{"report_id":"a7ef343c-aa47-45f0-9139-d3c77bd71c90","version":6,"status":"done","tags":[],"date":"2026-05-28T13:58:35Z","url":{"schema":"https","addr":"buytrx.bet","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":0,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"buytrx.bet/","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"title":"Buy TRX with USDT \u0026 TRON Energy Purchase | Fast, Secure, Reliable","dom":{"size":15121,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15106), with no line terminators","md5":"f08b985a2df1e888706ac58ed8d539f5","sha1":"678bf5270708514447afdb066ec52416790b2c72","sha256":"517602d0ed26a0d4107570056d8eada612ebfa89e35cee9c7c424b59e1cf30a6","sha512":"c0a6512501b684c5edc7be4fd421680c0ae7d3c620483509cea9fb48f53449ba01d728107beabdd210fdd2fe9e821c7e8405ec97988528063051c116a3d23c6c","ssdeep":"192:GuhmsxKTmKPCq73RjLE22B/y6qFy7oVm0kwtdcwiZhtXruZk1ZkXPf+:Gu0NTmKP1Ra/vzuK0mbbuZ0ZIe","tlshash":"d36283205596523b70034be0f8f1ef9ee19ac309d6330cedb3ed428a6bc1d9c5e9a655","dom_hash":"domhash39e4f082b34dd88649067ffde0e89801","first_seen":"2026-05-28T13:58:39.831607Z","last_seen":"2026-05-28T13:58:39.831607Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"buytrx.bet","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":0,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-02T13:58:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.binance.com","ip":{"addr":"3.164.243.88","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-04-01","domain_rank":543119,"first_seen":"2017-12-19T18:31:49Z","last_seen":"2026-05-24T12:45:56.992286Z","alert_count":0,"request_count":1,"received_data":939,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"buytrx.bet","ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-17T05:01:36.268568Z","last_seen":"2026-05-17T05:01:36.268568Z","alert_count":60,"request_count":30,"received_data":1205953,"sent_data":13506,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"buytrx.bet/_next/static/chunks/pages/_app-0ac105e6b1077c3050e76671.js","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f7ca9604e3a0f25b247989575714f9d","sha1":"091b1fae8c86e0f7ee3ae094ced0da9347fcecda","sha256":"cd03c88718d855f00837eee41b681457ceea1ae027adb525a71f8782f2a18922","sha512":"75c1afd9b3f49cf0daf5a2e240e073da8fa685366b49d504863ff5d842c694345ac5515fc745fa90d2b7513f6a9216466baf3d8d703c16510d0b116bec3ad3ca","ssdeep":"96:DAQN8cm72Fvn1fcdmUkWFsg6c7ZdbyBMRc6w5K5oE/exkB7FmVs0x4mEFSncQYlD:do8c8cfbyerwoD9S9EgnvvUrtJNIX6","tlshash":"7df1d855b3d132b486a3125473a77ae5b36f0cb003188838a3f4c99c29b0a5df966fdd","size":7649,"data":"","first_seen":"2026-05-28T13:58:39.851699Z","last_seen":"2026-05-28T13:58:39.851699Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/_next/static/chunks/pages/index-f464b3d9cb9a5cb3c1bc76dc.js","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"03055bcec90ab756327636054adca774","sha1":"57e6e2ca393f4c2662ef7b891379cd40704f331d","sha256":"15cefea3642d9eed9245f3d839fdad82e4d0a1cdeb60c3a3c009f12b200408a4","sha512":"896104119ab01c106dcc42cee9fdfdb49dd9d9b829a42993f9c9eb97f1f281e2cbc6f1228ea09f1061e5d9cdd6c1d0b0c6c0449969fb66e089bafe5f056c0595","ssdeep":"96:bAZqKTHVt9GC0DxR2ov0me20NmwhK/G/DVBRuQaBXAF6:U3RqdaXmwhRDVXuQalAF6","tlshash":"1591b5a236d2f81713594074803f5417b6a83d67185b74ecb365ccdef9a909c61b2f36","size":4625,"data":"","first_seen":"2026-03-26T00:27:24.881944Z","last_seen":"2026-08-08T07:27:47.142135Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/_next/static/chunks/main-4a97e5ec18b03f90833ccfe8.js","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f61cb8419b1150180e1eb9e634fef2f6","sha1":"3d5c38e98f8b15ecd524c4001ad54ade6a391be1","sha256":"ef6a08178c9f2e90859d810aace35adc5ecbb33055085d85646a3a68391e64f6","sha512":"574d98a98af0f80fa7de5c1f36bd980f979e04e3389ca3c98ea5b1b1f14342219aa27109a96f94eaa692e45d66f9d72524ab7ce60300de565252b64d19072000","ssdeep":"1536:j8KeQDlfYtA1uQIuF9/opa3dX4NQpsBrylVdBe6L2CN6:dVYtyrQodINiqylFe6L9N6","tlshash":"c8b3e9b676d1f8a203cb41d4843b0006f36a1dbe146f6045b3aadcd6b96499e90f3f79","size":110815,"data":"","first_seen":"2025-12-29T17:26:39.785793Z","last_seen":"2026-08-14T05:43:20.355446Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/_next/static/chunks/framework-41e181ac6bac92ba5637396a.js","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf0dbea2c1509e290fc7ddbdd9477a3b","sha1":"296721ce3728c51c7fac5fb35c971baf5fd92b7b","sha256":"4250d53f0bc756ece2ddd690a008add1d7fdc887528c671f4dfe8d916d7787b7","sha512":"a047bef4736a82a41c60baefb59fd2d52c8027b3fcd788e3311ce5fd000ef719a80f0698a86e180fbffa708e0f30520bf6648e3ef15f62cf16b4ce237bb2ced2","ssdeep":"1536:PYjv9NX6lMuubFHHsje9N6SAk1SCocnIEdRXQH:Qj3b536SJ1S8fvAH","tlshash":"b6d3f9e83996f6516ab311a700ef2803737d1a1b280c4960e215fd9e75b842bb17bfdd","size":139978,"data":"","first_seen":"2024-09-18T14:21:05Z","last_seen":"2026-08-18T04:33:20.411178Z","times_seen":2624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/_next/static/chunks/webpack-ae5cc8b1c367daa2.js","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c05eca5bb414d095981c98500c31c359","sha1":"30ad93e7c34b6aa2b16dfa7d1c746f0758734a3d","sha256":"28b96169627707807f154b8fa4fd2fb6f041feb9df03207786d0c8247e454735