{"report_id":"91a81631-324b-474e-adf9-8c6daeb227e8","version":0,"status":"done","tags":["suspicious"],"date":"2026-08-13T18:26:23Z","url":{"schema":"http","addr":"tronify.cam/","fqdn":"tronify.cam","domain":"tronify.cam","tld":"cam"},"ip":{"addr":"138.226.236.121","port":0,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"final":{"url":{"schema":"https","addr":"tronify.cam/","fqdn":"tronify.cam","domain":"tronify.cam","tld":"cam"},"title":"TRON Energy Hub","dom":{"size":45264,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14647)","md5":"bc79ce91edb964891e9c37136c88eee4","sha1":"21112441ac81f3e552dd2647f450d634a1d4d8bb","sha256":"5ba2df16f49a67382a140327ef8e0f222f61f91a4241101a06fc0c2c92979212","sha512":"4019ffd0b4874222955f128c9e170924878677b3ad4f5539b9eeec29209a2ede8846cb46fa2923a3c08b02445ae9450656beebb88e95f8b23b571f6782ebcaf3","ssdeep":"768:UysnB7cxksc64Jysq7vFlaB7Adv+Ka/70BI9v8:HXx/c64Jysq7v5aDGI9U","tlshash":"f0131b50794422395e2b5239abcd631ca03ab007ee8784b1b14d4199dfc7ff926f6bd8","dom_hash":"domhash181f2acded9b8a259fc05ffce65c04f7","first_seen":"2026-08-13T18:26:30.256377Z","last_seen":"2026-08-13T18:26:30.256377Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tronify.cam/","fqdn":"tronify.cam","domain":"tronify.cam","tld":"cam"},"ip":{"addr":"138.226.236.121","port":0,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-17T18:26:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-13","alert":"Detects file containing Telegram Bot API","trigger":"tronify.cam/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"tronify.cam","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"tronify.cam","ip":{"addr":"138.226.236.121","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"domain_registered":"2026-07-14","domain_rank":0,"first_seen":"2026-08-13T18:26:26.60021Z","last_seen":"2026-08-13T18:26:26.60021Z","alert_count":11,"request_count":9,"received_data":2472307,"sent_data":4141,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-09T23:02:50.69879Z","alert_count":0,"request_count":1,"received_data":56887,"sent_data":541,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"tronify.cam/","fqdn":"tronify.cam","domain":"tronify.cam","tld":"cam"},"ip":{"addr":"138.226.236.121","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"b41b3b895dc75142fc43342ceee99abe","sha1":"fda3c2a8e87f3485510c0bd78fa1159de7ebd0c0","sha256":"92c003729c7177b0a4ae001e9aa61800d6f13a9f7421f3b0188bd491f5822455","sha512":"572e10b7b9903248f11c54c10bfa66ef4d7238cc28229c7602e0330962c1fff1549718cf62596952e8c245a59a3fe95153168b009d4aeb8f1e2af3bee55c1d00","ssdeep":"192:h17Drii47aLzhYKH5KSNqyPZtuAyPnuQIqQCGKQ9Gq/ZN/gZY/63oyS6DfxNUFBK:h17/7f8rPNI913396Yi","tlshash":"5572b6a53ec372455b2b722d4b9f7008603fa58b994dcda1b88dc3921f991b8c1b1bdc","size":16154,"data":"","first_seen":"2026-08-13T18:26:30.290664Z","last_seen":"2026-08-13T18:26:30.290664Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-13","alert":"Detects file containing Telegram Bot API","trigger":"tronify.cam/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"tronify.cam/assets/index-RykdrQzJ.js?v=33","fqdn":"tronify.cam","domain":"tronify.cam","tld":"cam"},"ip":{"addr":"138.226.236.121","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"36ec20a846779f802073c62dc91ddfad","sha1":"0a1c6202de3212100c03dbcd8c8dd7ecdd13fe34","sha256":"752d4f1087bb15f68c6db230ca940f39657442b97b82ab3de977da62c50a9309","sha512":"3369dd7d193b3fb8b69c6eb5b2567de9880cb2c8096ff035549330504795732f7b282ef568c26278d889ac7c4e3fb836207de8e70e79953c3ebf28bea73b00fa