{"report_id":"8f679d21-324c-4b16-8ea0-11ddd67d2ac6","version":0,"status":"done","tags":[],"date":"2026-09-05T01:01:12Z","url":{"schema":"https","addr":"tronifyltd.com/","fqdn":"tronifyltd.com","domain":"tronifyltd.com","tld":"com"},"ip":{"addr":"192.162.199.194","port":0,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"tronifyltd.com/","fqdn":"tronifyltd.com","domain":"tronifyltd.com","tld":"com"},"title":"Tronify LTD — TRON Energy for Zero-Fee USDT Transfers","dom":{"size":28911,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3523)","md5":"871e5e0164dce986652bcd7bc6369b66","sha1":"788d4242d7b6c2509ba88c7afda5ecb9fa868324","sha256":"c3a23b11aaca290bdb1c1a25046ae5feda0d410356f511d319f4cd33f0bad98c","sha512":"dca0ee7eee405e8b1fdc72d436b3b2911bf18910c6afbc36e7c3cc3797041a3c87b2e3ccb16903f27fe490b470cdd32da283f9e6c15875c4bef7a19033e5f8d5","ssdeep":"384:Cn9gIlaX57qyPkhrrT1r6fBZGtjTw8h8wII4Ov/TQcpkwiERW:Cn9flYPfpZGtjT3II4OJaE4","tlshash":"f4d2e7b2a250613be53b9ad672e497ff31a2d407cc070350f3ec41a48bc3de69e66649","dom_hash":"domhash31946a2082bb4016f0fc70ca657c6f1c","first_seen":"2026-09-05T00:54:49.352133Z","last_seen":"2026-09-05T01:01:21.736204Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"tronifyltd.com/","fqdn":"tronifyltd.com","domain":"tronifyltd.com","tld":"com"},"ip":{"addr":"192.162.199.194","port":0,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-10T01:01:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-09-05","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"tronifyltd.com/nav.js?v=header-static-20260620","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tronifyltd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":5766,"sent_data":539,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":5,"received_data":164600,"sent_data":2790,"comment":"","tags":null,"fingerprints":null},{"fqdn":"tronifyltd.com","ip":{"addr":"192.162.199.194","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"domain_registered":"2026-07-09","domain_rank":0,"first_seen":"2026-09-05T00:54:43.292466Z","last_seen":"2026-09-05T00:54:43.292466Z","alert_count":8,"request_count":7,"received_data":3493348,"sent_data":3291,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tronifyltd.com/","fqdn":"tronifyltd.com","domain":"tronifyltd.com","tld":"com"},"ip":{"addr":"192.162.199.194","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-09-13T12:19:34.362075Z","times_seen":755692,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tronifyltd.com/files/adapter-script.js?v=2","fqdn":"tronifyltd.com","domain":"tronifyltd.com","tld":"com"},"ip":{"addr":"192.162.199.194","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b2924899d8a32e1d9f5fc8ba7c61cae","sha1":"83758a5ba6c6e21b26a5293015ee0f2f8ba77f51","sha256":"586ef18a75b6b923d965d8112c2de526ef7cfae0f0a7f0116ac66f5e9d6d5664","sha512":"f49ca2310c020ad4ae28e42c74c2d33d205a9732edf166f6b0b27ff73bf79268dd7ef3f801455b399833fb3fbd85f5bbaa4b80ab2b04356425d354f155bc3d7b","ssdeep":"49152:0NHbOonAu+Tjtn/G/9B9wULRxpyp7FUc1qwhYgSOHSFOrjX4pShv2Xki:U7zAu+Tjt6Lpyp7FUcJTvs","tlshash":"cc856c807360b47da75742ac98ab1940f3349886440d806cfbecd5f6df989c989bbfb5","size":1850255,"data":"","first_seen":"2026-09-05T00:54:49.367489Z","last_seen":"2026-09-05T01:01:21.760258Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tronifyltd.com/nav.js?v=header-static-20260620","fqdn":"tronifyltd.com","domain":"tronifyltd.com","tld":"com"},"ip":{"addr":"192.162.199.194","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c0d89f49feec1d9df0d4df1c2ae4d42","sha1":"9b8c8003fe0279ad67bc22f3b6b35b342f84e3b3","sha256":"f8bd207dbd816de0f239a5f82eb1132b455d05e6392dd2976c2aa39002823610","sha512":"8fadcb10f46d5831b17f37b012a9e3437a9de7955118a70f8805b72e06bc5020bb26e1ba0de6293bbef788bd216e2baf28b2de2c33910ae310e50c60c9751cdf","ssdeep":"3072:WJgrxCE05QKbXKE1J/T4ND5u2T9nkYP+pgAf7roTw71i/qlH19+u8oa9Wkjrq3tF:Kgrxt8QKLR1mu2T1kYP+pWTw7y6yjVuh","tlshash":"99f3b094f3c4e903138e4fa3bb1a75e8ee662c5a7484384781547ee95cfa167dea0c70","size":169862,"data":"","first_seen":"2026-09-05T00:54:49.35555Z","last_seen":"2026-09-05T01:01:21.750963Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-09-05","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"tronifyltd.com/nav.js?v=header-static-20260620","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"tronifyltd.com/","fqdn":"tronifyltd.com","domain":"tronifyltd.com","tld":"com"},"ip":{"addr":"192.162.199.194","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"044c30c562260ddfb9b368d512addb0b","sha1":"a4f8bf9021a0819ca414643430063920c46903b1","sha256":"7294f0e2087e8e323887d8325217db08266ed9b303c1b54b6188460f2997a617","sha512":"008c72579e5750100f791e3b4007310429c1ca8301895f1c1a237aa2a14e30cb634fb1fe20eb74f6852367080e79771222b09fd0396e095853a3be118bcacdc8","ssdeep":"48:8UiAhmXUFFZnnNXxu4qi+c0cAYm8GDX8AuxbkGvlJWtl2HrkNTCFvuaKglDA0hpR:oY8Vc7rkwMWAcfo2KhkUdXMRL7","tlshash":"9891b7fbb964a57658fb577ba12f57c978a420502c0ae050247cc888bdb4e5603b7efc","size":4330,"data":"","first_seen":"2026-09-05T00:54:49.363787Z","last_seen":"2026-09-05T01:01:21.762096Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tronifyltd.com/files/service-script.js?v=2","fqdn":"tronifyltd.com","domain":"tronifyltd.com","tld":"com"},"ip":{"addr":"192.162.199.194","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5d03407d0af6766b7bd55cc02d3fa4e","sha1":"da66144840387b613151647add8aa8f9ef474cf3","sha256":"bbd991a0cb0ddaf5897c70b2b6bd522a8e2c6016f076e6bdc7dc9fd0e31be131","sha512":"4ba1ba0a174947f0f412a038da4775be8b6ba67421e86331ef83362cee1d3c0a27ef3e8ec4964ff9c350220c485068837bfcd69b24a7b57776a706c2620ddd4e","ssdeep":"12288:rGO9df+b6U3QvXsVos+L4567jO6j/xcpMJd+JFjB/iCO4RgsbEOqgdCM5Fk6sA/m:lsHJMhytykrnYvPHo2aE","tlshash":"cd65216023c0aa17204f5fe3bb1abbe5f92d7a7d36651487e1147d54a6ba403c7e0eb0","size":1432376,"data":"","first_seen":"2026-09-05T00:54:49.365029Z","last_seen":"2026-09-05T01:01:21.764214Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tronifyltd.com/","fqdn":"tronifyltd.com","domain":"tronifyltd.com","tld":"com"},"ip":{"addr":"192.162.199.194","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-09-13T12:35:45.278489Z","times_seen":239407,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tronifyltd.com/style.css?v=header-fixed-20260620","fqdn":"tronifyltd.com","domain":"tronifyltd.com","tld":"com"},"ip":{"addr":"192.162.199.194","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tronifyltd.com/","date":"2026-09-05T01:00:39.396Z","timestamp":1788570039396,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tronifyltd.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 23:04:08 GMT","end":"Wed, 07 Oct 2026 23:04:07 GMT"},"fingerprint":{"sha1":"B7:DF:07:14:7D:5A:E2:B1:B6:E5:7E:68:6F:2D:43:9C:95:94:11:2F","sha256":"7E:F1:4A:73:59:90:86:92:04:13:E6:73:8E:FB:3B:88:DF:3D:EB:00:19:50:47:69:9E:2A:00:22:4A:D9:9C:43"}}},"request":{"raw":"GET /style.css?v=header-fixed-20260620 HTTP/1.1\r\nHost: tronifyltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tronifyltd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 05 Sep 2026 01:00:39 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Thu, 25 Jun 2026 20:00:12 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a3d88cc-2da0\"\r\nCache-Control: public, max-age=604800\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":11680,"size_decoded":4156,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (386), with CRLF line