","sha512":"5325bc9b31c4bd1f65a7609ac6fc23d6d7251d8c3bc34d694305384ad73906f3d696471ef792cb9488d47e196837099539882368b80a45e3d0039c5a830f8e69","ssdeep":"","tlshash":"6a71f9de72a5f8a817576461483f6192f11a2472281ed570e70ac8f87c3869c8623fb8","size":3749,"data":"","first_seen":"2026-05-28T13:58:39.850483Z","last_seen":"2026-05-28T13:58:39.850483Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/_next/static/fJ2-7Hyk_7Ya9nA_t-IqO/_buildManifest.js","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"643acb9d4019134d67fab1259bdd55e1","sha1":"9923edf7170ad989ed90992ab7ed7680d8045278","sha256":"9fe562cf601e653fe82771e0036844bf88fdc6a7723d9808f1b2d4792ddadd3b","sha512":"d881353476d6fa7b053f43743f399d499a94fcc02be98468f95b6db7aefca3a204bebd4f6c8a69b2bd0f403b7f39c0f6726794e8a69216a1dfd2633f533e958b","ssdeep":"","tlshash":"c3f0a0934148f8034966cc4ab1265733bf98807a1e390a2b96be9b6941a01e68f56826","size":450,"data":"","first_seen":"2026-04-25T18:24:20.034459Z","last_seen":"2026-08-08T07:27:47.129417Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/_next/static/fJ2-7Hyk_7Ya9nA_t-IqO/_ssgManifest.js","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-08-18T06:30:04.911979Z","times_seen":253864,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/_next/static/chunks/909.384c73f070ddbe2c.js","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0378f49be5a26fb49e85843c2a36631b","sha1":"0ba61b9245c10ebccf83c34acb4c2629a719bf4a","sha256":"ddeee69de4d9a3e5f402db64f2082fb434a1869f4ffa737f2bcb98afb4747f28","sha512":"bf2ab6f53a50f906c670394cb77340f460bf389a820231faf8ad6ff912796cad4fce525543e45199adc03a10a06089f843ebd2b1c8de64f57d6a2469d11c7f47","ssdeep":"384:mRUICbAtEKmKDsxSgcKTmlFncOeVA4cRBkO2383KK584NjqM:mRUzA7hDCcK6lFncH1383d24Nb","tlshash":"63f2a64891556eacf4274a90bfef955cb12e5b44ca1e0cb8b3fc780266405ca7b4bfc5","size":34481,"data":"","first_seen":"2026-05-28T13:58:39.844217Z","last_seen":"2026-05-28T13:58:39.844217Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/_next/static/chunks/678.8b3a472beb783489.js","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e658bbe9c461b0886cd2afdcca454f23","sha1":"2f6f21a3d14f489c23eafce1c3cf4014aebf46d6","sha256":"e140e0ed25b96233fc9ae70e942e58e8be07a7e5231182371d5c39483467c3c4","sha512":"fc2beadadfa0b81de1a6446038bf029c6f49ea7faf0f0f549c0ed6f955bd5748b5bc612b6b0f6f1e1ddee43fc459db723960963f5b8bff3764809c47bf203d9c","ssdeep":"12288:2+j1kVKX5cqsiVinFGEFRvDAfFlClHQ3d0cyNLq:hncTlIyNLq","tlshash":"4dd46cc57725b433439a91ea846b1106f27cc8682c0d482cf7e8e8dfad959d861bbf35","size":605855,"data":"","first_seen":"2026-03-26T00:27:24.895708Z","last_seen":"2026-08-08T07:27:47.147811Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"buytrx.bet/img/WalletConnect.4226e90bf5dfc1eb9f86.png","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:10.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /img/WalletConnect.4226e90bf5dfc1eb9f86.png HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 5012\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-1394\"\r\nexpires: Thu, 04 Jun 2026 13:58:10 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5012,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 692, 8-bit colormap, non-interlaced","md5":"e4d5216b884d99bb09fc59c1e4bf9a67","sha1":"58d905084f7abe2b2e5c3e3fd59a29c24a7fb7b2","sha256":"0fe9c0181028aeb6a46f07ce131a3c912fec5c632cddfb13eb2e1ca39da9505f","sha512":"17f258b7b2063205f9105a7ce1251225afca63f2398f1bc7ca3e501c793333024e0762e428fda9608da1739e88ffc2bf89894295de59dbcf3816cd58072454b5","ssdeep":"96:XStJiGUbFMArS6lfHpn4TgSuTmaF/ipkbnXpejT9RxaPbKkxOz7LNIT:XStJiGUbFwSp1SuFiybn5ejTGbKl/BM","tlshash":"e2a15bd2a4ebac81cbd412751421dc52bd27c972c6c2c1a7eb3b982d09d6ea94c3a31c","first_seen":"2025-06-26T16:07:51.289575Z","last_seen":"2026-08-17T14:07:02.321589Z","times_seen":156,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/img/tronlink.5c1a70b4c40a234c0e78.png","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:10.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /img/tronlink.5c1a70b4c40a234c0e78.png HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 7110\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-1bc6\"\r\nexpires: Thu, 04 Jun 2026 13:58:10 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7110,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 93 x 93, 8-bit/color RGBA, non-interlaced","md5":"41d851008b4090fca47edb4af65821b5","sha1":"a85f4865794e504d274e9ab5d5e0d79829697246","sha256":"fb1612c3f4cbad017db9eb194a166f42b266e0927b619b879c0ac8714d204daf","sha512":"515e0b544ee25d6469df54f317612c6212f55152e0c9acca8b31740e483f5f0752e4fe85572116594f7abdb98761713d7c03e74d2038b1396a340c61964316d2","ssdeep":"96:7SHy5TwYKL2vD0bWgJP4x/S19U0/ssFtdcGPfssctmHMSVIET+pWsrujnsvaSEKM:OHuwYy+DlG6q1mQsac/H3phujE3477oy","tlshash":"65e1ae92f348b471769d2163efa3510890bcdcc887afca08a013ed2de88c13b854b772","first_seen":"2023-07-31T21:17:56Z","last_seen":"2026-08-17T14:07:02.304038Z","times_seen":186,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/_next/static/chunks/framework-41e181ac6bac92ba5637396a.js","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:08.