{"report_id":"b48c2c5c-10b1-4ea2-9f87-d5109670b5a1","version":6,"status":"done","tags":[],"date":"2026-02-04T20:05:50Z","url":{"schema":"https","addr":"paymentcryptomus.com/pay/TBC3EAGJ","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"35.71.179.82","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"paymentcryptomus.com/pay/TBC3EAGJ","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"title":"Payment - Cryptomus","dom":{"size":34815,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (34811), with no line terminators","md5":"19f6066b1071df7981d7908aa5e0a91a","sha1":"46c94b88bc6d55c2f681e064aad7b593fa106060","sha256":"7893a0f8dd318be7084ac5c575e85a6bd3074a564d8303ac79651ce8f0d1d402","sha512":"e878fcb245d73d0603734d4e0cdaea9fa781fd8ac7213120ecfa970d4af35943255b984ba940e52ded67ad6dafe00ee25d2823e7fc8b15a9991f784aea2d0a5f","ssdeep":"384:Mk5su1bNFSwciEPT7b0AWYHVVdLbPi1WfeVaELDqBbC1IgT0HT6AT9P:x5su1pFSt9v4zYHxLbaNjLD4C1f0rZ","tlshash":"bff23cb66244d6a5e4078f98d03bbe3972cbd47e8b15c994c2eccba45381cbd4b9dc80","dom_hash":"domhashb463d4f48aa0facb3204711a42df65a6","first_seen":"2026-02-04T20:05:56.591387Z","last_seen":"2026-02-04T20:05:56.591387Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"paymentcryptomus.com/pay/TBC3EAGJ","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"35.71.179.82","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-11T20:05:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"paymentcryptomus.com","ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-01-27","domain_rank":0,"first_seen":"2026-02-04T19:51:11.450309Z","last_seen":"2026-02-04T19:51:11.450309Z","alert_count":0,"request_count":26,"received_data":2991540,"sent_data":12738,"comment":"","tags":null,"fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"backend-production-828174075858.herokuapp.com","ip":{"addr":"18.208.60.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2010-09-19","domain_rank":0,"first_seen":"2026-02-04T20:05:52.892913Z","last_seen":"2026-02-04T20:05:52.892913Z","alert_count":0,"request_count":10,"received_data":8002,"sent_data":5588,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-01T22:17:46.954894Z","alert_count":0,"request_count":1,"received_data":10945,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-01T22:14:44.580478Z","alert_count":0,"request_count":2,"received_data":98730,"sent_data":1120,"comment":"","tags":null,"fingerprints":null},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-02-04T11:51:17.83194Z","alert_count":0,"request_count":1,"received_data":114323,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"config.ton.org","ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"domain_registered":"2003-11-13","domain_rank":0,"first_seen":"2025-10-03T21:27:24.901658Z","last_seen":"2026-01-31T12:27:49.983369Z","alert_count":0,"request_count":34,"received_data":518191,"sent_data":15331,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/4bd1b696-43ba64781d20dbb7.