terminators","md5":"b9afcca3f3f4c5181d83cf4e1f663fa1","sha1":"10ecf3c52635a84172d28a098de3c77f606e3445","sha256":"aee4822be4d3153cc55e53fb8dc5dd02ee1574bc00d0f1b07e308e9e52242ea3","sha512":"13bbea06cac306662656b8b1a5f06d44696125efcf2acef2c18d7b6d3aad9f90d4a51cd2a184e26bec8ca437a4ab1f34b3527d3f1b22d2567c6e7a782b2837f1","ssdeep":"192:xbcgGKmuz5yUgD/HcqUFeGbEQPOacRlNsx/o2Cn1CLouzSvXdpzlF9hMirC:xbbGKmuzmHcqUFmzyxg89zSvXdpzlRM/","tlshash":"263295609752322c7437e86127d40bed787c9403fc134beee6d26265cad32ee5ab1b49","first_seen":"2026-09-05T00:54:49.362245Z","last_seen":"2026-09-05T01:01:21.739312Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tronifyltd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Outfit:wght@300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tronifyltd.com/","date":"2026-09-05T01:00:39.643Z","timestamp":1788570039643,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Outfit:wght@300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tronifyltd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 05 Sep 2026 01:00:39 GMT\r\ndate: Sat, 05 Sep 2026 01:00:39 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5082,"size_decoded":1145,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ec60e7590df48af1236045a7341f2fad","sha1":"8d5f0abd639cf4379bccbd83cf1b601d1556f9b1","sha256":"1a6b6999f4cdfff8b286152a584c7e871446a75f06279abf60f77404092f6444","sha512":"2f71603630bff01a19ee79a3191d175ba14d09d189741b21cc4b2918fdbccb169b08593e763e682434371b1cae99bd546557c081d52f5b9f4ce09588bd0dca51","ssdeep":"96:cO1aRJc+uwO1aKNNOEaRJc+uwOEaKNNOXaRJc+uwOXaKNNOxMaRJc+uwOxMaKNNS:ShbNh6OhprhwEhXxhWV","tlshash":"dfa1dda1082ba144df970cc222ce7e33ef5f62516444d934affe1899ac6bd5a835770d","first_seen":"2025-09-19T05:39:03.7597Z","last_seen":"2026-09-12T10:55:26.148407Z","times_seen":778,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":34,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tronifyltd.com/","date":"2026-09-05T01:00:39.801Z","timestamp":1788570039801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tronifyltd.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 10:19:45 GMT\r\nexpires: Sat, 04 Sep 2027 10:19:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nage: 52854\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":32920,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-09-13T13:13:30.351112Z","times_seen":31487,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":2,"connect":30,"send":0,"wait":18,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tronifyltd.com/","date":"2026-09-05T01:00:39.805Z","timestamp":1788570039805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tronifyltd.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 10:19:45 GMT\r\nexpires: Sat, 04 Sep 2027 10:19:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nage: 52854\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":32920,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-09-13T13:13:30.351112Z","times_seen":31487,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":35,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tronifyltd.com/files/service-script.js?v=2","fqdn":"tronifyltd.com","domain":"tronifyltd.com","tld":"com"},"ip":{"addr":"192.162.199.194","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tronifyltd.com/","date":"2026-09-05T01:00:39.822Z","timestamp":1788570039822,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tronifyltd.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 23:04:08 GMT","end":"Wed, 07 Oct 2026 23:04:07 GMT"},"fingerprint":{"sha1":"B7:DF:07:14:7D:5A:E2:B1:B6:E5:7E:68:6F:2D:43:9C:95:94:11:2F","sha256":"7E:F1:4A:73:59:90:86:92:04:13:E6:73:8E:FB:3B:88:DF:3D:EB:00:19:50:47:69:9E:2A:00:22:4A:D9:9C:43"}}},"request":{"raw":"GET /files/service-script.js?v=2 HTTP/1.1\r\nHost: tronifyltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tronifyltd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 05 Sep 2026 01:00:39 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Wed, 12 Aug 2026 20:19:30 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a7cd552-15db38\"\r\nCache-Control: no-store\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1432376,"size_decoded":509749,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"eef2109dcff09f90e1aefc2bcd08304e","sha1":"e0de129450bfa7997cf08caf057bf97758390096","sha256":"294b953932f12951dafccfa70e8e6b4c1911ce9c495417dbc0eb00b6ea53ff7c","sha512":"a1bdd48862f31f14039b1d6952cdce27e3bddfec467fd61517e68de6d5a637d95a5c816ed1a7e999a3685fcc4754dae56f71e251db460de3d5d5e215336bafb0","ssdeep":"12288:rGO9df+b6U3QvXsVos+L4567jO6j/xcpMJd+JFjB/iCO4RgsbEOqgdCM5Fk6sA/s:lsHJMhyt6","tlshash":"b1252f7023c0aa1b205f1be3bf15bbe5f529797d36762487e0547d54a6ba803c7a0eb0","first_seen":"2026-09-05T00:54:49.358553Z","last_seen":"2026-09-05T01:01:21.745703Z","times_seen":2,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tronifyltd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tronifyltd.com/","date":"2026-09-05T01:00:39.885Z","timestamp":1788570039885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tronifyltd.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 10:19:45 GMT\r\nexpires: Sat, 04 Sep 2027 10:19:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nage: 52854\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":32920,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-09-13T13:13:30.351112Z","times_seen":31487,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tronifyltd.com/","fqdn":"tronifyltd.com","domain":"tronifyltd.com","tld":"com"},"ip":{"addr":"192.162.199.194","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T01:00:38.857Z","timestamp":1788570038857,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tronifyltd.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 23:04:08 GMT","end":"Wed, 07 Oct 2026 23:04:07 GMT"},"fingerprint":{"sha1":"B7:DF:07:14:7D:5A:E2:B1:B6:E5:7E:68:6F:2D:43:9C:95:94:11:2F","sha256":"7E:F1:4A:73:59:90:86:92:04:13:E6:73:8E:FB:3B:88:DF:3D:EB:00:19:50:47:69:9E:2A:00:22:4A:D9:9C:43"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tronifyltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 05 Sep 2026 01:00:39 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 04 Sep 2026 13:24:25 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a9ac689-5b30\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":23344,"size_decoded":8307,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (458), with CRLF line terminators","md5":"ecca1497c04d40cd28699d472dec8be5","sha1":"c0e26a300e5d4c1d3a07bb5f93d72024ed00825d","sha256":"b08f4b653ef18ff556a6d11890ce7793ef0c99cec70eb272f64a43e1e659a749","sha512":"d11b621c39767f676e3e9c6c647ac79fa63cbcf1560295fff65fd95aba1b75f93222f5d74e85f34f45f19eff5108e741badd014e9597bc38de3c914762decafb","ssdeep":"384:Xi4I+J75RjnxlhLr6FrBAIINeM/sXzcuqc17LRF:Xi4I+xxuAIINeKuXLL","tlshash":"61a2e97265407036f437e9e263e457aff8a4d012dd075350b2fc82a68bd2de69b23a4d","first_seen":"2026-09-05T00:54:49.360955Z","last_seen":"2026-09-05T01:01:21.748566Z","times_seen":2,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":238,"connect":29,"send":0,"wait":31,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tronifyltd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tronifyltd.com/nav.js?v=header-static-20260620","fqdn":"tronifyltd.com","domain":"tronifyltd.com","tld":"com"},"ip":{"addr":"192.162.199.194","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tronifyltd.com/","date":"2026-09-05T01:00:39.397Z","timestamp":1788570039397,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tronifyltd.