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /_next/static/chunks/framework-41e181ac6bac92ba5637396a.js HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:08 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 139978\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-222ca\"\r\nexpires: Sat, 27 Jun 2026 13:58:08 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":139978,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bf0dbea2c1509e290fc7ddbdd9477a3b","sha1":"296721ce3728c51c7fac5fb35c971baf5fd92b7b","sha256":"4250d53f0bc756ece2ddd690a008add1d7fdc887528c671f4dfe8d916d7787b7","sha512":"a047bef4736a82a41c60baefb59fd2d52c8027b3fcd788e3311ce5fd000ef719a80f0698a86e180fbffa708e0f30520bf6648e3ef15f62cf16b4ce237bb2ced2","ssdeep":"1536:PYjv9NX6lMuubFHHsje9N6SAk1SCocnIEdRXQH:Qj3b536SJ1S8fvAH","tlshash":"b6d3f9e83996f6516ab311a700ef2803737d1a1b280c4960e215fd9e75b842bb17bfdd","first_seen":"2024-09-18T14:21:05Z","last_seen":"2026-08-18T04:33:20.411178Z","times_seen":2624,"resource_available":true,"data":null}},"time_used":735,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":297,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/_next/static/chunks/main-4a97e5ec18b03f90833ccfe8.js","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:08.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /_next/static/chunks/main-4a97e5ec18b03f90833ccfe8.js HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:08 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 110815\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-1b0df\"\r\nexpires: Sat, 27 Jun 2026 13:58:08 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":110815,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f61cb8419b1150180e1eb9e634fef2f6","sha1":"3d5c38e98f8b15ecd524c4001ad54ade6a391be1","sha256":"ef6a08178c9f2e90859d810aace35adc5ecbb33055085d85646a3a68391e64f6","sha512":"574d98a98af0f80fa7de5c1f36bd980f979e04e3389ca3c98ea5b1b1f14342219aa27109a96f94eaa692e45d66f9d72524ab7ce60300de565252b64d19072000","ssdeep":"1536:j8KeQDlfYtA1uQIuF9/opa3dX4NQpsBrylVdBe6L2CN6:dVYtyrQodINiqylFe6L9N6","tlshash":"c8b3e9b676d1f8a203cb41d4843b0006f36a1dbe146f6045b3aadcd6b96499e90f3f79","first_seen":"2025-12-29T17:26:39.785793Z","last_seen":"2026-08-14T05:43:20.355446Z","times_seen":113,"resource_available":true,"data":null}},"time_used":736,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/_next/static/fJ2-7Hyk_7Ya9nA_t-IqO/_ssgManifest.js","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:08.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /_next/static/fJ2-7Hyk_7Ya9nA_t-IqO/_ssgManifest.js HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:08 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 77\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-4d\"\r\nexpires: Sat, 27 Jun 2026 13:58:08 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-08-18T06:30:04.911979Z","times_seen":253864,"resource_available":true,"data":null}},"time_used":727,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/img/apple-icon.4212f9d3fb1181c2fc3f.png","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:09.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /img/apple-icon.4212f9d3fb1181c2fc3f.png HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 35130\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-893a\"\r\nexpires: Thu, 04 Jun 2026 13:58:09 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35130,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"2e53ce1a6aec572248e9c9ddf85a48c9","sha1":"024d79f53e165246b11454a6f94e36e40a48560b","sha256":"ee5f379f1e01e361da581ca9608b979518f03e57dc3103f76e917d7e55d0e1e1","sha512":"af9cda9ec631fc81cfb31ca56f6fd2e04c2fcb7fe135701f4f49d8f7e18505308b666980d673a8759cc9c29a267632cb53a16add884b57f7038e67ccbf09c686","ssdeep":"768:xAAQN7zC7ws90l+cilVCQSyk7QU1mt9ake7m8yneDarTH:xVQs7pcIjkv1C4PyneD8TH","tlshash":"05f20225913e8ab2c80f1ad8776e7de62c16c8c0c3131d0b4949c2dd671bb939c89b9d","first_seen":"2025-11-18T23:24:37.778445Z","last_seen":"2026-08-14T05:43:20.34356Z","times_seen":128,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/img/favicon.30fc9a98d856a810d38b.ico","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:09.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /img/favicon.30fc9a98d856a810d38b.ico HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:09 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15086\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-3aee\"\r\nexpires: Thu, 04 Jun 2026 13:58:09 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"20e4117e295f11d979d7d0342e810c24","sha1":"7be9196c4750a3057359366fde508e306955924a","sha256":"138d253418d5d787d23bd0e837f4bdeff2ff0381ff49ff1860b5711cd1e4ee4d","sha512":"abd6680552e6aebd77bb7f7729596a74dd7e23c655f4744f5b1ca33758c9651bdfb4f14ffbf52ecaa1f31358c43f7eacceb09371d038762d8d0587ab0aaed746","ssdeep":"192:jM+zv/f/Hfj7Ir+vplZqv7ws2C3jXZ6D:jvzfj7IrubBS","tlshash":"a762b9dc9b71afc5f30769f64aa2e1b8881d51ea8fdb4dca9c01bd821c0080e5a716f5","first_seen":"2026-02-03T09:17:27.70612Z","last_seen":"2026-08-14T05:43:20.341584Z","times_seen":112,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/img/us.4aa4f41f6b6533fd2b0a.png","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:10.