ba69b","sha1":"de014e7a7df805557a65d9d58fb4e70224799e61","sha256":"6e84eb43cd2faeb5037e32b4b2e2aec1b417bd32dfee397de90918bcbef561b1","sha512":"5e2f2434179f71ecc5ba2b689a7359df2d723254bbc08c29512b87b5e85e25ebf756f661964cd82058becea038846870359b4fe72ac76c9a8ec5e55ca4a5cf9c","ssdeep":"192:FSzHxFMOKxw3uBeLUr7iMgf4v4LVrjfQNCG3:kzHxFM7guBguia+rs","tlshash":"b4d19fc4a398933dc95e61cb3ed36b939f829614632462267fb5353124f215cbeb8372","first_seen":"2025-11-22T11:30:21.512015Z","last_seen":"2026-08-07T16:44:13.633337Z","times_seen":405,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":270,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/nicegramwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/nicegramwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 3587\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-df8a5cc6c4b781b9a90d2dc5e97cddb1-d5cb4f3a7f78de2b-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-e03\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc16\r\nage: 14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3587,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit grayscale, non-interlaced","md5":"87ca5b77ce1e13cff2867ae76f509c4d","sha1":"50b7941c8c1d6bc3bb13e42512a80ea71cbd2ce5","sha256":"e57a5da21f4f8fe1f226c957f00d69e1d64da4764b4305f58795df6a8084c591","sha512":"7f76188cb2109ded78ad61ef55c9973c622c468ebb3cdc81cad453fdba94f6dcdd49e776240476b70ec62611f65dd3523c0de69d8dc774b7f085add684d45ef5","ssdeep":"","tlshash":"9f715ba33754e78bc5cf0b73cdb55e829f294082dfca5449748d98938b41b922a8b602","first_seen":"2025-11-22T11:30:21.507445Z","last_seen":"2026-08-07T16:44:13.771592Z","times_seen":405,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":248,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/nowpayments/payment/status-processing.svg","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:56.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /nowpayments/payment/status-processing.svg HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/svg+xml\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\netag: W/\"356-19caa0f0120\"\r\nlast-modified: Sun, 01 Mar 2026 15:40:36 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=l3uj9V0mdbXYeVDVN6CXwtjm6Cqd78W5s8l6LoixoQc%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562496\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=l3uj9V0mdbXYeVDVN6CXwtjm6Cqd78W5s8l6LoixoQc%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562496\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\ncontent-length: 854\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":854,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b82516afdc756c89aef2ac529aaae724","sha1":"98505be6c0508173276573e684355fa388b8f1e3","sha256":"a60f417195ce01c5dbbf93593cb88ff45a7d51f7b529aaa31b390e6d9bf7fa4f","sha512":"66225754e94566ba02ffb92befba3027e2f9af94e8b676e717103e8984581a07c0276f62e0dd9a916a8299d9880cb60618fa7e02f19b0c5ee2bd39ff7d8b818f","ssdeep":"","tlshash":"3801abf83750108c3ddb9967dfb89a111c6df1a9bde68982e50c48b08087c64dee8a40","first_seen":"2026-03-15T08:15:24.207454Z","last_seen":"2026-07-12T18:43:07.403999Z","times_seen":3,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/media/source-sans-pro-semi-bold-latin.44c0af02.woff2","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:56.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/media/source-sans-pro-semi-bold-latin.44c0af02.woff2 HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/_next/static/css/e4565120a7b98071.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: font/woff2\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\netag: W/\"32fc-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=l3uj9V0mdbXYeVDVN6CXwtjm6Cqd78W5s8l6LoixoQc%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562496\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=l3uj9V0mdbXYeVDVN6CXwtjm6Cqd78W5s8l6LoixoQc%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562496\"\r\nserver: Heroku\r\nvia: 2.0 heroku-router\r\ncontent-length: 13052\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13052,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13052, version 1.0","md5":"7cf79fbd1df848510d7352274efc2401","sha1":"5540b5a26cc7dfe25294c4eabe011e2c6cd60143","sha256":"bc9a16cd945457ad9463cdaed95129b01c589466978dfee3d019d9c604b2171a","sha512":"db792dbf3850e8f2c385cd08d600dfee0ea461b2ce2bab192d24d8ad0809dc225a2b9df3e2cb4ac111925b44dd6a925282680518b5bde709e6313a849989b5dd","ssdeep":"384:wlP2sROuF6KtBYaYtRkbBjRGv4fnXc34v9HC:UusRvkXKbzlfns8HC","tlshash":"de42d1f8121d54baf024be7571784d2789e6fa1cc8cb5c99b34ce80ab1b7d59ba0c0e1","first_seen":"2023-04-07T13:06:21Z","last_seen":"2026-08-09T08:22:40.466646Z","times_seen":2378,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/nowpayments/payment-lines-bottom-icon.svg","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:56.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /nowpayments/payment-lines-bottom-icon.svg HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/_next/static/css/e4565120a7b98071.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/svg+xml\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\netag: W/\"ca-19caa0f0120\"\r\nlast-modified: Sun, 01 Mar 2026 15:40:36 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=l3uj9V0mdbXYeVDVN6CXwtjm6Cqd78W5s8l6LoixoQc%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562496\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=l3uj9V0mdbXYeVDVN6CXwtjm6Cqd78W5s8l6LoixoQc%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562496\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\ncontent-length: 202\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":202,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eeff8395f2c1a1e7df6849f3a97da776","sha1":"7d40b2e6085d245182642714ec005f9f2a572839","sha256":"1b31a607947c4b83cbc383d9bb6d48daa921c0a901933bbb577d77d8d246ff11","sha512":"8e394e5ec0ba24a3625280ae01c5c84fbd0c731d0340ee2f630e98fde0f6ede6c6445744c57c9413180add19fe1b65e974b319d2c61df6c3623e5fc4c824fdd4","ssdeep":"","tlshash":"8bd0222c8244ac2484204640eb7cb959135b5167430fc98ea8c03872f320b473c7a6fc","first_seen":"2026-03-15T08:15:24.211316Z","last_seen":"2026-03-15T08:15:24.211316Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backend-production-828174075858.herokuapp.com/socket.io/?EIO=4\u0026transport=polling\u0026t=hbh9gpt0","fqdn":"backend-production-828174075858.herokuapp.com","domain":"backend-production-828174075858.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"18.208.60.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:57.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.herokuapp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BC:F1:45:C8:21:19:7F:72:A4:09:2F:2F:B0:51:8E:A3:9E:AF:0F:BF","sha256":"7C:C7:DF:0A:D1:20:69:CA:B9:7F:44:40:75:60:56:00:94:ED:A3:72:FD:A6:ED:DC:49:F8:84:38:52:8C:55:88"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=hbh9gpt0 HTTP/1.1\r\nHost: backend-production-828174075858.herokuapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.app-nowpayments.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-store\r\nContent-Length: 118\r\nContent-Type: text/plain; charset=UTF-8\r\nDate: Sun, 15 Mar 2026 08:14:57 GMT\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=JYTPQl%2BjZjyl3SA%2FVMVyMSYC74m8i5fvSkrE2zmxXKg%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1773562497\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=JYTPQl%2BjZjyl3SA%2FVMVyMSYC74m8i5fvSkrE2zmxXKg%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1773562497\"\r\nServer: Heroku\r\nVia: 1.1 heroku-router\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":118,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f72b0f1799956bb7d4f6045035397300","sha1":"c98b65455054224bf4a92128013ea4a7a0b8c2a9","sha256":"a9d363fd10df9f15492f88b72d102b783d266c9fe468618b55858d842c4d23a9","sha512":"d17952504effa5f1248714ac0ab5a6257c93841a117ed1b1b48c8db6ef8974fd9d746b5081f12f9ba7b6e7bc9f5eaa12e875ccd2a87863ee44983d9369892208","ssdeep":"","tlshash":"97b09285839d9389da60b39032f26c2a4a887d9ebac249a8622504a48987a10222536b","first_seen":"2026-03-15T08:15:24.213888Z","last_seen":"2026-03-15T08:15:24.213888Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/main-app-c0f38927399a07c1.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:54.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/chunks/main-app-c0f38927399a07c1.js HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 15 Mar 2026 08:14:54 GMT\r\netag: W/\"211-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562494\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562494\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\ncontent-length: 529\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":529,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (529), with no line terminators","md5":"b0d24018ea91805eb8473209fa645c8a","sha1":"8f4e855b8eea63ca1eca4f42237424ac6d5be003","sha256":"cee189ec06b7bae1ca6ca9ac87956555f9d3a7b308a85b3d9c4edc1a2259563f","sha512":"c857df38af7f3894b3c992f464ccae762138e40d73517a4986925111a16d1f1bf6fc7fd97d41912946bfc7e48ea190633e544c4b852016ee599ffb92461cef28","ssdeep":"","tlshash":"4cf0199a4f1df81f1d22ae74fe966ce2285f9535103b4e607900ed716d27facd2a140c","first_seen":"2026-03-15T08:15:24.216522Z","last_seen":"2026-03-15T08:17:26.17512Z","times_seen":2,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/4787-72319a94f6eeaf69.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:54.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/chunks/4787-72319a94f6eeaf69.js HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 15 Mar 2026 08:14:54 GMT\r\netag: W/\"2cda-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562494\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562494\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\ncontent-length: 3769\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11482,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (11482), with no line terminators","md5":"5a6a15da6f4597070b478c9072095bdc","sha1":"4bb16138a9934c062a0ee4eefdcce0a325ae7e9b","sha256":"59432b50ff8e635395903a3903172cd1622a405161c0cf7eb98a2a96bc6d7ba9","sha512":"8f8b1a9c733b50ad36fe4d540844c0dd5a8e19449b9c4fbbfff09191c5212939dcfed3acf727ce05b49dec6c9db8f715ef90136a7cdbb41b1562a80234a4a6db","ssdeep":"192:ZUFUwk5M0xo+PulWITzv3L+cbYWCRJylu1j:YU80GIUTzv3LlkV","tlshash":"2b3261aa71e5b861174350f4d03b500bfb3b14350a0c91b8b369d8fe7cac98b516ae7b","first_seen":"2026-03-15T08:11:50.665959Z","last_seen":"2026-03-15T08:17:04.376741Z","times_seen":5,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/imtoken.