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"45ca197503404c3ec373884993e955e1","sha1":"36e650675619f1a0c1fd221e5c4adbcd6fe3cbd2","sha256":"98d3a8889b0fdd8156fe5ac9cf00c94dd4006abd75b7989e4a369ed4a6d82aa3","sha512":"26291fb3d9126c4feaf192d64b73bb562b61899f5f35f80720584d5a862e1f1947e2a7da51697eb7619d56f1e6d4bfdb9556a8f5d08143a5aa597c68982f7249","ssdeep":"1536:BWuX+ZW9jo1pByrzTS6BamVShi78V201vjZdq8CB8LyvKcjY8tO7r0aKoRdZidv:zjQq7SWGV2KldqOKxEr0BoD4","tlshash":"3114f7ec3d99e665aeb302a300df28037378661b240d4d60a214fd9da57845bb17bfde","size":198620,"data":"","first_seen":"2025-11-28T14:47:25.682505Z","last_seen":"2026-08-02T06:09:09.774908Z","times_seen":217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/9045-3b70795c3bd3bd21.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbb5b69751a187e98d2616bd559e39cf","sha1":"93b5bd94e245709ab74122e3710d7179ca9cc558","sha256":"7fe186cdae7b16ee46cf4b63063bfaa5957f2a849ba5837e8cbe816c04452b98","sha512":"7656255b0c3920f0c491f2ca90affed512d488ddb37c3ec9b391e556584e24e6c870bc1d9958aa8de9fae6c46c5977a969ef23f6f2e6cbc8809b5748012eb0b3","ssdeep":"768:172l7A2GED2sQUCWULaYklXC62UJqsc60Vss2vIjA+2EDMIjA+c1HeBZdvEmct7n:tGS62t4/3ci","tlshash":"84f2c745db9ab74cf02781aca2df600c756f15a8a60e48f97bbc743132864d53b2bbc5","size":35642,"data":"","first_seen":"2026-02-04T20:05:56.646513Z","last_seen":"2026-02-04T20:05:56.646513Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/3395-a2a3e3b3583f7a37.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"14b73d44aa4f86964a94d623c3a89b38","sha1":"f8d761fb6ea6764300af1d4b7ebc8f87f1ba0e61","sha256":"cb0bd0f77c7ef15d135e433e19f1a90dc4298127220e28c4ebb5544c31186bd4","sha512":"7e59f30072e011c56bbe31b70a224ab8bb8a9daf8f1eedc3423bb071049d3ddf6f174d0d363cf4aa01344fc2f2f3d113612e6068389d6bb0367f9938fc5ecdd3","ssdeep":"3072:tXx3rYgN49XAyLRZHy2xi0x5JS9o7459Kjjq8y:tXx3kgN49XAyLoI5JS9o7459Kjjq8y","tlshash":"44c3d841b3923135139f220879434678a26af954531a84b5739cc47bcfb4aecb9f3bda","size":127588,"data":"","first_seen":"2026-02-04T19:51:15.84433Z","last_seen":"2026-02-04T20:05:56.652261Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/pay/TBC3EAGJ","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-02T18:49:44.817652Z","times_seen":211993,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/webpack-f46c3bf09d77875e.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"16385972f7311836a6a9633b1c5a58a2","sha1":"190cafde997617f74b35191ff00c67a2f322d4d4","sha256":"5f4cd1d82d6fe974f4d22fc9c9401008ea7e6ca41ab51b0eab4559e89c75a179","sha512":"fefcc47d966379572d7b4584bc95f1a4726fc9d59d2b2319ce901e18a2900a0215ced52234bae820fa98e431b6d91b0d2598fb6884f03a4ba8f7ecf6d47a0d7e","ssdeep":"96:zxLBsNQqNAX8F1evEmz86dT/5X5+0nWd1r74hqTEexVaPNV7ILsOGFB/zl2eJg+k:tLFAAMrecmz86d/5XtWd1r74iVxKNJI9","tlshash":"72c11ca926a8f4b62f7101946c3b5c60b106e1323c2e44e1e35bc9b56831eb95937fb5","size":6100,"data":"","first_seen":"2026-02-04T19:51:15.880842Z","last_seen":"2026-02-06T18:25:28.637152Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/3794-b16d22429af19980.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"132a3a987b79559e5e145d2629a2f904","sha1":"30c0b9571c7abab379aba15e72861b811347e6eb","sha256":"f377dd2981c53b54b9177262f3edc3a57de414dc849c0af9601f8089f1e38e35","sha512":"93954f7f35a93bb4f0a08c376104b1dee1b3b9f2bd0c5689e83498ecf4ad6932f61343e815c9f874589dd4c545963c7557233f4d1908a33925e85a614d74fbfe","ssdeep":"1536:5OVOEGCzPAfNuGIzANAPeEkTkbS81W/cxAhxMEbS+iBzuEOsx4vJheboQtT9elUf:8sNAPeEkQpvH3O3YbNA2FtKHm","tlshash":"1b14e9fa35d0f8a207a740e6c43f4006f2295c77145e74a0a3e6dcd975a45dea0b3faa","size":195265,"data":"","first_seen":"2026-02-04T19:51:15.86Z","last_seen":"2026-07-12T21:09:00.036638Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/app/not-found-61c46764a77362ab.