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /img/us.4aa4f41f6b6533fd2b0a.png HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T06:37:20.775643Z","times_seen":17950797,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/img/safepal.bda08747d66156ab9ce1.png","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:10.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /img/safepal.bda08747d66156ab9ce1.png HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 27704\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-6c38\"\r\nexpires: Thu, 04 Jun 2026 13:58:10 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":27704,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"511edb00b41c6cf27e9299653ed58d3d","sha1":"bb90e90d443d587062662d7a719a78e0eb7b1aaf","sha256":"94b7474af21dd057ca9b8e18a896866edfb239137cc86c821d8951c9381a2264","sha512":"9ee86a26b02b5d601dc06bc326f4996940ff467d207f2cb5a00d71e95fa424ccb91fee7ddd4cb6f8fe2b6bfb7df774b78a56bcdf2931d0cb5b367adcc55c6d73","ssdeep":"768:lmd3lJorhZKPb3G0pcW18JDZ8GJi+8/NmskK1WnMjnvApKLVp:AXJkcPC0pF2ji+mNXkK1dYpi","tlshash":"96c2f11f96ba97cb27958777e4d22084f8a73652e1205acb08b25cec2c45dfdd4b4d23","first_seen":"2025-07-25T10:07:59.637554Z","last_seen":"2026-08-14T05:43:20.360799Z","times_seen":152,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/img/mathwallet.36f860397372a23a841e.png","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:10.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /img/mathwallet.36f860397372a23a841e.png HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 41060\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-a064\"\r\nexpires: Thu, 04 Jun 2026 13:58:10 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":41060,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"3a2e4bf8f9581ba07a0805e329ac8634","sha1":"6f14380628f50a47ade5bbc84d3717188fe319fc","sha256":"52a946b88cb1df57f580d5c34be2f73a2f0f252240c59280b9ebaa7ba1e8400d","sha512":"e26aba005950957324ff61d049aa8376321dd320ebff362494819cd9c3023a44035cd4001500f621a38ec06c9eef196d932ecb19f8a3030056231e7ce2398328","ssdeep":"768:mZdn5Ak6h9hsEE78ex3U5/x3MxP4rnxnUOTYk1nLfm2WRF7:knAh0vJU5Ox4rnxUM1nLfmlRF","tlshash":"c803f11f0c5889f7de0a0f93319f1104ca63b227803d9bc7e5a1a982bb46ff1d56a55b","first_seen":"2025-07-25T10:07:59.649987Z","last_seen":"2026-08-14T05:43:20.339572Z","times_seen":147,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/_next/static/css/ba5bf8336a8da297.css","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:08.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /_next/static/css/ba5bf8336a8da297.css HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:08 GMT\r\ncontent-type: text/css\r\ncontent-length: 30220\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-760c\"\r\nexpires: Sat, 27 Jun 2026 13:58:08 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":30220,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (18323)","md5":"d89f40cdd2428433bed7807fb8170636","sha1":"ced0e64a6a82d2f839b59dd7b2e888d064a7405a","sha256":"d3f52d22060937dd69eeab4132b16642a6ee393680d6ed7492bbd3ab7ee908cd","sha512":"49b0905303d764becd780048de2a25c7d355968a3e7c69473a9cb1a82de3c12eb8985759c852cb6a3e394d8ec644fc388a467a836c6d19f39f01c353c9401c9f","ssdeep":"384:7Q0r3MFSVU4+iIxKMCDXXVf43H2wakjPJBSeVHr4J:U04QU40KMqXV4Hykj/kJ","tlshash":"3bd2fb79a644043ebc17c1f6e5e0b9dc712ee0c2fa3657b9fb56211097c26eb29a3704","first_seen":"2026-05-28T13:58:39.840554Z","last_seen":"2026-05-28T13:58:39.840554Z","times_seen":1,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/_next/static/fJ2-7Hyk_7Ya9nA_t-IqO/_buildManifest.js","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:08.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /_next/static/fJ2-7Hyk_7Ya9nA_t-IqO/_buildManifest.js HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:08 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 450\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-1c2\"\r\nexpires: Sat, 27 Jun 2026 13:58:08 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":450,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (450), with no line terminators","md5":"643acb9d4019134d67fab1259bdd55e1","sha1":"9923edf7170ad989ed90992ab7ed7680d8045278","sha256":"9fe562cf601e653fe82771e0036844bf88fdc6a7723d9808f1b2d4792ddadd3b","sha512":"d881353476d6fa7b053f43743f399d499a94fcc02be98468f95b6db7aefca3a204bebd4f6c8a69b2bd0f403b7f39c0f6726794e8a69216a1dfd2633f533e958b","ssdeep":"","tlshash":"c3f0a0934148f8034966cc4ab1265733bf98807a1e390a2b96be9b6941a01e68f56826","first_seen":"2026-04-25T18:24:20.034459Z","last_seen":"2026-08-08T07:27:47.129417Z","times_seen":35,"resource_available":true,"data":null}},"time_used":728,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/img/usdt.png","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:10.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /img/usdt.png HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T06:37:20.775643Z","times_seen":17950797,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/img/Trust.f198622a50c85e0bb5f5.png","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:10.