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/imtoken.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 43029\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-17ab537782f7ba7496847b2276d2b625-11f9968f53e5d8a7-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-a815\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc21\r\nage: 64\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:13:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43029,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"cc556604e6bf887247f1bd52fc469c15","sha1":"bf52b5632265a357c8326781f25368723d02b7fc","sha256":"891316e4bfbce4e5dc444e414488869743fefdd68b7e5b50867cf67666c0dd10","sha512":"1aa2cdcdf851d9ef454a17fc884f14380ed1ae23bc4990c7b7c1a2eca6e120cfa6e9a415a2a1804e3d57e19f10074178a2fe0fee9c3cd3441f758ae360f6416b","ssdeep":"768:VqtrC4tzWxSI/N3jrFHcQDoz6hwaP9aCkirQqgWc7HxahU:VqtuUzOSE3FHpDoz63sAraWc8hU","tlshash":"6913f1fecfbf94d4849409a826909283cba94768ac8831e9015ed78fd04db735ee50f9","first_seen":"2025-11-22T11:30:21.472624Z","last_seen":"2026-08-07T16:44:13.605384Z","times_seen":405,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":243,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/onekey.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/onekey.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 1469\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-2111accc5b634953f10f8ff245ebf383-4286f08a6de423e7-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-5bd\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc10\r\nage: 14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1469,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"3630a1a80ed5fcbeeb9224e2b997d117","sha1":"25e3771b17938bcb89ff31bccd073a3e0b3b574f","sha256":"6df2ebc8dc341106bad5d235866f6c1851233231776786c16ffd2bcfafd47b57","sha512":"6c1eac4850a1741137d722d131b8f15ec363370398e511968ab663c733b5db501b111ef7a4be2a91885a7495fbc80ce8feced3f800ab9149b4368bbe12b476e7","ssdeep":"","tlshash":"8831529add12643fa5540670c77776e5ea760163b184ae4f4b030b342d5b1c2f977e80","first_seen":"2025-11-22T11:30:21.497762Z","last_seen":"2026-08-07T16:44:13.594741Z","times_seen":405,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":242,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend-production-828174075858.herokuapp.com/socket.io/?EIO=4\u0026transport=polling\u0026t=hbhc91oc\u0026sid=O-wV3aVb91uH-nX7AAEh","fqdn":"backend-production-828174075858.herokuapp.com","domain":"backend-production-828174075858.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"18.208.60.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:57.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.herokuapp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BC:F1:45:C8:21:19:7F:72:A4:09:2F:2F:B0:51:8E:A3:9E:AF:0F:BF","sha256":"7C:C7:DF:0A:D1:20:69:CA:B9:7F:44:40:75:60:56:00:94:ED:A3:72:FD:A6:ED:DC:49:F8:84:38:52:8C:55:88"}}},"request":{"raw":"POST /socket.io/?EIO=4\u0026transport=polling\u0026t=hbhc91oc\u0026sid=O-wV3aVb91uH-nX7AAEh HTTP/1.1\r\nHost: backend-production-828174075858.herokuapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: text/plain;charset=UTF-8\r\nContent-Length: 57\r\nOrigin: https://www.app-nowpayments.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":57,"data":"40{\"type\":\"client\",\"clientId\":\"6983a68b338d7716119ed765\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-store\r\nContent-Length: 2\r\nContent-Type: text/html\r\nDate: Sun, 15 Mar 2026 08:14:57 GMT\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=JYTPQl%2BjZjyl3SA%2FVMVyMSYC74m8i5fvSkrE2zmxXKg%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1773562497\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=JYTPQl%2BjZjyl3SA%2FVMVyMSYC74m8i5fvSkrE2zmxXKg%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1773562497\"\r\nServer: Heroku\r\nVia: 1.1 heroku-router\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-09T17:44:52.41103Z","times_seen":446967,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"backend-production-828174075858.herokuapp.com/socket.io/?EIO=4\u0026transport=websocket\u0026sid=O-wV3aVb91uH-nX7AAEh","fqdn":"backend-production-828174075858.herokuapp.com","domain":"backend-production-828174075858.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"18.208.60.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:57.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.herokuapp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BC:F1:45:C8:21:19:7F:72:A4:09:2F:2F:B0:51:8E:A3:9E:AF:0F:BF","sha256":"7C:C7:DF:0A:D1:20:69:CA:B9:7F:44:40:75:60:56:00:94:ED:A3:72:FD:A6:ED:DC:49:F8:84:38:52:8C:55:88"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket\u0026sid=O-wV3aVb91uH-nX7AAEh HTTP/1.1\r\nHost: backend-production-828174075858.herokuapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://www.app-nowpayments.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 8pj0KOmhM4cUumRWc1AoEg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nAccess-Control-Allow-Origin: *\r\nConnection: Upgrade\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=JYTPQl%2BjZjyl3SA%2FVMVyMSYC74m8i5fvSkrE2zmxXKg%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1773562497\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=JYTPQl%2BjZjyl3SA%2FVMVyMSYC74m8i5fvSkrE2zmxXKg%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1773562497\"\r\nSec-Websocket-Accept: nRG780XGqnxdzyOaNCROnztIfZA=\r\nServer: Heroku\r\nUpgrade: websocket\r\nVia: 1.1 heroku-router\r\nDate: Sun, 15 Mar 2026 08:14:57 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:49:05.676991Z","times_seen":17803399,"resource_available":true,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":1,"connect":96,"send":0,"wait":97,"receive":0,"ssl":208},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/5748-752d130a742693b1.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:54.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/chunks/5748-752d130a742693b1.js HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 15 Mar 2026 08:14:54 GMT\r\netag: W/\"426e0-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562494\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562494\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":272096,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5f3a86b7969cd6a59abe3c7d482fec10","sha1":"fc2ba2431b9c68296a53a450628ebabbb9012840","sha256":"100ad5056b20bbf99c990e7f10c1c5edbac94314b55f8dc537d1efbd296440d5","sha512":"d78a95e61a03a038a22b328d804705706834bede51b29a6fb2f66cbeea68dbba398aa6f09e52240dc91861eb887e2ab5d3cd9ff9c6b1d616f7945e73a300af21","ssdeep":"6144:KUx7VAoR4g1EmeTRs8Na2tCfVFhSkCkDU/:KyVAoR4gDas8NGNFhSLkDU/","tlshash":"1444092a3a5aec3b8bca11cd34bf080491fc4833615d045cfb99d59a9a687c9b177e7c","first_seen":"2026-02-17T01:17:43.167568Z","last_seen":"2026-07-07T05:06:07.211224Z","times_seen":40,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/app/layout-20d36e4d97353729.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:54.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-20d36e4d97353729.js HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 15 Mar 2026 08:14:54 GMT\r\netag: W/\"19be-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562494\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562494\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\ncontent-length: 2376\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6590,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6574), with no line terminators","md5":"c276386c674e39bca84a485f498a946b","sha1":"07ef3dbda70ed4d33ea379a0430961f92fd2d94c","sha256":"f4dc2770421b5afdbfdd422900c03da535a812d39788b3b28c9b86313da84e00","sha512":"e744b5a8833b92eb9b8fd7c259b1aed29353e7d29030bb116113e57176fadb4f45bad069e0302de41afbcb529724ab1707f0b8354399b5cb3c756f542d702c7c","ssdeep":"96:koPQkuzLD72aW0875wINApeOwiRUZexngdtjAKsSB9STzqogdvRAAJthKIJ982DU:fPQnDKZ08eOAxJMAK99STWAA/XJ98vo6","tlshash":"40d1c8492350353727db2418b9234dcc91b2b660461680bc779ce467d6b53f4eae3bee","first_seen":"2026-03-15T08:15:24.223226Z","last_seen":"2026-03-15T08:17:26.172589Z","times_seen":2,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/app/not-found-9550bf8e57195738.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:54.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/chunks/app/not-found-9550bf8e57195738.js HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 15 Mar 2026 08:14:54 GMT\r\netag: W/\"42e9-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562494\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562494\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17129,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17129), with no line terminators","md5":"2fe39a4c13724c9bd1ed7a38c7465d91","sha1":"c42b72cdf4f05de93680c9c42d2667ee0fb6faf5","sha256":"b5e83f923bcb0245024ecd05844cdd2800ac85064809d4a381978b06c4fe7485","sha512":"7cd492a0bcef5c4fd6a813df36a78cff9a8f04dfddd77e253a6e57c0117d126df464efafe344af95d7cef658e941ad96d436d6db4a6d88dad347a4ae2ab477fc","ssdeep":"384:WI6hO3o3e3qtYh7393h3+tICu328mHmnwFwpDXsF64DD3lsiye56hO3o3e3qtYhl:2Y3o3e3qtYh7393h3+tIf328mHmwGpDw","tlshash":"6672b5a8634053ecf5038778952a6555386f39fdab59c4e8d3f92830a6640f83a1bfd2","first_seen":"2026-03-15T08:15:24.225332Z","last_seen":"2026-03-15T08:17:26.164427Z","times_seen":2,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/tonkeeper.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/tonkeeper.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 1284\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-a08d33a736d5b0282fa29d52fef9ea80-142288423a442f08-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-504\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc19\r\nage: 14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1284,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"cba93fd4ef01e8b6a839f321b198e6ef","sha1":"cd425ede89e3ced40f919bd9bf2867153f528e68","sha256":"b7e60fdb63fa58ac414061aec15fbe1db8d0c822fce3c379d90004ebec3fb1e9","sha512":"57223145df0dbe2ac141e408851155593552c1ae82880721326c21a633b263b8235c76afb910d91cf2fcae4ceda09c72693bbe68d88bbc394bb76aedcd9a74a0","ssdeep":"","tlshash":"ae218a03c579e3175e9b15b2552a1fc35c93a8b00dc6158fec459dcd5649c8bc71128b","first_seen":"2025-04-26T05:32:18.028477Z","last_seen":"2026-08-07T16:44:13.658815Z","times_seen":994,"resource_available":false,"data":null}},"time_used":1366,"timings":{"blocked":669,"dns":4,"connect":10,"send":0,"wait":11,"receive":0,"ssl":670},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/tonhub.