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b7c6171e675214e80ae193b02c23c3c","sha1":"7e0e4bc86a74b8f59be9fc735548bc6e6355803a","sha256":"88737a3ad76cb907eec84d574a143a8400ccc46c40dc1b19b1a1aa36d2ce2711","sha512":"f200389b5d526532da4c174deed9455de00528ec416051587e8a1118d08ed86849fde9166b2a4c2dae6d62d6d742fb83c6af60b76453580e905ff2a2608d34d1","ssdeep":"","tlshash":"3151431c92d5beacf8224a95976de06c721f795def09c8b1eb6829300c810d87717fd4","size":3144,"data":"","first_seen":"2026-02-04T19:51:15.892374Z","last_seen":"2026-02-04T20:05:56.625947Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/app/pay/%5Bkey%5D/page-544b7c0c7ebd2bb3.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c33cfd3429eccf3dc2654e0320c961a","sha1":"a9b1ba80911190354790196ce5edcda3aca6110b","sha256":"2467932f5aa000ea03817e785a9831d5ab8ff749dd3307623d695a11b54d5ae0","sha512":"51047ddb61800fa47094bf9e7f10854845c07c54161ae738381cd4dedb8bfa32553610b96cf076941dec054dac4ac2c7d33cbb37e387852cda9f0d1e8611aacd","ssdeep":"768:dSi1ir1Am9vlGwDisFG/4/39DTV/QJwOw9sewK0OjLsfLbuPLD4C8OH4lYXtWwgj:o/d5pTVEVSLDNtC26wGYKvQvWolDI","tlshash":"7c63fa49e3987eacf00743e4bb1f602cb66f18a89f09c4b476bc247555580d87a5bfca","size":68827,"data":"","first_seen":"2026-02-04T20:05:56.666087Z","last_seen":"2026-02-04T20:05:56.666087Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/4936-b8ab84e20fd02c34.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"30c8fff02498112a7204dcfe1ef994ba","sha1":"b92ae74472a33b09e9bee3f46cf5889105db7e6b","sha256":"d05954f993e95b54e215ec41c2cb727687c6667daed14a60f9c6c62ce6d799b2","sha512":"9ff2d18b680a2b211d3bb79ae341b883380445ce5290ddb250b4503087673e0f4ac54e48ab2eb5d80626550658ea32e752ea53806d1df94faa31c234330744e1","ssdeep":"384:hYoikqO5pU4HF3kW1ZZNjTgWxIrz66/chAS9HYWOgI6AEg2RmhKFe4m8+TJtpskQ:WYpU63IrYzVRmhKlm8+TRRIGzZTAogL","tlshash":"29a2d88db751b16b53ab51c6442f0405e2fea9a8241d096cfb51d4c3b8b8da590f7f38","size":22684,"data":"","first_seen":"2026-02-04T20:05:56.633487Z","last_seen":"2026-02-06T18:25:28.645746Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/pay/TBC3EAGJ","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c6906d64057d6d027e48259ebf6524d","sha1":"100b912cdfc8d83258162b1215a90b70c8caf6ee","sha256":"ffba83fcf7d803d21730bf2ed5d4e2bf0c7f8a53c56abfe71a5b0db705e5c933","sha512":"cee81e600cf9486e240ba71109a5be5f46480a5b7f95ab8d4ff62bda6cb96baef3f6d660fa04e75cfd16bf570d9b30c8a22c0c6970e964be1e7ae149ade5acbe","ssdeep":"","tlshash":"9731591fb21ae8d5bc66ce1b90771e79a0d9dc37427cd898e29dc93a0191cbb535cc02","size":1707,"data":"","first_seen":"2026-02-04T20:05:56.670452Z","last_seen":"2026-02-04T20:05:56.670452Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/pay/TBC3EAGJ","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9a98cfa8a02532ba6497db350e0a4ca6","sha1":"597fb12e9113999d40b300bdcf555da46558765c","sha256":"51af0f99dd5919c95f304306c795f4857d7c03136d7702fb087ebef2434c78ee","sha512":"2f903fc75636f6c0bae5cb098fe95a0eae1c31e4f4181d397c01439c76581f53bf0d9e2490579de875728dae46df14ffb3dc1ffa6ea31e81a0b509cc20576298","ssdeep":"","tlshash":"3e51d42e2805de4bec7e3d69463e9c3a20cd8d7b4750daf4c58ece141b4647527ea9c0","size":3113,"data":"","first_seen":"2026-02-04T20:05:56.672256Z","last_seen":"2026-02-04T20:05:56.672256Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/9e84c5da-87a4fcd6721a0ca8.