","ssdeep":"6144:YC/ChagvAsYoNiOn9D5mT7RPbtgl6ae8XvHeePdLT3euIsE:h/D4lYeiOn8PBgl6aeMvHeePd/0","tlshash":"25d44ba6f2419478a2a39de498bf911a70393e58f02fc0a8b17d40d43acf62674f7775","size":603546,"data":"","first_seen":"2026-08-13T18:26:30.275151Z","last_seen":"2026-08-13T18:26:30.275151Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tronify.cam/assets/react-CfIV4G7G.js","fqdn":"tronify.cam","domain":"tronify.cam","tld":"cam"},"ip":{"addr":"138.226.236.121","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"importedModule","is_inline":false,"md5":"407cdb8c98c2c1e537c86ae4e5fac695","sha1":"52dae0f662422e1bee892df2ee20f156472a4306","sha256":"bdf8574b42f5d7577604aca8edd9b7454a45eafa8b64e73d0bd54dc35675b50e","sha512":"5ee6c99beb9bb1e63fa782a8cff48843b8763615826d1b1309b1eab1398470461d9f1b2d1b773fe89be123e3b900a5f69a9e32af0928a9b85728f540d370395b","ssdeep":"6144:Pz3cMTcOrSD6y+1W1TlHfofL5M4duV1uCwp5By4M8:lJQFmti8","tlshash":"84744aec31e9b1619be312b5606f150bb3781826684cc460e556e8ed3afd41d827bfec","size":345557,"data":"","first_seen":"2026-06-22T09:55:32.824907Z","last_seen":"2026-08-13T18:26:30.279556Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tronify.cam/assets/walletconnect-CU_wZpiN.js","fqdn":"tronify.cam","domain":"tronify.cam","tld":"cam"},"ip":{"addr":"138.226.236.121","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"importedModule","is_inline":false,"md5":"61c4797ace160028ef58fa0c101537b1","sha1":"f64f7d5f316240f027f2a92d72acd1fdcd6db0d7","sha256":"253037633aed097bdba2642e565642f3e51c790f9e4cd03a0aa2adf19ffa0174","sha512":"70d4df143c79f165b6c52fdfb67b80864a0586b2774e6f74655cfb0394558f4c03613c8e6fbc923a7009726105ba2c9228d18923b3ad950c3ae77fd922fd3ad9","ssdeep":"12288:EuRGZevc9J9NyQU6GIc47iM4nJyOnQgPBUsoy:6Uvc9YQU6FiM4nJyOdBUJy","tlshash":"d6b44b8073a5a07243da55e994371101f239d8643049846cfbacedff7da588a9a7ff38","size":511033,"data":"","first_seen":"2026-06-22T09:55:32.815108Z","last_seen":"2026-08-13T18:26:30.282017Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tronify.cam/assets/tronweb-BMrMWCTz.js","fqdn":"tronify.cam","domain":"tronify.cam","tld":"cam"},"ip":{"addr":"138.226.236.121","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"importedModule","is_inline":false,"md5":"16fe8077013b122ee87e30fc5a49f88e","sha1":"c0e94bcd3bcb0b4c6c2d31d11eb20b2a04007a43","sha256":"1ad2eafce9f0280ed66a058e0d67058a8a8b5db25fee25051da9675863785086","sha512":"4a3e7fe0ad070c33e1067d2efcc0fe4d5ab568d5ccc69e65f40870c23061fc1e2c31b8e47b8fef4b5b5d7a69d1ebb206c3f9720c2cb074dd0908a7c9954965c9","ssdeep":"24576:GIyKlLMMT7SX45J3TQ07KpQnUzbBCIsHGLtfFpAw9M4EFBaKenDwwdTIa:GIyKlLTT7SX45J3TQ07K2nUzbBCIoGLj","tlshash":"b415f88832c6f66643a110e01a3b540eb23d6b5cd01ca696f38cd4e77ef95c6466bf78","size":908754,"data":"","first_seen":"2026-06-22T09:55:32.816778Z","last_seen":"2026-08-13T18:26:30.285628Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"info","text":"Download the React DevTools for a better development experience: https://reactjs.org/link/react-devtools","filename":"https://tronify.cam/assets/react-CfIV4G7G.js","line_number":180,"column_number":9154},{"level":"warn","text":"⚠️ React Router Future Flag Warning: React Router will begin wrapping state updates in `React.startTransition` in v7. You can use the `v7_startTransition` future flag to opt-in early. For more information, see https://reactrouter.com/v6/upgrading/future#v7_starttransition.","filename":"https://tronify.cam/assets/react-CfIV4G7G.js","line_number":201,"column_number":6658},{"level":"warn","text":"⚠️ React Router