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/tonhub.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 55132\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-581c0523dbea671a73c2e8d4bd638df8-6f0d6923f292ac71-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-d75c\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc21\r\nage: 223\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:11:13+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":55132,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"2fee343f7186afe4fb4d313b974019e9","sha1":"8ddc2316409184cc4b7e5c92191c329217f60e9f","sha256":"0571664b9059e4571a007acc4c523c275cf008cbb9ee96d56934d54d5ca845f6","sha512":"70ebc03c8093604560561fabe864542cc40ccd1540634b024d57ceb0b6d0dfafffebb8620355caa823debd157b0c879c8fe3cafeb631ff25e631c3ab0d8e7fd5","ssdeep":"1536:DjbrTlVNHKUAaRU82bWa4YLS9IB+zFH+5pSrS:DnNHKiq82bW/eYIY1+5pSe","tlshash":"98330165f221113a8721c9287a1f1e6b1cc1393b88aeed3252239b6ed845d610fc39b3","first_seen":"2025-11-22T11:30:21.502499Z","last_seen":"2026-08-07T16:44:13.782694Z","times_seen":406,"resource_available":false,"data":null}},"time_used":737,"timings":{"blocked":352,"dns":0,"connect":12,"send":0,"wait":9,"receive":2,"ssl":360},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/pay/x8UsS7Ty","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-15T08:14:54.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /pay/x8UsS7Ty HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 15 Mar 2026 08:14:54 GMT\r\nlink: \u003c/_next/static/media/e4af272ccee01ff0-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\"\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562494\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562494\"\r\nserver: Heroku\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 heroku-router\r\nx-powered-by: Next.js\r\ncontent-length: 2640\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":8202,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (8202), with no line terminators","md5":"ef89eaef875d48aeb712d21f41502947","sha1":"8a4a0342774ceb0fe0d155e2898e0133041772d9","sha256":"07f27c7f9e122c1b43c0fa770b3b82624040c3e96b179852fcdb2b0e910d95a2","sha512":"d8ceec1a63ce94d57c79121af61ad4afab8212e860bdb3fe6f70b2c7fcbb1f7781e11309d2f86e30c858e3545585367ec0c1a1e6313cfaa1cfe4089153bb6523","ssdeep":"192:LZyB9BfUO4xllbHnvkMmQX+47BJC+e55+gr:LAvMO4PlLvkFi+o0r","tlshash":"e702d05bbd05de46ac7aadad003e5d3a50cdcc3b8a74d8b8968dce190601dba17edc81","first_seen":"2026-03-15T08:15:24.229456Z","last_seen":"2026-03-15T08:15:24.229456Z","times_seen":1,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":223,"dns":145,"connect":37,"send":0,"wait":47,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/css/4efb387317d4d779.css","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:54.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/css/4efb387317d4d779.css HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Sun, 15 Mar 2026 08:14:54 GMT\r\netag: W/\"1d74-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562494\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562494\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\ncontent-length: 789\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7540,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (7540), with no line terminators","md5":"2d0557c4b61e3dba18143636b81e57a0","sha1":"dd16d4d4f355285557aaa0bf798c58e9e86f116f","sha256":"46842d7385065a02c88606fd2e6c3034edee7c02f15e253d24bc16c44ff8cc48","sha512":"09bcd49bd2cd09f834446b2bfc5cdee5df548ed8b6bb1f8b3e8d9cfe4ad0b5cb10f07c15dc1857c6dcf59cba0a3e2ecd249d9dca2d41347bab95bf9731b8f6af","ssdeep":"96:FRxg5kpHBNH4RRxjOnpwBNH4iRxmzOpVBNH4DRxxYhpmBNH4r:rx5BNY3xvBNYyxNBNYNxXBNYr","tlshash":"11f16c24d42f884dd572fc9236c93f23282e142565d44a26ef2d8969ceef83773e1b58","first_seen":"2025-11-01T21:22:17.570322Z","last_seen":"2026-08-04T17:04:38.709858Z","times_seen":90,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/mytonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/mytonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 4757\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-9514ae7328cbd53f7e554acc4ed4ba0e-bc2687e16c67ec92-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-1295\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc16\r\nage: 214\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:11:22+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4757,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"9c99a1956e242fb70baded72541ffd92","sha1":"082f808542c3fb82616e0c72e8eafd0c520531c1","sha256":"01b23585151ba32129c7ea121bb156f4064f6f3234c7e543bc660b775fe54871","sha512":"9fa1a9f1f077ee0092ec5d57a346693cfd2bd1575b3d2d99d411402ad659793313e50bac91118c39ce0d949e1d28de958a1aa214fbd1f8fa9de14881c7c75393","ssdeep":"96:LSyBAvitJVte8Ir4md9tjbJ/6sojcynHwHYqiebuHU:LSyBAQfU8IEmvtjbQxjCZPu0","tlshash":"d8a18d6913a62f00e0be22f33b88a2048767738344716b0b6e69200f3e1cf9501eb1f1","first_seen":"2025-04-19T14:12:50.877844Z","last_seen":"2026-06-28T15:09:18.446084Z","times_seen":931,"resource_available":false,"data":null}},"time_used":778,"timings":{"blocked":373,"dns":1,"connect":8,"send":0,"wait":9,"receive":0,"ssl":383},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/okxwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/okxwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 50253\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-c078a806edd719aff9ce3f3ee8feb1c1-c725a8555960c5bb-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-c44d\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc16\r\nage: 64\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:13:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":50253,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"cb9159c1e2edd95e3a1aa12a3fd6c19b","sha1":"9478e1695f1e905cc7eae54768e895683348b484","sha256":"c5d0323a3d22fa19a7b31663ef57e66bb2ee14feacd110386d77da70510f2ae0","sha512":"884c20e6550acd343bcb8a4300a3706b4bd8db2d3b8a65a65dae59fec3dbbc882ef47fa9f43a3cca0c70554c1fc3176b99ddde1b5091596fc5584adb7753a3bf","ssdeep":"768:h7kYcFW8PletzHHsDYV5aurztuvndxlTgftq0iZs2mLG3+TSrnZ7cGee2mKU/9De:hU7mHMD/uUvn3pgf80iiLG3qGeme97","tlshash":"3633029bff6b7cc60d6110d30d28079b960a9146ec70dc97e406552b1bd8b82b7dfb61","first_seen":"2025-11-22T11:30:21.534651Z","last_seen":"2026-08-07T16:44:13.686255Z","times_seen":406,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":289,"dns":0,"connect":0,"send":0,"wait":10,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/bybittonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/bybittonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 6895\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-2de0a3584468f1c74b5d3120f29e928a-5792c93d1e57fbfb-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-1aef\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc17\r\nage: 13\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:43+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6895,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"0916d8dc0fe322b83ad60dc4bc8260cf","sha1":"da3b21840b67b25f8997c32c7fddeda06fedb76e","sha256":"8268630cfca7e33f69b193ff30605e3916ed4ef5874513c42df54f0e8e78795d","sha512":"0cbcab0f6ae34cd6ee4aad3804498700f057bfac59d6663bde4146efeced10158d1e8af31daa7410b79b5d9024e37b02788202a1881bafb5c6bb902ad54acbe5","ssdeep":"192:FS49XMVkI8gQaDwnLJAmdbdySsAf/8F1O1l:k49XMVkIzQawqMsukFal","tlshash":"5de18e57f6d1153fa0af9da9b2ecff226861430a54e0d24f6d17c8d30e1b9173d1988a","first_seen":"2025-11-22T11:30:21.536065Z","last_seen":"2026-08-07T16:44:13.73052Z","times_seen":405,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":280,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/blitzwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/blitzwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 2190\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-d33aa5582533b18596d27145f7f74713-7a18e357f3e8d6d1-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-88e\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc15\r\nage: 14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":2190,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit grayscale, non-interlaced","md5":"687ff1806febae6872dfb083388f5a9d","sha1":"7b01cff612a09cb833e4e56fd07e0f33d65fb92c","sha256":"8859af2e5f1d4b4c988792e28d45d70fec01dbacc4bd5c8447459e8126c95c41","sha512":"f887b619274884bebf0a0630d8ef9a337e8edbef12d2800bad8e66f980b07fb7421c37fc722fe1068d8457262cabf72f4aa07b6d2907a394bd6076736d4fde6e","ssdeep":"","tlshash":"3141e96896f0437bcc6a3ba7611d9d8d1bbf90930b4a5c4dad08dc6b0c8287c93868d7","first_seen":"2025-11-22T11:30:21.493807Z","last_seen":"2026-04-21T00:00:51.391513Z","times_seen":242,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":245,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/nowpayments/arrow-down-grey.svg","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:57.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /nowpayments/arrow-down-grey.svg HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/svg+xml\r\ndate: Sun, 15 Mar 2026 08:14:57 GMT\r\netag: W/\"201-19caa0f0120\"\r\nlast-modified: Sun, 01 Mar 2026 15:40:36 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=rxvGlArDlkPL%2FeE3WhcUzDk43AGOlRjxMP6Y7sRQk7M%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562497\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=rxvGlArDlkPL%2FeE3WhcUzDk43AGOlRjxMP6Y7sRQk7M%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562497\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\ncontent-length: 513\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":513,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"29486e04d18edf7c40b8b7e80c080bfc","sha1":"cef924b35748d3f00c520720acf467ba39e394ba","sha256":"d667fbf5f01cc856b912da46ed9827294777f4ad5aa78324745c898e00638a5c","sha512":"2c46e3f6530e1edc8071aa55eec58fc4f412d354afd43bf6b9b5676c1657a078e2ee2a5c66eaaae6b3e7d1f9777ea7b5c6f7d9a192b0a7c22bb4f98adbcb95ac","ssdeep":"","tlshash":"1df00eeca21a4748ce418c5defb6e9e1001b94c3903d08c0a8cbdf64b80ab00bd80ca4","first_seen":"2026-03-15T08:15:24.235327Z","last_seen":"2026-07-15T08:04:06.479962Z","times_seen":5,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backend-production-828174075858.herokuapp.com/pay/x8UsS7Ty","fqdn":"backend-production-828174075858.herokuapp.com","domain":"backend-production-828174075858.