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"de5b61281836d9da597ea43a5f9fcdac","sha1":"45144de9d297ca974e0e6a9d4fe2cbaa846d78d4","sha256":"527b14e5161612ae7204c548ec8e4cc5ff7ae7e1aebce0a4d2d306b178ccac12","sha512":"89859f1b93b0c942bb79fa8a1332f21ecfd53b5563eb5ae293a8da8cf3d330010d5c2f5fc739ac70e5947c147875cd8de30cc8122d47d9db37f0d385bc02635e","ssdeep":"1536:2YoSAskvFOxKEvaMEJqVzgGjGTb5wLzRnCJ:uSAskNOxKEvxVMGaCLzVCJ","tlshash":"55631ab2bb50f02407f3519968632121f3392e8955558078f73dc8e2ae716cd93b7bba","size":71273,"data":"","first_seen":"2026-02-04T19:51:15.874585Z","last_seen":"2026-07-12T21:09:00.051538Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/6809c4f0-b55e5589f94f439d.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"947521f639a7a600afce157d322ab1f9","sha1":"5a89d321f28c96a1e9ccc4557bc70b8028a6984d","sha256":"a9b037de2b374eb94039ab3fb8293dde4146c935c8198e6704e73e5111400a21","sha512":"69c79dee0dc1749d87e5a4f26d9396a1edf5fb34cb6e704368b0e7bbfd29585efa308f6df225233563632e75d64f36f953a7b6018d7d2c47848ed315995304c3","ssdeep":"6144:2z+KTAtWq7KvsdeevgMlrCOWF92Atf6RjA+EVVGKlcM4qo9rB2WFkwC5ZUE7IHj8:+8WqqsH1l8","tlshash":"cf3429dab387b261234b47d944774152f32e18fa180d857cfb69498a3f50988d2bbbf4","size":243641,"data":"","first_seen":"2026-02-04T19:51:15.882927Z","last_seen":"2026-07-12T21:09:00.045871Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/app/layout-377446f569a1d2bc.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"25819febebfa985f0fab701420a9333d","sha1":"3967debe29f1b2eb0a534efd66509a5a81b0016d","sha256":"6d4f5ab9a3b1d850f48ce3e97ff68dab8297a721b76d4f92e96650e728b7acdd","sha512":"6942228dc40f1f889d7735a82840da909e5aebdaad950779bd6d2c5c76aa2ab7114a0f13ec9ef011c31878a346dfe26c7f125d87b5fc9be7210d08c85b7bc0c7","ssdeep":"","tlshash":"75314445014439aa27af094df63bdd4ab026252c0816986457acdcba3875fe4a2b2bed","size":1788,"data":"","first_seen":"2026-02-04T19:51:15.846242Z","last_seen":"2026-02-04T20:05:56.622176Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/5609-1550415b92b6ade5.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d2698849e5bfbf94fd6c1b0796fb833","sha1":"717aef7f52774bff3eea758c2894d44b4f3b9c5f","sha256":"2bdb8146b8702c71ff3cce5b5e9ec1b18de020b9a44bec3ab0f1ee0210d602dc","sha512":"69b6bee4491ca6b08db8c2feaa87cc19e83800c11b3dc6d39980d98d829d97d87faffc21aa380dcc83f08ace635909177383c0820bf52dcf0e883502a28578e2","ssdeep":"384:gChOoooeoqtYh7o9oho+tICuo28mHmMFwqDIs2v49PcGhOoooeoqtYh7o9oho+tV:NYoooeoqtYh7o9oho+tIfo28mHmMGqDh","tlshash":"b562c5d8630053e9f942c77899167595786f39fdab59c4a8d3e82c3096a40ec3e4bfc2","size":14543,"data":"","first_seen":"2026-02-04T19:51:15.870992Z","last_seen":"2026-02-19T05:40:38.028111Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/7609-e6c2ca3a3b9a6723.