Future Flag Warning: Relative route resolution within Splat routes is changing in v7. You can use the `v7_relativeSplatPath` future flag to opt-in early. For more information, see https://reactrouter.com/v6/upgrading/future#v7_relativesplatpath.","filename":"https://tronify.cam/assets/react-CfIV4G7G.js","line_number":201,"column_number":6658}]},"http":[{"url":{"schema":"https","addr":"tronify.cam/style.css","fqdn":"tronify.cam","domain":"tronify.cam","tld":"cam"},"ip":{"addr":"138.226.236.121","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tronify.cam/","date":"2026-08-13T18:25:42.026Z","timestamp":1786645542026,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tronify.cam","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 00:06:29 GMT","end":"Wed, 11 Nov 2026 00:06:28 GMT"},"fingerprint":{"sha1":"87:1B:46:3C:F3:C5:35:C4:9C:67:8D:E3:B5:EB:54:53:40:00:6A:52","sha256":"77:E4:B4:F0:98:C6:7E:59:3F:93:B2:F9:38:85:F3:D5:CC:AA:C8:F3:04:42:F6:5A:0D:DD:B1:31:33:77:D5:72"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: tronify.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tronify.cam/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 13 Aug 2026 18:25:42 GMT\r\nContent-Type: text/css\r\nContent-Length: 2807\r\nLast-Modified: Thu, 13 Aug 2026 00:55:34 GMT\r\nConnection: keep-alive\r\nETag: \"6a7d1606-af7\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2807,"size_decoded":3054,"mime_type":"text/css","magic":"ASCII text","md5":"3632d8590c2df4903408a12f897899f9","sha1":"5ceb684fc3632719dc5234b9c8f34a9ef455d3ef","sha256":"9364e66f7033db3ef73afc78e39922e5747f91acbf23fef260529cb8116b5495","sha512":"247439e9815103a28b6a9c4ab3ba1114b1e658a1f33596eb1879388fd33911d67836ded048bbdc9c786b9d3fd196692a6a02b45d4e1be6f10fe73755b273faed","ssdeep":"","tlshash":"5951fd9a62b71046b8226c6d6beb5b4a221dd003e04dce7e7fdc126ccfc51a49dd0b4e","first_seen":"2026-03-28T01:57:01.503537Z","last_seen":"2026-08-13T18:26:30.259837Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":20,"send":0,"wait":20,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"tronify.cam","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tronify.cam/assets/index-CqHIp3QV.js","fqdn":"tronify.cam","domain":"tronify.cam","tld":"cam"},"ip":{"addr":"138.226.236.121","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tronify.cam/","date":"2026-08-13T18:25:42.688Z","timestamp":1786645542688,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tronify.cam","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 00:06:29 GMT","end":"Wed, 11 Nov 2026 00:06:28 GMT"},"fingerprint":{"sha1":"87:1B:46:3C:F3:C5:35:C4:9C:67:8D:E3:B5:EB:54:53:40:00:6A:52","sha256":"77:E4:B4:F0:98:C6:7E:59:3F:93:B2:F9:38:85:F3:D5:CC:AA:C8:F3:04:42:F6:5A:0D:DD:B1:31:33:77:D5:72"}}},"request":{"raw":"GET /assets/index-CqHIp3QV.js HTTP/1.1\r\nHost: tronify.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tronify.cam/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 13 Aug 2026 18:25:42 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 13 Aug 2026 01:13:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a7d1a2b-4303\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T21:51:57.324612Z","times_seen":17876576,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"tronify.cam","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/geist@1.2.2/dist/fonts/geist-sans/Geist-Variable.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tronify.cam/","date":"2026-08-13T18:25:42.764Z","timestamp":1786645542764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/geist@1.2.2/dist/fonts/geist-sans/Geist-Variable.