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"18.208.60.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.herokuapp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BC:F1:45:C8:21:19:7F:72:A4:09:2F:2F:B0:51:8E:A3:9E:AF:0F:BF","sha256":"7C:C7:DF:0A:D1:20:69:CA:B9:7F:44:40:75:60:56:00:94:ED:A3:72:FD:A6:ED:DC:49:F8:84:38:52:8C:55:88"}}},"request":{"raw":"OPTIONS /pay/x8UsS7Ty HTTP/1.1\r\nHost: backend-production-828174075858.herokuapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.app-nowpayments.com/\r\nOrigin: https://www.app-nowpayments.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: *\r\nDate: Sun, 15 Mar 2026 08:14:56 GMT\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=wt57b4U6ND9Wm8wmCTBHvGUvEFE8B1GEJElqpRvCa%2B0%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1773562496\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=wt57b4U6ND9Wm8wmCTBHvGUvEFE8B1GEJElqpRvCa%2B0%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1773562496\"\r\nServer: Heroku\r\nVary: Access-Control-Request-Headers\r\nVia: 1.1 heroku-router\r\nX-Powered-By: Express\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:49:05.676991Z","times_seen":17803399,"resource_available":true,"data":null}},"time_used":998,"timings":{"blocked":448,"dns":1,"connect":95,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/52-9db9726e1c62dea7.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/chunks/52-9db9726e1c62dea7.js HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 15 Mar 2026 08:14:55 GMT\r\netag: W/\"c86f-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=Yjwl4jzqqf3ldpf10B%2BxcN2dNYws5z%2Bq75HIYohs5Q0%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562495\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=Yjwl4jzqqf3ldpf10B%2BxcN2dNYws5z%2Bq75HIYohs5Q0%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562495\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51311,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51307), with no line terminators","md5":"34d4ffb871a52793294a75f21a62301b","sha1":"bb218971734775bd340077b509dda9de6ffb5460","sha256":"add426630965553b2a2df517bf7ff83806ef2235bd741ceee8ddf89404865046","sha512":"166370259acc6ab14c486699219de04bec6cecc61c9b43f1dfc0b8064be9decebe9796077fc1e43d084e884a7db25c39b34faa1437796d0536ed07587a48dd32","ssdeep":"768:3LAA+rdUYcjaIKFbOnazaia0qMEiFEu3hI17XI1b1lprjv+xRZh59N897gFK8Yz/:Iqlp9Mx3Zjv3V37ew1","tlshash":"cd33b605e189ab5cf41746ec615f902c757f2a98e70a48f4fbb86c3122854d43a2fbcd","first_seen":"2026-03-15T08:15:24.237415Z","last_seen":"2026-03-15T08:15:24.237415Z","times_seen":1,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/hot.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/hot.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 45772\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-6becec1b1888f4f16d2b36ec7abbac91-a044b4a1f3688a71-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-b2cc\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc10\r\nage: 64\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:13:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45772,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"e0c38efe88759bb68b5c92d1aacc16a7","sha1":"4210f53af06a80b16d33ef2e91ea36da1ca4a18b","sha256":"e76b11422e3b828486011d5dd9bd915a430f4eee4adcd886d3c2ea0cd22af212","sha512":"9b3c5c58b7c8a96b6e6263f34db1799096305d64565a8e1a91b3ea682f30b7415718475d478cf5b5927e2014b1baf3e234e063329f96eaf824562e530defd30f","ssdeep":"768:bi4+80cr13Z6pTZ3DvnfO4J+JjxrcxB0iRXPClWJbHCN8MUwvQliqmXH41M+KZ/r:biVSr1sbTvfPaixB0iR/OYbHCNZUyee7","tlshash":"5d2302c35f518748ade59b4e8fa28464d27fe999b3417fc20948eac0c219e54fb428de","first_seen":"2025-11-22T11:30:21.526783Z","last_seen":"2026-08-07T16:44:13.783292Z","times_seen":405,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":282,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/media/source-sans-pro-regular-latin.0a598dac.woff2","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/media/source-sans-pro-regular-latin.0a598dac.woff2 HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/_next/static/css/e4565120a7b98071.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: font/woff2\r\ndate: Sun, 15 Mar 2026 08:14:55 GMT\r\netag: W/\"32ec-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=Yjwl4jzqqf3ldpf10B%2BxcN2dNYws5z%2Bq75HIYohs5Q0%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562495\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=Yjwl4jzqqf3ldpf10B%2BxcN2dNYws5z%2Bq75HIYohs5Q0%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562495\"\r\nserver: Heroku\r\nvia: 2.0 heroku-router\r\ncontent-length: 13036\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13036,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13036, version 1.0","md5":"0ad032b3d07aaf33b160ac4799dda40f","sha1":"06b931e0d0bf37f5037d9e66d6feedfddd21c0ba","sha256":"c124c88ca4fcb4336e97617647ef0d32441329371120c8eabaea0fea226560b0","sha512":"06a5e929277cecd7315a9a251ed4309e67036c729a6dff90b5ba93a7d37cf579c3e28bb3f77aaec5e5085076c28697e69b797a3a4d836fb0e89733034e7b3fbb","ssdeep":"384:bAzZqMSawNYv8hEdYly/ox5wkeo3xImnJSP:bAF5Zv88YlDImSP","tlshash":"a442bf44064e73eedc9539b44d93eaec3582480e25b493c1e03aef25b4f9844aad507e","first_seen":"2023-04-07T07:21:42Z","last_seen":"2026-08-09T12:29:41.671324Z","times_seen":3010,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/nowpayments/copy-small-icon.svg","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:56.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /nowpayments/copy-small-icon.svg HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/svg+xml\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\netag: W/\"1d5-19caa0f0120\"\r\nlast-modified: Sun, 01 Mar 2026 15:40:36 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=l3uj9V0mdbXYeVDVN6CXwtjm6Cqd78W5s8l6LoixoQc%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562496\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=l3uj9V0mdbXYeVDVN6CXwtjm6Cqd78W5s8l6LoixoQc%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562496\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\ncontent-length: 469\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":469,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"955d09344c7287c43f881402b5c76f61","sha1":"134c0ad4432c3285f12442095fc725ea875a41a0","sha256":"3ee213d28846b3c01f77c99f7e5b411a96511c2bdc116b09d309c2b4f3944fba","sha512":"c8b0c4ce158f8158a9edaba95e96a510b5cd19b38339583e99331a1aa65ce1668f2748dcfdc58d06818db6bf9b993aed76ba5c2f0572818cf6fed20209e2137c","ssdeep":"","tlshash":"eef020908811828c80a3e347bd6d7cc83e34b0ba0e3d589eaa896406e2ff1cd848c4c4","first_seen":"2026-03-15T08:15:24.24062Z","last_seen":"2026-07-12T18:43:07.38983Z","times_seen":3,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/nowpayments/payment/clock.svg","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:56.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /nowpayments/payment/clock.svg HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/svg+xml\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\netag: W/\"16d-19caa0f0120\"\r\nlast-modified: Sun, 01 Mar 2026 15:40:36 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=l3uj9V0mdbXYeVDVN6CXwtjm6Cqd78W5s8l6LoixoQc%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562496\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=l3uj9V0mdbXYeVDVN6CXwtjm6Cqd78W5s8l6LoixoQc%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562496\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\ncontent-length: 365\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":365,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f17708526744d2f5f150f3593e3b11d6","sha1":"203368ae7e639672ca1602df5ba5607dad996466","sha256":"6e93987d55584222655fae1c10e89913624a5e2a967e5a6f652c268fc55dca45","sha512":"538867a377e6d4ce06d6950a1224cc4bd22b78f930428a980d862dfdf6135ed39c0d35f938e8a91e4f35670428ce4ba6eef6ccf5b989e02e6f36f69d8704cdd0","ssdeep":"","tlshash":"3ce068a16e24c908949868bccb3e01c2227438dd39480484e2901a27f008ee19882aad","first_seen":"2026-03-15T08:15:24.242245Z","last_seen":"2026-03-15T08:15:24.242245Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/3794-b16d22429af19980.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:54.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/chunks/3794-b16d22429af19980.js HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 15 Mar 2026 08:14:54 GMT\r\netag: W/\"2fac1-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562494\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562494\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":195265,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"132a3a987b79559e5e145d2629a2f904","sha1":"30c0b9571c7abab379aba15e72861b811347e6eb","sha256":"f377dd2981c53b54b9177262f3edc3a57de414dc849c0af9601f8089f1e38e35","sha512":"93954f7f35a93bb4f0a08c376104b1dee1b3b9f2bd0c5689e83498ecf4ad6932f61343e815c9f874589dd4c545963c7557233f4d1908a33925e85a614d74fbfe","ssdeep":"1536:5OVOEGCzPAfNuGIzANAPeEkTkbS81W/cxAhxMEbS+iBzuEOsx4vJheboQtT9elUf:8sNAPeEkQpvH3O3YbNA2FtKHm","tlshash":"1b14e9fa35d0f8a207a740e6c43f4006f2295c77145e74a0a3e6dcd975a45dea0b3faa","first_seen":"2026-02-04T19:51:15.86Z","last_seen":"2026-07-12T21:09:00.036638Z","times_seen":58,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/bitgettonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/bitgettonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 805\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-1ae32d7ff1ce7fdc1cdf2f3261dbb95c-3cb2ba3659cce090-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-325\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc10\r\nage: 14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":805,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"e3234b49342c8b98e1bc18701f14697b","sha1":"a586c5d69f22119f46e774cbbdc1cb3bb6bed9c4","sha256":"8f269136c30e6b880e03e3f6db1501c4023f8b8d1cd4ae841aed85ec1501bc61","sha512":"73a189fed61c6c60fa71206a0ad48962d330878fab88579e3153c4251ee9fdb40ba1f43f8f876c74c2849bc24ae4bf78adeda37751e4153a5540060fa6b2e714","ssdeep":"","tlshash":"070166854312d45eff1b8d3a0031d7d097a559f6c236a8a86bff152b1e3140c66db391","first_seen":"2025-11-22T11:30:21.50347Z","last_seen":"2026-08-07T16:44:13.757561Z","times_seen":406,"resource_available":false,"data":null}},"time_used":653,"timings":{"blocked":301,"dns":1,"connect":10,"send":0,"wait":32,"receive":0,"ssl":301},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/dewallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/dewallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 42298\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-3910dbdf754479e48a18860da90c8a42-64c37367f85dee75-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-a53a\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc18\r\nage: 64\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:13:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42298,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit grayscale, non-interlaced","md5":"34717c55f237500cb1400c90bcdebb01","sha1":"81848e39f29d0b944f283453ee1659c6c8a22723","sha256":"364eacdfeee2020e26d196aac612ac93cc8aa3ebc707d02ca57e9aacaaef541b","sha512":"732e94a9ab2004ec2f473c87d9beeed448e48b431176e698ea9c6f0c63d06057689c90c485fb0387988e9331367cafaaea40d2ab8e4104e108dcaab5bbc2fbe6","ssdeep":"768:YfrDuKY1eR4xH9a+jbGg6oRrWP6AnW4KIH0L2kApMJiDr9eTzddSA3PuWhwST:YfrBY1XxH9vbGsWPZlH06kSMJE9eNdVz","tlshash":"3d13f2b2e8c6c6ae8452a8e24d9eb4af0c457db622a53f19c405f44b5f74d27321fc1b","first_seen":"2025-11-22T11:30:21.476583Z","last_seen":"2026-08-07T16:44:13.645075Z","times_seen":405,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":276,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/architec_ton.