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfadd15188b31bca8b7827bf317e331b","sha1":"416f9f089a5dad6de9249c23533e4ed571534f1d","sha256":"070bbecc16abef1c18d1a5aa3a65b07f9036eac56acb07efa70ae4c134eced32","sha512":"6f604115baec196d6d94447dc8ab503894829a05cde64bebff4189bf24aca58ca8450ac1d490534cb3219b36959a42d136c4a69ebfc464be617ecf3665e5b9ad","ssdeep":"24576:wXNgcfordg0bQas89dsiBx/l/sT26IHwAfdLLl25iRc4:wMrdrbQqsiBx/l/sT26IHwAZLl6if","tlshash":"dc756b553366f43643db41dea47a1101f23c9869140d402cfbece8ebab989c9a1bbf75","size":1666306,"data":"","first_seen":"2026-02-04T19:51:15.902862Z","last_seen":"2026-02-06T18:25:28.6568Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"70dbd7ade763706614c7ee99973dcc9c","sha1":"0b980ef4fe3e17d253fc2cdb672f1208736b733f","sha256":"b47f6cb105860d35b4ae512c22696a33157a365f4c885a33488f22ea8a3b6a03","sha512":"03c1f60831856975b61bea126ead239f116235fb0422178425d6b8c86553a3548d487c919f0f3f81e14de201680f63b7be24106589faffd8f3c56b28c2d19b45","ssdeep":"1536:pO5TpRdo54F0WN2Zbjcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV76/xHK8ITrm:s5TpRdccKFU76x1H","tlshash":"6eb32e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","size":113990,"data":"","first_seen":"2025-07-29T21:33:08.487755Z","last_seen":"2026-07-18T07:05:28.914407Z","times_seen":3814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/main-app-d84523bbf11a34fc.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"acb8b634298ea310dce24f419d318446","sha1":"9b7dfee207d424821800b56c4151e162c5a8ea8b","sha256":"2d187ddf94bf781bef15826cf8d634052a864bb14653fe2431529fa106ea65b9","sha512":"0555c8c7edc2bc56110419ec555e19a202844b20ded02030f1a637799adec5b737ab14b2c72eb8d4a3d393f16537d90888c2726705ff8ba18fd36d95963af922","ssdeep":"","tlshash":"63f0f45a4f1df41f5c26ae64fe966ce2285f8535102b4e607900ee612d27facd2a1408","size":529,"data":"","first_seen":"2026-02-04T19:51:15.872815Z","last_seen":"2026-02-04T20:05:56.629163Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/1293-ad8b137f5002e267.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d21be57659cf037e03080fe9feb616af","sha1":"15b2d0cee69f1e60f5652a2f7b845e5f2dce5210","sha256":"50e454a64a4abe1ef67414389adc1a78d4365ad2ff7db96064e5a8a2821e5ed4","sha512":"f2304d9bf5f9ff8c74819c6c311e3df127e112271e27d08b49066205f72102aa39539c4e0fc8a58927e6001c5bd47c6a0b100a0f8098905602de2c0163d251c3","ssdeep":"384:ngnIYIOL076rKuQHoHK0V/BMbu7Q2NES3EjLl8rgatbluwPgzwFe4Sx8:gRjiIq0V/B+EQ233Et4C6gzwFa8","tlshash":"94c2f86fe2d7fb3c47defa48e22908446e1a1b59ca8461f4aac86441bc7c4d70247b77","size":27917,"data":"","first_seen":"2026-02-04T19:51:15.85156Z","last_seen":"2026-07-12T21:09:00.076657Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/pay/TBC3EAGJ","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d757bb971375fa2fee6d197dd6c755ff","sha1":"15be25ed2787936160af8d33e0fbcc2b3981357c","sha256":"608b5161477a3cfe3fd218a67b6c521bc8b4216f6748563613c4e63506dbd342","sha512":"c3f2176e919ba349f3825ae5445cb9d83e082e1c41699070dec07458bd8576e65bbb08f29e96536ba341130c07f37372022b80c0bd0139e529fb609152353a3e","ssdeep":"","tlshash":"b5e026a0ac02dc49e6db5f29083f4c3a22dcc6a94245958bd6d4cd240986e3009f1e82","size":342,"data":"","first_seen":"2026-02-04T20:05:56.676533Z","last_seen":"2026-03-15T08:11:50.707675Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"config.ton.org/assets/miraiapp_tg.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/miraiapp_tg.