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /img/Trust.f198622a50c85e0bb5f5.png HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 4117\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-1015\"\r\nexpires: Thu, 04 Jun 2026 13:58:10 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4117,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"93b67a3e4ea968584b96307da79079d7","sha1":"44d4108bc0cfe97dc16aa97090502014bb0cb5f0","sha256":"2b28e10267c900818bdd8c1cff14472cc6e70c81ebe8eba7c7d7fe27cc007bc2","sha512":"29f0a6afd9eb034b74550e85f62c8fc1d2bb5a135c6d6c680b180859d0bbaf58b31f112e6fbc93d56752b372cb6b72b76e10a65470db770f7c02268a5762c179","ssdeep":"96:FHvPzwSrSzezoQzqhixJHvVoiHtciiAvuP/t+:F38SuzkoYRxNNoAKcQ+","tlshash":"06818ecfa991c5345a106fbc1c8100b4b679396991b52a3d0cac2b2d458ad68cbb53dc","first_seen":"2025-06-26T16:07:51.291178Z","last_seen":"2026-08-17T14:07:02.311079Z","times_seen":165,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/ticker/price?symbol=TRXUSDT","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.243.88","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:10.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/ticker/price?symbol=TRXUSDT HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nOrigin: https://buytrx.bet\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 41\r\ndate: Thu, 28 May 2026 13:58:10 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 41dbf493-be33-4c71-8a75-d71addbb8964\r\nx-mbx-used-weight: 2\r\nx-mbx-used-weight-1m: 2\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a0898b0583a86da725106616afdbac76.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: sr5R3np7sC5djmJ01qASseexd5Ty9o3jF0B2jHu3o3TFyxt_Fja9JQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":41,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"fd5b54a2385e2d2e6e1cba44ed22ce5f","sha1":"996b4d08b02a765f69161dba6008930ca0876861","sha256":"de34dff06499d76414860c0be10e151e2edf573f267594446776e9237440e9a3","sha512":"63a859a7958a32b856ea9b4fee9eb68891254b0eb2424024317318dc0af20b9149485ee1056f62cdc43cbe5839fb1184c79fc77bf4883008563987c8cb85496b","ssdeep":"","tlshash":"a3900407330c5d05c000f455d4d31d054051351017f3070d144f4c3415d075f341d341","first_seen":"2026-05-28T13:58:39.843132Z","last_seen":"2026-05-28T13:58:56.72226Z","times_seen":3,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":40,"dns":27,"connect":8,"send":0,"wait":266,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/_next/static/chunks/909.384c73f070ddbe2c.js","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:09.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /_next/static/chunks/909.384c73f070ddbe2c.js HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:09 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 34537\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-86e9\"\r\nexpires: Sat, 27 Jun 2026 13:58:09 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":34537,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34331), with no line terminators","md5":"0378f49be5a26fb49e85843c2a36631b","sha1":"0ba61b9245c10ebccf83c34acb4c2629a719bf4a","sha256":"ddeee69de4d9a3e5f402db64f2082fb434a1869f4ffa737f2bcb98afb4747f28","sha512":"bf2ab6f53a50f906c670394cb77340f460bf389a820231faf8ad6ff912796cad4fce525543e45199adc03a10a06089f843ebd2b1c8de64f57d6a2469d11c7f47","ssdeep":"384:mRUICbAtEKmKDsxSgcKTmlFncOeVA4cRBkO2383KK584NjqM:mRUzA7hDCcK6lFncH1383d24Nb","tlshash":"63f2a64891556eacf4274a90bfef955cb12e5b44ca1e0cb8b3fc780266405ca7b4bfc5","first_seen":"2026-05-28T13:58:39.844217Z","last_seen":"2026-05-28T13:58:39.844217Z","times_seen":1,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/img/logo.9cbb56496628b7421828.png","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:10.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /img/logo.9cbb56496628b7421828.png HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 12101\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-2f45\"\r\nexpires: Thu, 04 Jun 2026 13:58:10 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12101,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"70b3344ffcb4f46fd09aaf286524c8ac","sha1":"b44d719f197f444cd1fa53a1f2429aba7ce1fe81","sha256":"03fae304728b9bd30b3265c3477e434aef559990f3ea2d00cb23aa59acf2027b","sha512":"01b41270fd096edc8f670002e0ea76d4af18435a4cf78382caa3242fe5ae5411a7948efaf39c34cd06a67dde709921056e1996a412989d5be8f5ec2d7765c4a7","ssdeep":"192:qSCN/Jy7nIvOKzH+eBo/qPmpqLSL5lcA/W/4pci3Ba56skTsbJelmD0+gnccjmEU:lw/czaOeH+eGAmp9LPcA/WQpciUkTE/9","tlshash":"6f42ae74e3e47ad4123ec668c2591e6a34d53831b31716a6ea2b3732b70d021f7c6e23","first_seen":"2025-11-18T23:24:37.818973Z","last_seen":"2026-08-14T05:43:20.346977Z","times_seen":118,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/img/trx.png","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:10.