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/architec_ton.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 16202\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-3687cf17dee7963abaef634e9a2bc464-c059859393ec0e1c-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-3f4a\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc16\r\nage: 14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 228 x 228, 8-bit/color RGBA, non-interlaced","md5":"247af337378ab26527a7e001e772a863","sha1":"e5555ce55b512c99db267178c0b6776408e29531","sha256":"562fb3c02d160472278ce219266068aee29ced8b152695a66ba519ef6dc66b90","sha512":"dc562e28b94ccdfae6763b225d96b023d65a692476df4946c8131168c1d682deb990a4dbc289e8e6aa009ede05b56ab7324deb1ac96fab75f894048bc55f92e1","ssdeep":"192:eYEWkPbfZhkY8WlA82HMVGvl94k4BFgS599ARP8NdG743LVSCBUF0G7VtvBuImVe:2PzZH8Eaf4TH5gtL7wVSZWM0ImJ5E","tlshash":"4072bf6ce55034b7a1cadd9421ec480a4e319c0ad6ba4cd87b8de484cfdcade0c9d6ca","first_seen":"2025-11-22T11:30:21.470356Z","last_seen":"2026-08-07T16:44:13.746276Z","times_seen":405,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":252,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/defiway.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/defiway.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 20702\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-e8a202d191904620cb51ef9d80bab645-7a620ba827129008-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-50de\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc18\r\nage: 14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20702,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"6fe8902e9f84eca83e2d0f9c3aa0caf1","sha1":"3273f7b3cc278a24398aeef31157f92ed1851b50","sha256":"26019945f9a28a6f088ceb7f89ec093553618735b300cfd930bc9083f2a097e2","sha512":"dfefdd71c4a1dd66b96342be3c094a5908c6222fb1c307159123b48f5b78404cb608f4f9e1ab2377613f8f64968357f615ad2e277ddfcbb81c663fe87dcb05e5","ssdeep":"384:k23WSXzaKK4C2lCU6t7GOfhWF4NjaS0H3A:lXGN4CcCldG+WF4N+w","tlshash":"0e92e04400af6a2f1f6bd02deb845092a5569ef22d158834bfcb82c7d6d833d98986dd","first_seen":"2025-11-22T11:30:21.496351Z","last_seen":"2026-08-07T16:44:13.64631Z","times_seen":405,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":241,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend-production-828174075858.herokuapp.com/socket.io/?EIO=4\u0026transport=polling\u0026t=hbhiajci\u0026sid=O-wV3aVb91uH-nX7AAEh","fqdn":"backend-production-828174075858.herokuapp.com","domain":"backend-production-828174075858.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"18.208.60.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:57.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.herokuapp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BC:F1:45:C8:21:19:7F:72:A4:09:2F:2F:B0:51:8E:A3:9E:AF:0F:BF","sha256":"7C:C7:DF:0A:D1:20:69:CA:B9:7F:44:40:75:60:56:00:94:ED:A3:72:FD:A6:ED:DC:49:F8:84:38:52:8C:55:88"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=hbhiajci\u0026sid=O-wV3aVb91uH-nX7AAEh HTTP/1.1\r\nHost: backend-production-828174075858.herokuapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.app-nowpayments.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-store\r\nContent-Length: 113\r\nContent-Type: text/plain; charset=UTF-8\r\nDate: Sun, 15 Mar 2026 08:14:57 GMT\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=JYTPQl%2BjZjyl3SA%2FVMVyMSYC74m8i5fvSkrE2zmxXKg%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1773562497\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=JYTPQl%2BjZjyl3SA%2FVMVyMSYC74m8i5fvSkrE2zmxXKg%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1773562497\"\r\nServer: Heroku\r\nVia: 1.1 heroku-router\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":113,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"de1d04e930a80f245a28eb8bc94b1ee2","sha1":"6a4ce5221ff69293dca8c3fd1ac41577146ac5ad","sha256":"ca4aab70366924e7b8a389616fac876b1cfd5eab2731165114986035b7a56a8c","sha512":"2673d7e4d7d44bea8fcf8a4e378dd8dba68262d97f0aae4483c8aeda1d92711deab6c6e2d7ac250f88e9f7db005b690dd93bc644a7a6d813a128ab244d91b679","ssdeep":"","tlshash":"c5b092a00701081f534241e1bc6154a0a268e9056b4228da06994e684a3aac9a23b29b","first_seen":"2026-03-15T08:15:24.248215Z","last_seen":"2026-03-15T08:15:24.248215Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/6809c4f0-b55e5589f94f439d.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:54.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/chunks/6809c4f0-b55e5589f94f439d.js HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 15 Mar 2026 08:14:54 GMT\r\netag: W/\"3b7b9-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562494\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562494\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":243641,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21800)","md5":"947521f639a7a600afce157d322ab1f9","sha1":"5a89d321f28c96a1e9ccc4557bc70b8028a6984d","sha256":"a9b037de2b374eb94039ab3fb8293dde4146c935c8198e6704e73e5111400a21","sha512":"69c79dee0dc1749d87e5a4f26d9396a1edf5fb34cb6e704368b0e7bbfd29585efa308f6df225233563632e75d64f36f953a7b6018d7d2c47848ed315995304c3","ssdeep":"6144:2z+KTAtWq7KvsdeevgMlrCOWF92Atf6RjA+EVVGKlcM4qo9rB2WFkwC5ZUE7IHj8:+8WqqsH1l8","tlshash":"cf3429dab387b261234b47d944774152f32e18fa180d857cfb69498a3f50988d2bbbf4","first_seen":"2026-02-04T19:51:15.882927Z","last_seen":"2026-07-12T21:09:00.045871Z","times_seen":52,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/css/439623a40f457636.css","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:54.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/css/439623a40f457636.css HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Sun, 15 Mar 2026 08:14:54 GMT\r\netag: W/\"faa7-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562494\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562494\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":64167,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (64167), with no line terminators","md5":"4a21af0eaed064eecb8abada4957f276","sha1":"e85ccbe8854b73c70c523ffacf7280bb8057ace5","sha256":"baed1312387ed6712e71414f4c8b2769fd4d69b6c07afd8966b88238d0ab6a8e","sha512":"59c13d919a61f28b070e1c395fd35a23ac98e626a5665ace28a79e6bdac29bc2f56b73a2af43e8f2a13f03e1c84f943c7f5e6d870186dfe99b60b70ea6631272","ssdeep":"768:hSkyIEFGmQDy+QCEExfMb5QcfQJQzFLadqnt9qJB3l6A:CIEFG7y+QgUs+NM3P","tlshash":"8753c8a59220b33db827d8399dd89a9d9124c052cf264bdefd52a23c87c77d12a713c9","first_seen":"2026-02-04T19:51:15.842283Z","last_seen":"2026-07-07T05:06:07.158209Z","times_seen":50,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/stower.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/stower.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 1177\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-29d3a494875fa07bf0d3a63fb94ad8ac-647abad889585323-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-499\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc20\r\nage: 14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1177,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"ba10312a7edfd843d07db405f85466cd","sha1":"4895c058b4a79d59c311b75e713afaa39b3438e5","sha256":"82af2f35eb72c1e59c0327c284e608660dc6bfcd0ae83cbbef14157f242e668a","sha512":"6d343f5f3a86c770c9277d16d8964def7724e6fc4e944524fdb8ee45cddcfef1cae5b1f09227734f4288387a42cb42f9a1165c4852f6a9f2b618c8b0a08ef930","ssdeep":"","tlshash":"37213ac402310db9bed23f64e08d0f97c831a1fb534237982fc098a843a9781a1c894e","first_seen":"2026-02-26T13:53:40.67362Z","last_seen":"2026-08-07T16:44:13.758131Z","times_seen":356,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":237,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/css/32722c26d0b14721.css","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:54.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/css/32722c26d0b14721.css HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Sun, 15 Mar 2026 08:14:54 GMT\r\netag: W/\"4d29-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562494\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562494\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19753,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (19753), with no line terminators","md5":"7228ef26768f70095f2bf25330b6677a","sha1":"a9ff9b971875c2156e0d1beb34651f8794a214d5","sha256":"a61489f3b428c29c19487168fd3d4bf5efb9cb7575c2f13449d2711ed95b260f","sha512":"f73ed3003f242310f9e998a9c12856f9cd34df9ffe919cc4a34e38ec05202150e08d7bc61a03cb4d8cf5204e6d2bd44a2b6bbfe4a277f980ac8a14084126c39e","ssdeep":"384:5NS7gZ7U1FwV+aux1f3Dvb1B7Yg1//1u1W/JQkzdngVP8:jz+auTL1/NIW/Jlt","tlshash":"b39295ad6698313cb53fe46794a41a237218c112e61f0eeed93473f8f5c629706f7289","first_seen":"2026-03-15T08:11:50.619631Z","last_seen":"2026-03-15T08:17:27.412312Z","times_seen":12,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/920-0f0039d00f57f570.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:54.