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 23:04:08 GMT","end":"Wed, 07 Oct 2026 23:04:07 GMT"},"fingerprint":{"sha1":"B7:DF:07:14:7D:5A:E2:B1:B6:E5:7E:68:6F:2D:43:9C:95:94:11:2F","sha256":"7E:F1:4A:73:59:90:86:92:04:13:E6:73:8E:FB:3B:88:DF:3D:EB:00:19:50:47:69:9E:2A:00:22:4A:D9:9C:43"}}},"request":{"raw":"GET /nav.js?v=header-static-20260620 HTTP/1.1\r\nHost: tronifyltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tronifyltd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 05 Sep 2026 01:00:39 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Wed, 12 Aug 2026 17:24:36 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a7cac54-29786\"\r\nCache-Control: no-store\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":169862,"size_decoded":56733,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9c0d89f49feec1d9df0d4df1c2ae4d42","sha1":"9b8c8003fe0279ad67bc22f3b6b35b342f84e3b3","sha256":"f8bd207dbd816de0f239a5f82eb1132b455d05e6392dd2976c2aa39002823610","sha512":"8fadcb10f46d5831b17f37b012a9e3437a9de7955118a70f8805b72e06bc5020bb26e1ba0de6293bbef788bd216e2baf28b2de2c33910ae310e50c60c9751cdf","ssdeep":"3072:WJgrxCE05QKbXKE1J/T4ND5u2T9nkYP+pgAf7roTw71i/qlH19+u8oa9Wkjrq3tF:Kgrxt8QKLR1mu2T1kYP+pWTw7y6yjVuh","tlshash":"99f3b094f3c4e903138e4fa3bb1a75e8ee662c5a7484384781547ee95cfa167dea0c70","first_seen":"2026-09-05T00:54:49.35555Z","last_seen":"2026-09-05T01:01:21.750963Z","times_seen":2,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":40,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-09-05","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"tronifyltd.com/nav.js?v=header-static-20260620","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tronifyltd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tronifyltd.com/","date":"2026-09-05T01:00:39.802Z","timestamp":1788570039802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tronifyltd.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 10:19:45 GMT\r\nexpires: Sat, 04 Sep 2027 10:19:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nage: 52854\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":32920,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-09-13T13:13:30.351112Z","times_seen":31487,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":29,"dns":1,"connect":0,"send":0,"wait":22,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tronifyltd.com/","date":"2026-09-05T01:00:39.804Z","timestamp":1788570039804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tronifyltd.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 10:19:45 GMT\r\nexpires: Sat, 04 Sep 2027 10:19:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nage: 52854\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":32920,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-09-13T13:13:30.351112Z","times_seen":31487,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":29,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tronifyltd.com/files/adapter-script.js?v=2","fqdn":"tronifyltd.com","domain":"tronifyltd.com","tld":"com"},"ip":{"addr":"192.162.199.194","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tronifyltd.com/","date":"2026-09-05T01:00:39.820Z","timestamp":1788570039820,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tronifyltd.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 23:04:08 GMT","end":"Wed, 07 Oct 2026 23:04:07 GMT"},"fingerprint":{"sha1":"B7:DF:07:14:7D:5A:E2:B1:B6:E5:7E:68:6F:2D:43:9C:95:94:11:2F","sha256":"7E:F1:4A:73:59:90:86:92:04:13:E6:73:8E:FB:3B:88:DF:3D:EB:00:19:50:47:69:9E:2A:00:22:4A:D9:9C:43"}}},"request":{"raw":"GET /files/adapter-script.js?v=2 HTTP/1.1\r\nHost: tronifyltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tronifyltd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 05 Sep 2026 01:00:39 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Wed, 12 Aug 2026 20:19:30 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a7cd552-1c3b8f\"\r\nCache-Control: no-store\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1850255,"size_decoded":588648,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (29339)","md5":"ae4e183d9616f57c75b4503514cb4426","sha1":"d45a5312388734caab51046436961955a28c3db8","sha256":"0c7f01566d7dd0a0f46a40cc1ab5e21e64f5fb30d2c9c92bbbfee46a34b6e4a1","sha512":"5ec12bbce44c216f6581c436f8f85cb02ed2725ffef094c831f05c0f250d6e03775b2f1f811273851ac80cc1c9198cd83bf233f7c1c4dd4534a00c57c7a93e26","ssdeep":"24576:0NHbOonAu+Tjtn/G/9B9wULRK2pypPzFUcf9qD:0NHbOonAu+Tjtn/G/9B9wULRxpyp7FUP","tlshash":"f9257c9073a1b076439f51ad947a1101f338a898541d802cfbec99ebbb98cc9c5bbf75","first_seen":"2026-09-05T00:54:49.357333Z","last_seen":"2026-09-05T01:01:21.752792Z","times_seen":2,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tronifyltd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tronifyltd.com/favicon-180.png","fqdn":"tronifyltd.com","domain":"tronifyltd.com","tld":"com"},"ip":{"addr":"192.162.199.194","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tronifyltd.com/","date":"2026-09-05T01:00:40.008Z","timestamp":1788570040008,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tronifyltd.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 23:04:08 GMT","end":"Wed, 07 Oct 2026 23:04:07 GMT"},"fingerprint":{"sha1":"B7:DF:07:14:7D:5A:E2:B1:B6:E5:7E:68:6F:2D:43:9C:95:94:11:2F","sha256":"7E:F1:4A:73:59:90:86:92:04:13:E6:73:8E:FB:3B:88:DF:3D:EB:00:19:50:47:69:9E:2A:00:22:4A:D9:9C:43"}}},"request":{"raw":"GET /favicon-180.png HTTP/1.1\r\nHost: tronifyltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tronifyltd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 05 Sep 2026 01:00:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 3448\r\nConnection: keep-alive\r\nLast-Modified: Tue, 23 Jun 2026 01:07:34 GMT\r\nETag: \"6a39dc56-d78\"\r\nCache-Control: public, max-age=604800\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3448,"size_decoded":3735,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"1abcf691fd20e5b7887af1f9dfb4aa4d","sha1":"535a24a42c371352df7bc08d6185421517d32b84","sha256":"c83546ac0f25308a07eb62a29e39f9aaefd9c3d92f773ad0e6c016d62822c68c","sha512":"d889c47fd166018ca3c75b242f584d463ddda824d1977c642e0fc9f1c21e71bba36514e717aaea0401f1c6396ab0e2bffaf3bd21f75078d9efca06d6d34e484f","ssdeep":"","tlshash":"b9614c04eae67639c8dba8ff3106beddd521b30c455f4f4a4031759e114bde270a6d4a","first_seen":"2026-09-05T00:54:49.354423Z","last_seen":"2026-09-05T01:01:21.754188Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tronifyltd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tronifyltd.com/favicon.svg","fqdn":"tronifyltd.com","domain":"tronifyltd.com","tld":"com"},"ip":{"addr":"192.162.199.194","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tronifyltd.com/","date":"2026-09-05T01:00:40.010Z","timestamp":1788570040010,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tronifyltd.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 23:04:08 GMT","end":"Wed, 07 Oct 2026 23:04:07 GMT"},"fingerprint":{"sha1":"B7:DF:07:14:7D:5A:E2:B1:B6:E5:7E:68:6F:2D:43:9C:95:94:11:2F","sha256":"7E:F1:4A:73:59:90:86:92:04:13:E6:73:8E:FB:3B:88:DF:3D:EB:00:19:50:47:69:9E:2A:00:22:4A:D9:9C:43"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: tronifyltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tronifyltd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 05 Sep 2026 01:00:40 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 240\r\nConnection: keep-alive\r\nLast-Modified: Fri, 10 Jul 2026 01:45:30 GMT\r\nETag: \"6a504eba-f0\"\r\nCache-Control: public, max-age=604800\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":240,"size_decoded":529,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d7a05b0f6b54c7d02e76aa219673582e","sha1":"ef6049950734522f2e7faffbdf037e4b8bdb28c2","sha256":"80870421c8ddbe5fac7d951f0c4e01d9d171ff6bfd0ec954fd29a9199415868d","sha512":"e36c4650a734f68bd4e3b8fb7f43b54e764220948125a3975569793a10cd39509457c074d94e4c0bcdd5f883f1e45a281601afcd0dc6f0d95e02a4622da041ac","ssdeep":"","tlshash":"dbd09770c4acd719c20c0e19321a341726de66cc5d9a4c2af6e00426e0868936a4c36c","first_seen":"2026-09-05T00:54:49.359529Z","last_seen":"2026-09-05T01:01:21.756856Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tronifyltd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}