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /img/trx.png HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 7847\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-1ea7\"\r\nexpires: Thu, 04 Jun 2026 13:58:10 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":7847,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"029b0580175550cbe067bf8781e69a40","sha1":"46b168adb93aeb70a6a8253b1c8e3c10374592b0","sha256":"bb8241a147d46fd92dc194cd463f3bb615161b5d03cbaa21ea147fc9b17a1401","sha512":"3d7f016df41eaf21bc57aabf74624c9c5d4f0511d08cc62a516c4fbdc97456e510f5d9a8d5e21e04c0efdb8461b06ceeeef65fc4b92a9b6775339283a2e61c94","ssdeep":"192:CS66knlg4JWiUWq9gOfKRziMyDba4kYjhoE4mCiMfSJHcHKMXJaZYAX9sBmHpGu:d6Jnlg4JW3F9gOfKROMoe4pL4mCnfS5p","tlshash":"4ef17d46fe42b858860cdf087aeea32723bb4ac6cb8af141fcdac615bde1038d545185","first_seen":"2023-11-01T19:36:22Z","last_seen":"2026-08-17T14:07:02.313476Z","times_seen":204,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/css/Orbitron.ttf","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:10.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /css/Orbitron.ttf HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buytrx.bet/_next/static/css/ba5bf8336a8da297.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 38548\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-9694\"\r\nexpires: Thu, 04 Jun 2026 13:58:10 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38548,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 20 tables, 1st \"GDEF\", 27 names, Microsoft, language 0x409","md5":"8c918f61234884ff360426d3d1f3dfd3","sha1":"1f13abb00f097178cda113ec970e8ad01e62c584","sha256":"46eefc7084fd9abffd87547c47f729b6071c7f7a8d5af281266bb09e5461c435","sha512":"375eb5861728082637a44b888b254a8f4666abb717bd8b611f26326b54c0f39f8e954c3a8d82c9cb4f433bb1c3f17d65fc86e3df802b8e47f77c499309f95e16","ssdeep":"768:ctmCvw8gMV9d7NYCN524sMCrveY1yX5bg/4K3oFJ/AjvhBA9A7dAPgAzUCAPqnD8:4vwYV9n4YY1aaoFJ/AjvvA9AJA4AzUCM","tlshash":"ba034a1257665329e0692f3d84bb174d6a39f6127e13a32b3a2a9536cc7b373ce053d0","first_seen":"2025-11-18T23:24:37.821402Z","last_seen":"2026-08-14T05:43:20.342151Z","times_seen":127,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/img/imtoken.10cfca4949dcc8564d76.png","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:10.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /img/imtoken.10cfca4949dcc8564d76.png HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 10611\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-2973\"\r\nexpires: Thu, 04 Jun 2026 13:58:10 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10611,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGB, non-interlaced","md5":"64782bb45106380402d482c05a2bc29d","sha1":"e6acfac147e8c8f492aaa84a4312deab117b63ab","sha256":"cda09ce7738aa7afc103b11fd63f99773c714a0bee0c05f24eaf586aabf6e8eb","sha512":"d3001489420da0bd938335d16944f206d10878c20e220eaaf95488f0e05404466bb2cde31f5bcb5c86217cca3d5ac38c431c88683aa36c0daaaa50e408064eb3","ssdeep":"192:oXS+P+d50EKEm2qX0/39Bz8WbK8hTfaUv0HY7ox7d7C3OalKwqNMfK:oCa+dVmA3oWbKETDv0jx7Tal/qyfK","tlshash":"fe22ae57515f2022632e20baec9896e5afd89b5c7c431ce3d28015ff8f9624f63945f2","first_seen":"2025-07-25T10:07:59.699014Z","last_seen":"2026-08-14T05:43:20.366243Z","times_seen":154,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/img/bitget.8bad1db84c24e5713f9a.png","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:10.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /img/bitget.8bad1db84c24e5713f9a.png HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 23648\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-5c60\"\r\nexpires: Thu, 04 Jun 2026 13:58:10 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23648,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"4801dc41e96f0a1427e6e259f4bc3053","sha1":"544e78d56a99a160dc5a35e01f45ee3c0d125caf","sha256":"d6a85a64ae0884c30652428603d242177edd1e59915d0d7922ab09847d357867","sha512":"252cbeecfefe9e6043d97fff407faa4018013e9d2426d614f496347d75e8bf72c79885fcdafab4f31c5077e55c76364fbdcdec8ecc0d77ed36cc16f3f5c86f73","ssdeep":"384:DGWwg4QS3EGuDt9Ti6AclEoYwPLBSCGlzQMkS/uZswW5YCFlmnNJfzIK36n9S:DpS3EJDzT3Acl5RBSCGxkS/8C7mNJ/3T","tlshash":"93b2e1285d7ee7aa0d9242f2c0913e7dc048b4d7adfa497b0db6ab3f041b4b53865007","first_seen":"2025-07-25T10:07:59.76729Z","last_seen":"2026-08-14T05:43:20.350938Z","times_seen":147,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/img/klever.c0fb526abfcf39b4b1f2.png","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:10.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /img/klever.c0fb526abfcf39b4b1f2.png HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 17402\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-43fa\"\r\nexpires: Thu, 04 Jun 2026 13:58:10 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":17402,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bbe977a0cab892e73b3b5983a2933089","sha1":"0a84b580561afeacac052205692e0c6ef92f9511","sha256":"0de31c19c02b311738eda4990138b1908fffebd3be29a576411be68f3b68b722","sha512":"5b1b9afe21a68dc6b5d14fd61de0b500909818554a1883f2c72dc7e85e8e0df64b0a74794fc3b5b4b7185058364e813a3c0903bea086b564722bc0f1d312466d","ssdeep":"384:Yyd/kvrif6K+AlHEAkoebGoeJLAS+T94/ekcVqxOwL:YScj7ANEAoqz+TKiQdL","tlshash":"4272d0b3ac5de2d35384857b67a33d123a500e3a09f1f75c88fc2854b4baa21de4c938","first_seen":"2025-07-25T10:07:59.743611Z","last_seen":"2026-08-14T05:43:20.361399Z","times_seen":147,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-28T13:58:07.