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/chunks/920-0f0039d00f57f570.js HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 15 Mar 2026 08:14:54 GMT\r\netag: W/\"154668-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562494\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562494\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1394280,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (56450)","md5":"f7a06b4b216fe5938293da40cd892764","sha1":"41c716762bcf5643a7a39d470a875c988dd7762e","sha256":"42a4df6399fbcf120916bb352a34ff2070d79562adfd944dde0a9cf28860bccd","sha512":"1c3154b919016e76faa62acae2a2598f9b427a679578ebe4e43f3997bdbecc1add6645d40e1d9fe0c269b8b8ff52246b21b1bd9cb60285451557f9df52e85a93","ssdeep":"12288:exybdjVdOTVEPAsHetru8epfYoNP/l/xVjq+3rMnXreS1z0r:ewdjy5+HetrFafFNP/l/xVjdbMn7e+0r","tlshash":"fe256d957366f43243df915aa4391202f3389898141d802cf7a8ecefaa98dc556bff71","first_seen":"2026-02-17T01:17:43.140826Z","last_seen":"2026-04-11T23:48:54.302739Z","times_seen":24,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/app/pay/%5Bkey%5D/page-a7108d3970cbfe76.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:54.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/chunks/app/pay/%5Bkey%5D/page-a7108d3970cbfe76.js HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 15 Mar 2026 08:14:54 GMT\r\netag: W/\"554f-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562494\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562494\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21839,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21737), with no line terminators","md5":"0227cddb5c803bff03664be322e6ee8d","sha1":"f3e3e019b3322ce96b80346570e15071b07a7f43","sha256":"1c53d9fc3099e43a9f862a39c888b5e504d0282b9e3dd542a72523ab18a421f4","sha512":"5c4344589c67b5f58c8f842c2bef228cbf5bff1f2736e9456ed607e262eec6964f5dceb861f182507668f1e0bfab17c7cc3a6f4113f20cac7efa1823f28880b8","ssdeep":"384:ng7O0C+/KwdSKcJnWOofB8199B+BoqmcB/ScgxUE/P:ng7BK0IWFZ8HgoZG/tg9/P","tlshash":"c0a2331153413e1e72930505748326bc9aa6aa84c316a1363e6d853edbb47e1ece7fcf","first_seen":"2026-03-15T08:15:24.254787Z","last_seen":"2026-03-15T08:15:24.254787Z","times_seen":1,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/css/e4565120a7b98071.css","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/css/e4565120a7b98071.css HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Sun, 15 Mar 2026 08:14:55 GMT\r\netag: W/\"d054-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=Yjwl4jzqqf3ldpf10B%2BxcN2dNYws5z%2Bq75HIYohs5Q0%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562495\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=Yjwl4jzqqf3ldpf10B%2BxcN2dNYws5z%2Bq75HIYohs5Q0%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562495\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":53332,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (53332), with no line terminators","md5":"9e8025bcf50d00439e033af54ed5f09e","sha1":"636835da3d0fd6c310040630d5338e4c9bb19969","sha256":"139ab003dcda8d31d373a0458a8c554111b67212296d5a1cb71fdba6a61ae791","sha512":"f54b29a485becc9912c5cd1d316f649c506789ab450eca3fad24b3b439b81e520deca7284ac0f81c3f61445a4075ece1852c3efd176ac7de6055a4dfbf951dc7","ssdeep":"768:GV5pp5/wkDcolIFgXHkhhgjdi7zcyj2OKL/L:sppR54SIQdi7zch","tlshash":"e833f871d116207df23be216e0c2ea9a7239c003e5234f6de957b929c6ca1931776f4e","first_seen":"2026-03-15T08:15:24.256939Z","last_seen":"2026-03-15T08:15:24.256939Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/telegram_wallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/telegram_wallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 24341\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-bba3521f99b118d713a3790e1ea2ffab-20a54ae4399e0d1e-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-5f15\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc22\r\nage: 14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24341,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"ea821489af4c2e485a86112942971907","sha1":"3fb8aab37a0bc8a4394c296adf2249f1ad494faf","sha256":"6c30dcf8baf07a22361167e8dc7e8152274db474fadf9eea0a1e7bcd9a24df9e","sha512":"c56226380bc790cd2426d8ba38acd67e52a7247302e653646c37d7809a229d6ffc085a1030de216392c51ba5c90ea6b27d43ae3700236abbadfe18f8c5b052dd","ssdeep":"384:U6Mamo5oPY3GXjRKfmka0+sGGoc5Km3ow/745k5o1RH1kL4DcfXSPG0u/Whpr:UlamvPKGXj+mF0TG3c53Yw/745wo1o4R","tlshash":"41b2e1c9968bd133bc4a5d4865985e39c6282c363d13d6056f1b72b88bf380e91d8ed9","first_seen":"2024-04-21T23:23:38Z","last_seen":"2026-08-07T16:44:13.709378Z","times_seen":841,"resource_available":false,"data":null}},"time_used":642,"timings":{"blocked":306,"dns":0,"connect":8,"send":0,"wait":9,"receive":1,"ssl":314},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/sparx.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/sparx.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 12031\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-e0004bd95a9f70a97366cd0fefedcafd-d1f3f1f308fb12a9-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-2eff\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc18\r\nage: 14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12031,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"350d95923ef7019d8c78aa10e3dcc84c","sha1":"f2dd0e01a18a84ac6310bb609df5a3a52c2cd35b","sha256":"d380702b04582bb035eb3e5ebfb4cb99b1944447fed694d759e5b87cb0502b17","sha512":"ac6a84ea2bcb39b631b3eada1b91042c58f3b9650e8bfd52c5f7a473b5b2651a03c2ed3bbc0fa281710f11feff2a0d7924a47f770d95fecd553e543f0b61a3e5","ssdeep":"192:wS4DQJ05f0IFbka5nldHEujoV152XcyLNH7L1GflxCNH/slQvlgmk7uoHWIaLbog:XiXf0i1fHpjuHGx9ilx06QvAu3IaL0zk","tlshash":"b0428ede615d3ac9e13a13f537db186b2e9723bec012b29d29137f160e7a00a9572c5c","first_seen":"2025-12-24T06:30:42.004317Z","last_seen":"2026-08-07T16:44:13.60633Z","times_seen":513,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":238,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/nowpayments/payment/status-waiting-active.svg","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:56.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /nowpayments/payment/status-waiting-active.svg HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\netag: W/\"459-19caa0f0120\"\r\nlast-modified: Sun, 01 Mar 2026 15:40:36 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=l3uj9V0mdbXYeVDVN6CXwtjm6Cqd78W5s8l6LoixoQc%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562496\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=l3uj9V0mdbXYeVDVN6CXwtjm6Cqd78W5s8l6LoixoQc%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562496\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\ncontent-length: 534\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1113,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"30de2d786f9297ec9cbb23ac9b8915b9","sha1":"111a7ef20af2380c126be1651cbf6e6cabab1836","sha256":"b626d6a5cdfe8a2b007a1333b4a815f0c09a55e761e413313d8d6900efc68e22","sha512":"8ef1746ec56ef2bf35fec6f9bdbac2a4d2211fc3f13c7d7df54d025a9ba365d5f8956de63e04ae0069e75c02ca4b4290f50b363f88832e65c0411295c7c1b44d","ssdeep":"","tlshash":"222146d84bb055cd20cf4a79af5e260951ada07b3de54fc992758b27c40a8e2b7c9c34","first_seen":"2026-03-15T08:15:24.260341Z","last_seen":"2026-07-12T18:43:07.461911Z","times_seen":3,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backend-production-828174075858.herokuapp.com/socket.io/?EIO=4\u0026transport=polling\u0026t=hbhcdpzc\u0026sid=O-wV3aVb91uH-nX7AAEh","fqdn":"backend-production-828174075858.herokuapp.com","domain":"backend-production-828174075858.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"18.208.60.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:57.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.herokuapp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BC:F1:45:C8:21:19:7F:72:A4:09:2F:2F:B0:51:8E:A3:9E:AF:0F:BF","sha256":"7C:C7:DF:0A:D1:20:69:CA:B9:7F:44:40:75:60:56:00:94:ED:A3:72:FD:A6:ED:DC:49:F8:84:38:52:8C:55:88"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=hbhcdpzc\u0026sid=O-wV3aVb91uH-nX7AAEh HTTP/1.1\r\nHost: backend-production-828174075858.herokuapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.app-nowpayments.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-store\r\nContent-Length: 32\r\nContent-Type: text/plain; charset=UTF-8\r\nDate: Sun, 15 Mar 2026 08:14:57 GMT\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=JYTPQl%2BjZjyl3SA%2FVMVyMSYC74m8i5fvSkrE2zmxXKg%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1773562497\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=JYTPQl%2BjZjyl3SA%2FVMVyMSYC74m8i5fvSkrE2zmxXKg%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1773562497\"\r\nServer: Heroku\r\nVia: 1.1 heroku-router\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d54f3cd86834816205c7ec12f167132d","sha1":"1ce999288acdde78c6559d821a8a09561a0dd16e","sha256":"ea64e5d67d2f1e99ef3b552df3b905cfed422d5a354b3d141a4f44953f10998e","sha512":"d8ed1b3875febf2ede72d4f0b7d0334d5e94cf6a9bcb8862144dd33a4c62a1fdf883829ebc3e441ca119000d3d727d723b245c05ec8f0b53a797151e6e6d5970","ssdeep":"","tlshash":"68800080b008ba02a003e0e32020200083aaa0a8f00b023c082c20220e238822800300","first_seen":"2026-03-15T08:15:24.276264Z","last_seen":"2026-03-15T08:15:24.276264Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/4bd1b696-43ba64781d20dbb7.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:54.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/chunks/4bd1b696-43ba64781d20dbb7.js HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 15 Mar 2026 08:14:54 GMT\r\netag: W/\"307dc-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562494\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562494\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":198620,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"45ca197503404c3ec373884993e955e1","sha1":"36e650675619f1a0c1fd221e5c4adbcd6fe3cbd2","sha256":"98d3a8889b0fdd8156fe5ac9cf00c94dd4006abd75b7989e4a369ed4a6d82aa3","sha512":"26291fb3d9126c4feaf192d64b73bb562b61899f5f35f80720584d5a862e1f1947e2a7da51697eb7619d56f1e6d4bfdb9556a8f5d08143a5aa597c68982f7249","ssdeep":"1536:BWuX+ZW9jo1pByrzTS6BamVShi78V201vjZdq8CB8LyvKcjY8tO7r0aKoRdZidv:zjQq7SWGV2KldqOKxEr0BoD4","tlshash":"3114f7ec3d99e665aeb302a300df28037378661b240d4d60a214fd9da57845bb17bfde","first_seen":"2025-11-28T14:47:25.682505Z","last_seen":"2026-08-02T06:09:09.774908Z","times_seen":217,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/uxuywallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/uxuywallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 2006\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-82fac4df5f8a1fc799059e126c40ec80-c78673781f768976-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-7d6\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc20\r\nage: 14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2006,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"341b60fd079e8dbd6019ba142d4d2b78","sha1":"1b6ff34914394c495bcc6c2e4e7aedf5313668d0","sha256":"e411f1b732b3ab0aa8a503ec3e26f9f60c2b8617beca17967bf81115de56b217","sha512":"2b95e6895292db780caa0e60a2477bc50e17252e46f8b831c14e15ffec6965040f6602b3b9008a4b28d7230f9ede3b121e7bc606aa8ab1ce93c7afd8e40f7c63","ssdeep":"","tlshash":"24410ae34268dc2cd4670ef6e8bab5c8877620cc6a30550a9d62a0ae108344deb1e3d5","first_seen":"2025-11-22T11:30:21.525633Z","last_seen":"2026-08-07T16:44:13.627972Z","times_seen":405,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":250,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/nowpayments/payment/status-finished-new.svg","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:56.