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tronify.cam\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tronify.cam/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 13 Aug 2026 18:25:42 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 55812\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.2.2\r\nx-jsd-version-type: version\r\netag: W/\"da04-ejMigsWsNG3uSYFObPlbHI23xjI\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220183-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 580084\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2BjEuPUFMz3hMI9Oxm%2FFhQHGshpG0dT5VAgFan2JxOrXJYPSQ5I6%2BdnWM1OiMu4MR8wTJkgJS6ISri19e5OHcEw%2FSjBsFz9%2BaWC%2BqdjFnArCh4%2FSBuWAR88dg%2F638DgA2Ps%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a2a9c3925feeb512-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55812,"size_decoded":56887,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 55812, version 1.0","md5":"313812e61a1aacffa37a0e33e321d6b2","sha1":"7a332282c5ac346dee49814e6cf95b1c8db7c632","sha256":"4bc12c58f1d3a72a3aa6de33a1f3015e6fc14c0a92d8390c524f15d84023744b","sha512":"29e7f2339db2dbc62a0073f0ad53d28909e805e951cfaeb79714abc5a49f8852b0360bbfe70bf341945daa2594352899aef35686306a6fea0716271bdded4893","ssdeep":"1536:4QVs9IN8xIksHu9rkEd8bWATmRQ6kI11KurooB4:4p76+dWWAyaTI1FoK4","tlshash":"5f4302fb70b96ad2451ea490e8271d2f0e0d4c92bf1873a275a47510dad64eed313c2f","first_seen":"2024-01-30T20:30:43Z","last_seen":"2026-08-13T18:26:30.264411Z","times_seen":175,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":9,"receive":2,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tronify.cam/","fqdn":"tronify.cam","domain":"tronify.cam","tld":"cam"},"ip":{"addr":"138.226.236.121","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-13T18:25:41.416Z","timestamp":1786645541416,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tronify.cam","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 00:06:29 GMT","end":"Wed, 11 Nov 2026 00:06:28 GMT"},"fingerprint":{"sha1":"87:1B:46:3C:F3:C5:35:C4:9C:67:8D:E3:B5:EB:54:53:40:00:6A:52","sha256":"77:E4:B4:F0:98:C6:7E:59:3F:93:B2:F9:38:85:F3:D5:CC:AA:C8:F3:04:42:F6:5A:0D:DD:B1:31:33:77:D5:72"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tronify.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 13 Aug 2026 18:25:41 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 13 Aug 2026 01:13:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a7d1a2b-4303\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":17155,"size_decoded":5683,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"b8b784714b47cde4b7c96d16a05f3cb8","sha1":"f84b62c1970f1ced9a20129f4fefb2ed174988e9","sha256":"181251d7f85265f3008962309dd117c18391dd5a1764410f04e7188f434a2eba","sha512":"e4411efaa346cbc4f723d8c848665d17478678582384eab28dc48f181d2372e57e1d137f82baa55627532412de056d1d7b8d79ab2f8e00607cfa093e04bd32a9","ssdeep":"192:dTiz17Drii47aLzhYKH5KSNqyPZtuAyPnuQIqQCGKQ9Gq/ZN/gZY/63oyS6DfxNj:dmz17/7f8rPNI913396Y8","tlshash":"0272b6a53ec3a2055b2b622d4b9f7108603fa58b954dcda0b88dc3965f991b8c1f1fdc","first_seen":"2026-08-13T18:26:30.268701Z","last_seen":"2026-08-13T18:26:30.268701Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":91,"connect":35,"send":0,"wait":35,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-13","alert":"Detects file containing Telegram Bot