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:08 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: W/\"69f8bf6e-7e9\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]}],"data":{"size":2025,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2025), with no line terminators","md5":"8609aa2ef8f08c692fc46fc205a3077b","sha1":"f383e3592df734a6ceed9d324b45daa083f4300d","sha256":"6fd4ba85572ab9441329a2cee35a34cdf138f4b17b463ee7decffe82755701f4","sha512":"e55981acb4a4cd7a4af1ae1cc163cfa613827cfcc138801f5a9f571f661fdf1fa2ce5f79b774e957fb2a60dbeebcd23c148b26aa2b99482c6bfdc1353b766c46","ssdeep":"","tlshash":"c8412343dc17cd49192249bdb826b31dd046dc69c3a89894bace05ad09b0bd74f6bc69","first_seen":"2026-05-28T13:58:39.849522Z","last_seen":"2026-05-28T13:58:39.849522Z","times_seen":1,"resource_available":false,"data":null}},"time_used":833,"timings":{"blocked":341,"dns":40,"connect":146,"send":0,"wait":145,"receive":0,"ssl":158},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/_next/static/chunks/webpack-ae5cc8b1c367daa2.js","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:08.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /_next/static/chunks/webpack-ae5cc8b1c367daa2.js HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:08 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3749\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-ea5\"\r\nexpires: Sat, 27 Jun 2026 13:58:08 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3749,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3749), with no line terminators","md5":"c05eca5bb414d095981c98500c31c359","sha1":"30ad93e7c34b6aa2b16dfa7d1c746f0758734a3d","sha256":"28b96169627707807f154b8fa4fd2fb6f041feb9df03207786d0c8247e454735","sha512":"5325bc9b31c4bd1f65a7609ac6fc23d6d7251d8c3bc34d694305384ad73906f3d696471ef792cb9488d47e196837099539882368b80a45e3d0039c5a830f8e69","ssdeep":"","tlshash":"6a71f9de72a5f8a817576461483f6192f11a2472281ed570e70ac8f87c3869c8623fb8","first_seen":"2026-05-28T13:58:39.850483Z","last_seen":"2026-05-28T13:58:39.850483Z","times_seen":1,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/_next/static/chunks/pages/_app-0ac105e6b1077c3050e76671.js","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:08.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-0ac105e6b1077c3050e76671.js HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:08 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7649\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-1de1\"\r\nexpires: Sat, 27 Jun 2026 13:58:08 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":7649,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7607), with no line terminators","md5":"9f7ca9604e3a0f25b247989575714f9d","sha1":"091b1fae8c86e0f7ee3ae094ced0da9347fcecda","sha256":"cd03c88718d855f00837eee41b681457ceea1ae027adb525a71f8782f2a18922","sha512":"75c1afd9b3f49cf0daf5a2e240e073da8fa685366b49d504863ff5d842c694345ac5515fc745fa90d2b7513f6a9216466baf3d8d703c16510d0b116bec3ad3ca","ssdeep":"96:DAQN8cm72Fvn1fcdmUkWFsg6c7ZdbyBMRc6w5K5oE/exkB7FmVs0x4mEFSncQYlD:do8c8cfbyerwoD9S9EgnvvUrtJNIX6","tlshash":"7df1d855b3d132b486a3125473a77ae5b36f0cb003188838a3f4c99c29b0a5df966fdd","first_seen":"2026-05-28T13:58:39.851699Z","last_seen":"2026-05-28T13:58:39.851699Z","times_seen":1,"resource_available":true,"data":null}},"time_used":728,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/_next/static/chunks/678.8b3a472beb783489.js","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:09.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /_next/static/chunks/678.8b3a472beb783489.js HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:09 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 605855\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-93e9f\"\r\nexpires: Sat, 27 Jun 2026 13:58:09 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":605855,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e658bbe9c461b0886cd2afdcca454f23","sha1":"2f6f21a3d14f489c23eafce1c3cf4014aebf46d6","sha256":"e140e0ed25b96233fc9ae70e942e58e8be07a7e5231182371d5c39483467c3c4","sha512":"fc2beadadfa0b81de1a6446038bf029c6f49ea7faf0f0f549c0ed6f955bd5748b5bc612b6b0f6f1e1ddee43fc459db723960963f5b8bff3764809c47bf203d9c","ssdeep":"12288:2+j1kVKX5cqsiVinFGEFRvDAfFlClHQ3d0cyNLq:hncTlIyNLq","tlshash":"4dd46cc57725b433439a91ea846b1106f27cc8682c0d482cf7e8e8dfad959d861bbf35","first_seen":"2026-03-26T00:27:24.895708Z","last_seen":"2026-08-08T07:27:47.147811Z","times_seen":49,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":201,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/img/tokenpocket.67d972d37a9f871f4613.png","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:10.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /img/tokenpocket.67d972d37a9f871f4613.png HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 2183\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-887\"\r\nexpires: Thu, 04 Jun 2026 13:58:10 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2183,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGB, non-interlaced","md5":"76df18a0c5becd5d1b79210d373e2589","sha1":"e6e294024e8c7be243f0585b5493489e57bc9f8a","sha256":"bd99cba9c06e7c20913639fd05e89d844272c11f5f7e17d271053d9bc6131445","sha512":"9eca78c8e38e82db6f576920adf6c5206fc067b827a4265d0008dd114937c04467a33390a3fc8fe1c3ad233b435c786e94a0a33d879155d4d4180ae906a7e706","ssdeep":"","tlshash":"88412bda22249367c89f3b3d70f4d8e091e484a711598d903f8d9e4035d521a70af2ed","first_seen":"2025-06-26T16:07:51.296732Z","last_seen":"2026-08-17T14:07:02.311745Z","times_seen":154,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/img/okx.10136e20bebea0880495.png","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:10.