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /nowpayments/payment/status-finished-new.svg HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:49:05.676991Z","times_seen":17803399,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/nowpayments/payment/clock.svg","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:56.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /nowpayments/payment/clock.svg HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:49:05.676991Z","times_seen":17803399,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/3699-edff3e235871c682.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:54.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/chunks/3699-edff3e235871c682.js HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 15 Mar 2026 08:14:54 GMT\r\netag: W/\"6dd2-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562494\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562494\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28114,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28110), with no line terminators","md5":"b6075dbcfb9d197d77d742dfb3c50d41","sha1":"567e560683380c78493427c02a0096f600eea667","sha256":"875255111e6ed383790ec89ef0ddaa0520a6c8e0084da45ae0b8e7a73e2798e6","sha512":"5108356c518b22ec15edf9eda3e08181b4444dc2ee86207acca0b26ea2e881fb9a14f52ae7437c13c1c8772a02363d5c6e1d6e506f897b6846b939f6a9c68d27","ssdeep":"768:9fl/go1+XIVlDbDrjvIxRZh59ND9CK8TVKBymA59Fm0uRFPLcE4aHceifLUAZ4HE:tDjvq4b","tlshash":"6bc29400d39dab5cf40a46fc621f643c756f19a8a70a84b5ebf86c3071190d97a5bbce","first_seen":"2026-03-15T08:11:50.609897Z","last_seen":"2026-03-15T08:15:24.28078Z","times_seen":5,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:54.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 15 Mar 2026 08:14:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Mar 2026 10:53:09 GMT\r\netag: W/\"69aff815-1c106\"\r\nexpires: Thu, 19 Mar 2026 08:14:55 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114950,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"bb0a2fecf6cd27fba9cd29610fd2ccdc","sha1":"7546ed807d56be081be97fa1e4859381ecccf58e","sha256":"dc67f1e084e069a3fb629f3154765856fe0aa805a4e138bc42c228bc3d656a78","sha512":"5350795e68c371956350f88354aac62900d7fc5974817e93f49f218fa60becda436da0a8bf17d6239e2ef882cee0b18bfe66e181baa6f1ca04b57817c2920166","ssdeep":"1536:pO5TpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:s5TpRdfcKFU7Rx1H","tlshash":"31b33e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","first_seen":"2026-03-10T21:38:17.367441Z","last_seen":"2026-08-06T08:41:46.722793Z","times_seen":775,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":117,"dns":0,"connect":21,"send":0,"wait":42,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.app-nowpayments.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Mar 2026 15:28:54 GMT\r\nexpires: Fri, 12 Mar 2027 15:28:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 233161\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-09T17:49:47.970526Z","times_seen":255477,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":59,"dns":1,"connect":8,"send":0,"wait":9,"receive":10,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/xtonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/xtonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 6673\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-e683290ab824519331fe6893992cde68-ea127cd8651f6293-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-1a11\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc22\r\nage: 14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6673,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"3cdb7697d40d42ba9183cfec43e867cc","sha1":"5f99574ff04392bae80c5c23f5892972ebb71e23","sha256":"d52abdfbc9303922359179dae6503455e022175e2b559edd7b53b5c797bcfec9","sha512":"3169c2a3895844ff32f42a70ff7ae781826e6469d7dce457ce5b6f2e0a386f8b3fcc71fb9daa8a7d678157d7a1d19b99ccf372ddea3c86c4d8efeb827deb9064","ssdeep":"96:UscWJioWzrqf2mWHxBYp4JSFrEtVGWDg3mWQpILYmyBgPLotkw3enAEVJzs1:UgwoWZjxuWOotVGuTpuYmyFtkwuAEm","tlshash":"7cd15b93cb111271e97d46b108a35b208fcad67134a757123b78a638eee6641b093f94","first_seen":"2025-11-22T11:30:21.524252Z","last_seen":"2026-08-07T16:44:13.723124Z","times_seen":405,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":263,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/bitgetwalletlite.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/bitgetwalletlite.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 2008\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-fea91a9e188e36992bb7a9e8d9deded2-b7757a4198e2bdef-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-7d8\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc17\r\nage: 14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"09790056c70e889c7f74f91a9222bc01","sha1":"26194deadd44d9a00ca48ae053924b76656e885a","sha256":"e85acd2f35d2deb9726a0db27737b931b600fd4bad9b73b3009be6ece7fcbefb","sha512":"b71f8a277680fc9cba3c8a4a272b21b8b157714a31ebaa7fd8f8dc8639ee872948dff4af3f0af395b2cebbc75f15ff7ebfbe9fa5ac87e363afc8c11eb69399d3","ssdeep":"","tlshash":"6941b6835134d5fc3e5b3826800b8f1f51ab1607d1d26455c77b98381f73ce96662b2b","first_seen":"2025-11-22T11:30:21.492928Z","last_seen":"2026-08-07T16:44:13.589291Z","times_seen":405,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":259,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/nowpayments/payment/status-processing.svg","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:56.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /nowpayments/payment/status-processing.svg HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:49:05.676991Z","times_seen":17803399,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/css/5e293550cc0e87d6.css","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:54.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/css/5e293550cc0e87d6.css HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Sun, 15 Mar 2026 08:14:54 GMT\r\netag: W/\"2a109-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562494\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562494\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":172297,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"cc65432c1db89b3ee11c2119979a1842","sha1":"3cd5fbd8365612765d371bf703743e83daf5fb51","sha256":"38e81d41bab07cfad4957da33b1cfa571516b391f2b1cf92d572d58b438594a4","sha512":"10d5313676e18565a4c4019c58c875c48472cb9cd3325f042f73b4004a7c6d62750dd908028ba8bddf7500013b40ece9ce72737bee713a70f386cc13f2538069","ssdeep":"3072:cHHGpc5xujS51ECV+BIlhwGo8hAMsRW3UhmAqQgSc4XvK8KhRkGI8Y4mnGXrk0bE:0HGpc5xujS51ECV+BIlhwGo8hAMsRW3w","tlshash":"71f3a3a4b325e53fbc3360bd53acf85c911eb181de260ae8fe11a12617c37f61d66618","first_seen":"2026-03-15T08:11:50.671621Z","last_seen":"2026-03-15T08:17:27.441586Z","times_seen":8,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/_next/static/chunks/768-594cd303437b5b3c.js","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:54.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /_next/static/chunks/768-594cd303437b5b3c.js HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 15 Mar 2026 08:14:54 GMT\r\netag: W/\"57e5-19cadc00eb8\"\r\nlast-modified: Mon, 02 Mar 2026 08:52:51 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562494\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=iHht2gUkxmcoq4LgWpFi3vjnng3kPkXnSmAD%2BYvKX90%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562494\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22501,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (22501), with no line terminators","md5":"d902de81a9efe36229f9277bcb9b9d40","sha1":"e0920fec58d1ce7c40395992dd29e79237ad41da","sha256":"fe1313e4fd39793bfd38ff124fc69cca8ec1ffe19c151a1b5e9778351182c966","sha512":"19fafe092dc8c6487a210d96bb1f200dc3e1bde231eeaa07b32176e16d50919cd64f6f62d900239bdf06039aa25bff1cecff4bcf3e7f7ca51a8b4ccf4c94733f","ssdeep":"384:4YoikqO5pU4HF3kW1ZZNjTgWxIrz66/chAS9HYWOgI6AEg2RmhKFe4m8+TJtpskR:jYpU63IrYzVRmhKlm8+TRRIGzyTAogL","tlshash":"e6a2e8cdb761b16b53ab51c6442f0405e2fea9a8241d096cfb51d4c3b8b8da5a0f7f38","first_seen":"2026-02-17T01:17:43.095163Z","last_seen":"2026-07-07T05:06:07.211894Z","times_seen":37,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/binanceweb3tonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/binanceweb3tonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 1607\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-3c8c750f2df4ccc0a396940609c6eebc-52d954d225038ec5-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-647\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc14\r\nage: 14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1607,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"292e89cefe60c940848daaf7ab58e11b","sha1":"07d3ede03ae361212cd9c7d0f91cf9edf3c8583c","sha256":"0cf1b71e664487b9bbfade7ff380f3c7388f22ff82b2331cd1326c5242f2c5a5","sha512":"f3410481b475b54a5d6a2b2ef1bd6bf8963ffa10e003d575e0a6233c2e5d701a826fa86dcd52057b7bbbb15ec12e2f2e92d9bdec5e725eb35633419f73cd15ab","ssdeep":"","tlshash":"4131eacf35170ed3ce765b56babe0c736d89157033ca2845527d25c55406d0c43cb462","first_seen":"2025-11-22T11:30:21.504787Z","last_seen":"2026-08-07T16:44:13.710061Z","times_seen":406,"resource_available":false,"data":null}},"time_used":692,"timings":{"blocked":-1,"dns":1,"connect":9,"send":0,"wait":10,"receive":0,"ssl":669},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/safepalwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/safepalwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 