API","trigger":"tronify.cam/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"tronify.cam","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"tronify.cam/assets/index-DqA4YqcV.css","fqdn":"tronify.cam","domain":"tronify.cam","tld":"cam"},"ip":{"addr":"138.226.236.121","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tronify.cam/","date":"2026-08-13T18:25:42.024Z","timestamp":1786645542024,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tronify.cam","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 00:06:29 GMT","end":"Wed, 11 Nov 2026 00:06:28 GMT"},"fingerprint":{"sha1":"87:1B:46:3C:F3:C5:35:C4:9C:67:8D:E3:B5:EB:54:53:40:00:6A:52","sha256":"77:E4:B4:F0:98:C6:7E:59:3F:93:B2:F9:38:85:F3:D5:CC:AA:C8:F3:04:42:F6:5A:0D:DD:B1:31:33:77:D5:72"}}},"request":{"raw":"GET /assets/index-DqA4YqcV.css HTTP/1.1\r\nHost: tronify.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tronify.cam/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 13 Aug 2026 18:25:42 GMT\r\nContent-Type: text/css\r\nContent-Length: 81134\r\nLast-Modified: Thu, 13 Aug 2026 00:55:30 GMT\r\nConnection: keep-alive\r\nETag: \"6a7d1602-13cee\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81134,"size_decoded":81384,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0ad104f8ce41eb0416cd2d33ed064ee0","sha1":"489057d41188bab32a62155f15df46bf7c531387","sha256":"6084b2c5aa64cda1c7861a48a193c06ef957536ad9070e3d7038db5d24670c5f","sha512":"58e65ac0288c244f536528e6fe70d254a40b0fc2c720907bb46778ce2bc86acd9dd98099f0154f27307d941dd842c340f9d029181db9ea533eecd92aa8c0151f","ssdeep":"1536:mtcmrOa78htMYp6F1SYbkj6P8U0l4q5G1V0378VQZkt5FyCWn5Bh:mtcmrOa78htMYp6F1hkW8U0j5G1V037V","tlshash":"0183841eb919613e3c2791e8c3dcb9eca11af0c0de3b05a6be8b41216ad37f61977514","first_seen":"2026-08-13T18:26:30.271974Z","last_seen":"2026-08-13T18:26:30.271974Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"tronify.cam","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tronify.cam/assets/index-RykdrQzJ.js?v=33","fqdn":"tronify.cam","domain":"tronify.cam","tld":"cam"},"ip":{"addr":"138.226.236.121","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tronify.cam/","date":"2026-08-13T18:25:42.032Z","timestamp":1786645542032,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tronify.cam","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 00:06:29 GMT","end":"Wed, 11 Nov 2026 00:06:28 GMT"},"fingerprint":{"sha1":"87:1B:46:3C:F3:C5:35:C4:9C:67:8D:E3:B5:EB:54:53:40:00:6A:52","sha256":"77:E4:B4:F0:98:C6:7E:59:3F:93:B2:F9:38:85:F3:D5:CC:AA:C8:F3:04:42:F6:5A:0D:DD:B1:31:33:77:D5:72"}}},"request":{"raw":"GET /assets/index-RykdrQzJ.js?v=33 HTTP/1.1\r\nHost: tronify.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tronify.cam/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 13 Aug 2026 18:25:42 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 603546\r\nLast-Modified: Thu, 13 Aug 2026 00:55:30 GMT\r\nConnection: keep-alive\r\nETag: \"6a7d1602-9359a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":603546,"size_decoded":603811,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (27924)","md5":"36ec20a846779f802073c62dc91ddfad","sha1":"0a1c6202de3212100c03dbcd8c8dd7ecdd13fe34","sha256":"752d4f1087bb15f68c6db230ca940f39657442b97b82ab3de977da62c50a9309","sha512":"3369dd7d193b3fb8b69c6eb5b2567de9880cb2c8096ff035549330504795732f7b282ef568c26278d889ac7c4e3fb836207de8e70e79953c3ebf28bea73b00fa","ssdeep":"6144:YC/ChagvAsYoNiOn9D5mT7RPbtgl6ae8XvHeePdLT3euIsE:h/D4lYeiOn8PBgl6aeMvHeePd/0","tlshash":"25d44ba6f2419478a2a39de498bf911a70393e58f02fc0a8b17d40d43acf62674f7775","first_seen":"2026-08-13T18:26:30.275151Z","last_seen":"2026-08-13T