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /img/okx.10136e20bebea0880495.png HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 653\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-28d\"\r\nexpires: Thu, 04 Jun 2026 13:58:10 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit colormap, non-interlaced","md5":"665e88640125bbccbd2db8e0913625a7","sha1":"eeed409718e1d1a274d07316cc341ad5e7fd9ea6","sha256":"baddc63d3e00843b92911baa967ef255253a7af1384f9afdb0713f4924ca4b04","sha512":"889cab02d006dd23378e5cc74905e9bd5322858bf6a59717895aea0ad1629e7e2a7b713e29fd46e2388ba09306c47190e04e8a9983d2605b26baea8f81af4a74","ssdeep":"","tlshash":"5cf0a2c253e75c3cf7587c7cd7e1d926a8b12bce6d598243455a19ac78934264510b81","first_seen":"2023-05-07T21:47:35Z","last_seen":"2026-08-16T23:43:17.083473Z","times_seen":444,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/img/us.4aa4f41f6b6533fd2b0a.png","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:10.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /img/us.4aa4f41f6b6533fd2b0a.png HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 186\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-ba\"\r\nexpires: Thu, 04 Jun 2026 13:58:10 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":186,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 11, 4-bit colormap, non-interlaced","md5":"9cc0a94a208dd8a2a73848f51d008df2","sha1":"bb04b071595e3c2df682cc6d02fe29122ecab245","sha256":"82eb2432bd1044ea81f7583cbfce93c0901295b9207a20e0b1336ebf1d0ead9e","sha512":"60ca8c77e9fd0c223add987cdfe73110f299b99f5a714983908a0a69861b385de06cfbef79ed6fd329ac34496581c460e2cb655f570e469f5f5f195b784410d6","ssdeep":"","tlshash":"d6c0c0b3a365ee44c10e251390e8030177743f250d31b01ea1cc895b049e34300c1dd3","first_seen":"2023-12-21T13:01:40Z","last_seen":"2026-08-17T14:07:02.319292Z","times_seen":689,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/img/usdt.png","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:10.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /img/usdt.png HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 7842\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-1ea2\"\r\nexpires: Thu, 04 Jun 2026 13:58:10 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"8418a9e2231e14be024341a848802f26","sha1":"5dcda7dde375e4ba7c3403dc183b33845b067687","sha256":"014a5b538f2ff188725402119ceb6d62b3b1bb74c41c8445e0e6f7505c884505","sha512":"7c156570fb28d5e9ac77fd6b273a9553397f5a7db4ecc425ca60ea2fe343094b2080966023404391eba87213a7f1786f507f29f1cef62784cba1c3118ac8a418","ssdeep":"192:CS3ykn0gqSjhV1K6JiVoL4YATFeEc2Nawr+CY:dBn0gqSjtYKL4YWFedmfJY","tlshash":"2df19d28a6d42800a70da666b1ac04e34a6f96d886d0c6ae7ccfdc438df61f9c94d390","first_seen":"2025-06-26T16:07:51.28824Z","last_seen":"2026-08-17T14:07:02.303285Z","times_seen":175,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buytrx.bet/_next/static/chunks/pages/index-f464b3d9cb9a5cb3c1bc76dc.js","fqdn":"buytrx.bet","domain":"buytrx.bet","tld":"bet"},"ip":{"addr":"66.165.228.42","port":443,"asn":29802,"as":"HVC-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buytrx.bet/","date":"2026-05-28T13:58:08.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buytrx.bet","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:49:40 GMT","end":"Sun, 02 Aug 2026 14:49:39 GMT"},"fingerprint":{"sha1":"3C:BA:F7:55:4A:25:A0:29:3C:5D:FC:54:FC:4D:EF:B4:01:DF:1A:E2","sha256":"0F:47:51:D4:07:74:0A:E3:E7:85:5A:76:DE:43:8E:4B:EB:E0:50:96:7B:51:88:6C:88:43:89:C0:75:ED:46:CD"}}},"request":{"raw":"GET /_next/static/chunks/pages/index-f464b3d9cb9a5cb3c1bc76dc.js HTTP/1.1\r\nHost: buytrx.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buytrx.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Thu, 28 May 2026 13:58:08 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4625\r\nlast-modified: Mon, 04 May 2026 15:46:54 GMT\r\netag: \"69f8bf6e-1211\"\r\nexpires: Sat, 27 Jun 2026 13:58:08 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4625,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4625), with no line terminators","md5":"03055bcec90ab756327636054adca774","sha1":"57e6e2ca393f4c2662ef7b891379cd40704f331d","sha256":"15cefea3642d9eed9245f3d839fdad82e4d0a1cdeb60c3a3c009f12b200408a4","sha512":"896104119ab01c106dcc42cee9fdfdb49dd9d9b829a42993f9c9eb97f1f281e2cbc6f1228ea09f1061e5d9cdd6c1d0b0c6c0449969fb66e089bafe5f056c0595","ssdeep":"96:bAZqKTHVt9GC0DxR2ov0me20NmwhK/G/DVBRuQaBXAF6:U3RqdaXmwhRDVXuQalAF6","tlshash":"1591b5a236d2f81713594074803f5417b6a83d67185b74ecb365ccdef9a909c61b2f36","first_seen":"2026-03-26T00:27:24.881944Z","last_seen":"2026-08-08T07:27:47.142135Z","times_seen":50,"resource_available":true,"data":null}},"time_used":728,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"buytrx.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}