735\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-ac0311010d4e5f10de5dbc7ad1a17876-1c8eb3bbd8fafef3-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-2df\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc19\r\nage: 13\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:43+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":735,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 4-bit colormap, non-interlaced","md5":"0538634f954d877d5ed633b704fc475d","sha1":"97cf8e669eafa065d964a577c7f58af15d7555ac","sha256":"2173dbf44e5b986d15cb52b206af9e85e2dcc4808aebd6f7f29fdb5949f5fa4a","sha512":"a8d4a748977b04a6e5e2a6cc205822a9286cd2c0c8d0330d83bb8ea7debe5e8460d2a62910c9be688b67e1c33444d31c111022993b3b91ebebb2c51b3d6af696","ssdeep":"","tlshash":"430160f4cece0801853f8c215418a4c8e940c28fa06ac7330db4cc1a61c9c90a93f512","first_seen":"2024-06-30T12:44:46Z","last_seen":"2026-08-07T16:44:13.804099Z","times_seen":1075,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":272,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/tomowallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/tomowallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 764\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-e649d833c23d1f6551d9e4fe8fd806c5-8e65ae7318422981-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-2fc\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc17\r\nage: 14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":764,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 75 x 82, 8-bit colormap, non-interlaced","md5":"591694f0be4f3e0593e9e8d9ea3aeb31","sha1":"911632556978f58f5f7299d7e8e659535aaebcc0","sha256":"0b338c2788aeccf2e2518d357fb136dffb28ad0f6312cd417c20ee382b9338db","sha512":"b389fe4083832ce8d6b886b658ce0d5a8a83c40e73e5f6d4d6fae76863734e887e3933cacda11b6cc5ddb10a7eed507f249f4e82e80aee04ece03bad7ce69730","ssdeep":"","tlshash":"f50175c69b3c484f4ce422c10796e0d89210c4710088a01abc9b48561a7c8ef3b5eb0e","first_seen":"2025-11-22T11:30:21.469469Z","last_seen":"2026-08-07T16:44:13.804784Z","times_seen":405,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":255,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend-production-828174075858.herokuapp.com/client","fqdn":"backend-production-828174075858.herokuapp.com","domain":"backend-production-828174075858.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"18.208.60.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:56.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.herokuapp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BC:F1:45:C8:21:19:7F:72:A4:09:2F:2F:B0:51:8E:A3:9E:AF:0F:BF","sha256":"7C:C7:DF:0A:D1:20:69:CA:B9:7F:44:40:75:60:56:00:94:ED:A3:72:FD:A6:ED:DC:49:F8:84:38:52:8C:55:88"}}},"request":{"raw":"POST /client HTTP/1.1\r\nHost: backend-production-828174075858.herokuapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.app-nowpayments.com/\r\nContent-Type: application/json\r\nContent-Length: 627\r\nOrigin: https://www.app-nowpayments.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":627,"data":"{\"device\":{\"screenWidth\":1280,\"screenHeight\":1024,\"colorDepth\":24,\"pixelRatio\":1,\"availWidth\":1280,\"availHeight\":1024},\"renderer\":{\"vendor\":\"Mesa\",\"renderer\":\"llvmpipe\",\"webglVersion\":\"WebGL 1.0\"},\"browser\":{\"name\":\"Firefox\",\"version\":\"134.0\",\"language\":\"en-US\",\"languages\":[\"en-US\",\"en\"],\"cookiesEnabled\":true,\"doNotTrack\":\"1\",\"hardwareConcurrency\":48,\"maxTouchPoints\":0,\"pdfViewerEnabled\":true},\"platform\":{\"platform\":\"Win32\",\"vendor\":\"\",\"appName\":\"Netscape\",\"appVersion\":\"5.0 (X11)\",\"product\":\"Gecko\"},\"timezone\":\"UTC\",\"timezoneOffset\":0,\"isOnline\":true,\"canvas\":\"8461bbc2\",\"webglFingerprint\":\"c504d946\",\"urlKey\":\"x8UsS7Ty\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 53\r\nContent-Type: application/json; charset=utf-8\r\nDate: Sun, 15 Mar 2026 08:14:57 GMT\r\nEtag: W/\"35-kwI1H5JKSJBKPBA3k5SiPuO0A4E\"\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=wt57b4U6ND9Wm8wmCTBHvGUvEFE8B1GEJElqpRvCa%2B0%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1773562496\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=wt57b4U6ND9Wm8wmCTBHvGUvEFE8B1GEJElqpRvCa%2B0%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1773562496\"\r\nServer: Heroku\r\nVia: 1.1 heroku-router\r\nX-Powered-By: Express\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":53,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"de96fdb33aa2b68d7edd32345a17a212","sha1":"9302351f924a48904a3c10379394a23ee3b40381","sha256":"0f38013e7943ee8b4a17e9cf818a2681508ff1124acbc69754d6871909bb324c","sha512":"7a55317a2b7d0c866e01f18a661c69368932252fef417fe6b1235ed27d551c07eb1c8f4c9892bfb4cd3f8345bcdbd9f7a45a49d3a969a4537adcabd3c508f77b","ssdeep":"","tlshash":"019002401b510515404512a4950541626065e400e511bcd44a9a999414bb8e55336517","first_seen":"2026-02-06T18:23:23.258218Z","last_seen":"2026-06-01T00:34:25.566315Z","times_seen":33,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app-nowpayments.com/favicon-nowpayments.ico?v=1773562495559","fqdn":"www.app-nowpayments.com","domain":"app-nowpayments.com","tld":"com"},"ip":{"addr":"76.223.11.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:57.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.app-nowpayments.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:37:48 GMT","end":"Sun, 31 May 2026 12:37:47 GMT"},"fingerprint":{"sha1":"6B:E7:E1:CA:5F:FE:1C:EA:94:C9:73:89:48:AC:BC:16:48:BB:2D:8D","sha256":"3D:66:CF:42:85:6D:3B:A9:97:BC:3F:54:04:08:A2:45:AC:09:95:82:38:58:44:8A:36:07:1A:FE:5A:60:D3:23"}}},"request":{"raw":"GET /favicon-nowpayments.ico?v=1773562495559 HTTP/1.1\r\nHost: www.app-nowpayments.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/pay/x8UsS7Ty\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: image/x-icon\r\ndate: Sun, 15 Mar 2026 08:14:57 GMT\r\netag: W/\"423e-19caa0f0120\"\r\nlast-modified: Sun, 01 Mar 2026 15:40:36 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=rxvGlArDlkPL%2FeE3WhcUzDk43AGOlRjxMP6Y7sRQk7M%3D\\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\\u0026ts=1773562497\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=rxvGlArDlkPL%2FeE3WhcUzDk43AGOlRjxMP6Y7sRQk7M%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1773562497\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\ncontent-length: 166\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"3ea9ba925d181782878b1bbb14dec746","sha1":"21401920e2071baeaa7e616d133e645c84f5d0b7","sha256":"4f2feb9d6e1cb237b1887e36b67fce8becfef2549b4168eeb44df1a561e6ecec","sha512":"95427dce14c170a87e9ea692f04e2f0c6da8d7c3da8b797c47f862e1af6cf453393fb87e39d60ee96e53ed1d22fabd0930648116932621359a82cdd58f3a291c","ssdeep":"96:JGjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjL:J","tlshash":"827214211ac30c84ccabb2381083d3f6910b4c7489f512cb26ccfd63f84dd8aac68244","first_seen":"2026-03-15T08:15:24.292541Z","last_seen":"2026-07-15T08:04:06.491087Z","times_seen":8,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"www.app-nowpayments.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backend-production-828174075858.herokuapp.com/socket.io/?EIO=4\u0026transport=polling\u0026t=hbhl31yk\u0026sid=O-wV3aVb91uH-nX7AAEh","fqdn":"backend-production-828174075858.herokuapp.com","domain":"backend-production-828174075858.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"18.208.60.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:57.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.herokuapp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BC:F1:45:C8:21:19:7F:72:A4:09:2F:2F:B0:51:8E:A3:9E:AF:0F:BF","sha256":"7C:C7:DF:0A:D1:20:69:CA:B9:7F:44:40:75:60:56:00:94:ED:A3:72:FD:A6:ED:DC:49:F8:84:38:52:8C:55:88"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=hbhl31yk\u0026sid=O-wV3aVb91uH-nX7AAEh HTTP/1.1\r\nHost: backend-production-828174075858.herokuapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.app-nowpayments.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-store\r\nContent-Length: 1\r\nContent-Type: text/plain; charset=UTF-8\r\nDate: Sun, 15 Mar 2026 08:14:57 GMT\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=JYTPQl%2BjZjyl3SA%2FVMVyMSYC74m8i5fvSkrE2zmxXKg%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1773562497\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=JYTPQl%2BjZjyl3SA%2FVMVyMSYC74m8i5fvSkrE2zmxXKg%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1773562497\"\r\nServer: Heroku\r\nVia: 1.1 heroku-router\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"very short file (no magic)","md5":"1679091c5a880faf6fb5e6087eb1b2dc","sha1":"c1dfd96eea8cc2b62785275bca38ac261256e278","sha256":"e7f6c011776e8db7cd330b54174fd76f7d0216b612387a5ffcfb81e6f0919683","sha512":"3c9ad55147a7144f6067327c3b82ea70e7c5426add9ceea4d07dc2902239bf9e049b88625eb65d014a7718f79354608cab0921782c643f0208983fffa3582e40","ssdeep":"","tlshash":"c700000000030000c00000300000000000000000000c00000000000000000000000000","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-08-08T17:04:09.18117Z","times_seen":12054,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/okxtonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app-nowpayments.com/pay/x8UsS7Ty","date":"2026-03-15T08:14:55.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/okxtonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app-nowpayments.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 08:14:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 1419\r\nx-id-fe: sto5-hw-edge-gc21\r\ntraceparent: 00-b9d0921f70460c484edc82a6f66fc7df-7782dc733dac25b3-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 26 Feb 2026 10:49:28 GMT\r\netag: \"69a02538-58b\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: sto5-hw-edge-gc17\r\nage: 14\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-15T08:14:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1419,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 270 x 270, 8-bit colormap, non-interlaced","md5":"eae57e6670b0935844d704d55c8a6c1f","sha1":"b48e9e4136e1686c69f95e8e3cdf406e857b4864","sha256":"88c1133276ed03cd0da7ae1b8e6e97b388ca84bb2aa40644f280b914ff11b8e8","sha512":"ad44608a7fccfadcd5c3cbf3d9dfb765e3305b784539880c30494f0b0d4bdfea7998dee5a66cbf44954651f08001276b496f674aa436f08e052066cb95997bfe","ssdeep":"","tlshash":"24212c4760c10c90fa75da758fe612629df61f348a54c4d82a52e37d141eae80eacb8f","first_seen":"2025-11-22T11:30:21.475658Z","last_seen":"2026-08-07T16:44:13.710746Z","times_seen":405,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":285,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}