18:26:30.275151Z","times_seen":1,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":20,"send":0,"wait":40,"receive":83,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"tronify.cam","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tronify.cam/assets/react-CfIV4G7G.js","fqdn":"tronify.cam","domain":"tronify.cam","tld":"cam"},"ip":{"addr":"138.226.236.121","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tronify.cam/","date":"2026-08-13T18:25:42.314Z","timestamp":1786645542314,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tronify.cam","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 00:06:29 GMT","end":"Wed, 11 Nov 2026 00:06:28 GMT"},"fingerprint":{"sha1":"87:1B:46:3C:F3:C5:35:C4:9C:67:8D:E3:B5:EB:54:53:40:00:6A:52","sha256":"77:E4:B4:F0:98:C6:7E:59:3F:93:B2:F9:38:85:F3:D5:CC:AA:C8:F3:04:42:F6:5A:0D:DD:B1:31:33:77:D5:72"}}},"request":{"raw":"GET /assets/react-CfIV4G7G.js HTTP/1.1\r\nHost: tronify.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tronify.cam/assets/index-RykdrQzJ.js?v=33\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 13 Aug 2026 18:25:42 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 345557\r\nLast-Modified: Thu, 13 Aug 2026 00:55:32 GMT\r\nConnection: keep-alive\r\nETag: \"6a7d1604-545d5\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":345557,"size_decoded":345822,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12008)","md5":"407cdb8c98c2c1e537c86ae4e5fac695","sha1":"52dae0f662422e1bee892df2ee20f156472a4306","sha256":"bdf8574b42f5d7577604aca8edd9b7454a45eafa8b64e73d0bd54dc35675b50e","sha512":"5ee6c99beb9bb1e63fa782a8cff48843b8763615826d1b1309b1eab1398470461d9f1b2d1b773fe89be123e3b900a5f69a9e32af0928a9b85728f540d370395b","ssdeep":"6144:Pz3cMTcOrSD6y+1W1TlHfofL5M4duV1uCwp5By4M8:lJQFmti8","tlshash":"84744aec31e9b1619be312b5606f150bb3781826684cc460e556e8ed3afd41d827bfec","first_seen":"2026-06-22T09:55:32.824907Z","last_seen":"2026-08-13T18:26:30.279556Z","times_seen":11,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"tronify.cam","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tronify.cam/assets/walletconnect-CU_wZpiN.js","fqdn":"tronify.cam","domain":"tronify.cam","tld":"cam"},"ip":{"addr":"138.226.236.121","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tronify.cam/","date":"2026-08-13T18:25:42.316Z","timestamp":1786645542316,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tronify.cam","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 00:06:29 GMT","end":"Wed, 11 Nov 2026 00:06:28 GMT"},"fingerprint":{"sha1":"87:1B:46:3C:F3:C5:35:C4:9C:67:8D:E3:B5:EB:54:53:40:00:6A:52","sha256":"77:E4:B4:F0:98:C6:7E:59:3F:93:B2:F9:38:85:F3:D5:CC:AA:C8:F3:04:42:F6:5A:0D:DD:B1:31:33:77:D5:72"}}},"request":{"raw":"GET /assets/walletconnect-CU_wZpiN.js HTTP/1.1\r\nHost: tronify.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tronify.cam/assets/index-RykdrQzJ.js?v=33\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 13 Aug 2026 18:25:42 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 511033\r\nLast-Modified: Thu, 13 Aug 2026 00:55:32 GMT\r\nConnection: keep-alive\r\nETag: \"6a7d1604-7cc39\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":511033,"size_decoded":511298,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42418)","md5":"61c4797ace160028ef58fa0c101537b1","sha1":"f64f7d5f316240f027f2a92d72acd1fdcd6db0d7","sha256":"253037633aed097bdba2642e565642f3e51c790f9e4cd03a0aa2adf19ffa0174","sha512":"70d4df143c79f165b6c52fdfb67b80864a0586b2774e6f74655cfb0394558f4c03613c8e6fbc923a7009726105ba2c9228d18923b3ad950c3ae77fd922fd3ad9","ssdeep":"12288:EuRGZevc9J9NyQU6GIc47iM4nJyOnQgPBUsoy:6Uvc9YQU6FiM4nJyOdBUJy","tlshash":"d6b44b8073a5a07243da55e994371101f239d8643049846cfbacedff7da588a9a7ff38","first_seen":"2026-06-22T09:55:32.815108Z","last_seen":"2026-08-13T18:26:30.282017Z","times_seen":6,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"tronify.cam","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tronify.cam/assets/tronweb-BMrMWCTz.js","fqdn":"tronify.cam","domain":"tronify.cam","tld":"cam"},"ip":{"addr":"138.226.236.121","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tronify.cam/","date":"2026-08-13T18:25:42.319Z","timestamp":1786645542319,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tronify.cam","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 00:06:29 GMT","end":"Wed, 11 Nov 2026 00:06:28 GMT"},"fingerprint":{"sha1":"87:1B:46:3C:F3:C5:35:C4:9C:67:8D:E3:B5:EB:54:53:40:00:6A:52","sha256":"77:E4:B4:F0:98:C6:7E:59:3F:93:B2:F9:38:85:F3:D5:CC:AA:C8:F3:04:42:F6:5A:0D:DD:B1:31:33:77:D5:72"}}},"request":{"raw":"GET /assets/tronweb-BMrMWCTz.js HTTP/1.1\r\nHost: tronify.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tronify.cam/assets/index-RykdrQzJ.js?v=33\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 13 Aug 2026 18:25:42 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 908754\r\nLast-Modified: Thu, 13 Aug 2026 00:55:32 GMT\r\nConnection: keep-alive\r\nETag: \"6a7d1604-dddd2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":908754,"size_decoded":909019,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63303)","md5":"16fe8077013b122ee87e30fc5a49f88e","sha1":"c0e94bcd3bcb0b4c6c2d31d11eb20b2a04007a43","sha256":"1ad2eafce9f0280ed66a058e0d67058a8a8b5db25fee25051da9675863785086","sha512":"4a3e7fe0ad070c33e1067d2efcc0fe4d5ab568d5ccc69e65f40870c23061fc1e2c31b8e47b8fef4b5b5d7a69d1ebb206c3f9720c2cb074dd0908a7c9954965c9","ssdeep":"24576:GIyKlLMMT7SX45J3TQ07KpQnUzbBCIsHGLtfFpAw9M4EFBaKenDwwdTIa:GIyKlLTT7SX45J3TQ07K2nUzbBCIoGLj","tlshash":"b415f88832c6f66643a110e01a3b540eb23d6b5cd01ca696f38cd4e77ef95c6466bf78","first_seen":"2026-06-22T09:55:32.816778Z","last_seen":"2026-08-13T18:26:30.285628Z","times_seen":6,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"tronify.cam","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tronify.cam/favicon.ico","fqdn":"tronify.cam","domain":"tronify.cam","tld":"cam"},"ip":{"addr":"138.226.236.121","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tronify.cam/","date":"2026-08-13T18:25:42.719Z","timestamp":1786645542719,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tronify.cam","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 00:06:29 GMT","end":"Wed, 11 Nov 2026 00:06:28 GMT"},"fingerprint":{"sha1":"87:1B:46:3C:F3:C5:35:C4:9C:67:8D:E3:B5:EB:54:53:40:00:6A:52","sha256":"77:E4:B4:F0:98:C6:7E:59:3F:93:B2:F9:38:85:F3:D5:CC:AA:C8:F3:04:42:F6:5A:0D:DD:B1:31:33:77:D5:72"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: tronify.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tronify.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 13 Aug 2026 18:25:42 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 0\r\nLast-Modified: Thu, 13 Aug 2026 00:55:33 GMT\r\nConnection: keep-alive\r\nETag: \"6a7d1605-0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":246,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T21:51:57.324612Z","times_seen":17876576,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"tronify.cam","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}