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 14743\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-458c577ccf2454068f69df71659a20b4-923f124b4967b11c-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-3997\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc6\r\nage: 107\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:03:43+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14743,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"4183f4114e1e2fb9f436d5ff9b7debc6","sha1":"c11f74163dc7a56bfb2e9adec8e34b35413a27b7","sha256":"0e9842f97a85f5a3317ae59868dd7a98c706ac325249ace72b3511db7a6ce0c0","sha512":"69a2c21046972f4d38ea697aa5d85e7e5c3305b450292b47a017a0ba4bdcd72f4f8563a4965c9849d311ba8499cee43d41a5924ff0177b0687a7783267b9c406","ssdeep":"384:fx2yKuzEkkTr9SfDDm8JH0o/CgLcjTZEEAPSdn:fx2yKuzjkTrM/H0o/CnjT6EAqdn","tlshash":"6862c047856cdce7d0a16dfdf3e9beb71e73063475a64004a3ae0af1eab2b400687016","first_seen":"2025-11-22T11:30:21.467365Z","last_seen":"2026-07-29T17:03:54.721226Z","times_seen":400,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/media/e4af272ccee01ff0-s.p.woff2","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /_next/static/media/e4af272ccee01ff0-s.p.woff2 HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/_next/static/css/b5a5cbb6f243629e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: font/woff2\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\netag: W/\"bd30-19c0ede4a58\"\r\nlast-modified: Fri, 30 Jan 2026 12:26:15 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=z5FPALj6%2FNybhWSn2IHmu3IdO19RqaEsGmc59Smxxhg%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235530\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=z5FPALj6%2FNybhWSn2IHmu3IdO19RqaEsGmc59Smxxhg%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235530\"\r\nserver: Heroku\r\nvia: 2.0 heroku-router\r\ncontent-length: 48432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-08-02T18:49:44.812071Z","times_seen":85763,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend-production-828174075858.herokuapp.com/client","fqdn":"backend-production-828174075858.herokuapp.com","domain":"backend-production-828174075858.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"18.208.60.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:31.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.herokuapp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BC:F1:45:C8:21:19:7F:72:A4:09:2F:2F:B0:51:8E:A3:9E:AF:0F:BF","sha256":"7C:C7:DF:0A:D1:20:69:CA:B9:7F:44:40:75:60:56:00:94:ED:A3:72:FD:A6:ED:DC:49:F8:84:38:52:8C:55:88"}}},"request":{"raw":"POST /client HTTP/1.1\r\nHost: backend-production-828174075858.herokuapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://paymentcryptomus.com/\r\nContent-Type: application/json\r\nContent-Length: 627\r\nOrigin: https://paymentcryptomus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":627,"data":"{\"device\":{\"screenWidth\":1280,\"screenHeight\":1024,\"colorDepth\":24,\"pixelRatio\":1,\"availWidth\":1280,\"availHeight\":1024},\"renderer\":{\"vendor\":\"Mesa\",\"renderer\":\"llvmpipe\",\"webglVersion\":\"WebGL 1.0\"},\"browser\":{\"name\":\"Firefox\",\"version\":\"134.0\",\"language\":\"en-US\",\"languages\":[\"en-US\",\"en\"],\"cookiesEnabled\":true,\"doNotTrack\":\"1\",\"hardwareConcurrency\":48,\"maxTouchPoints\":0,\"pdfViewerEnabled\":true},\"platform\":{\"platform\":\"Win32\",\"vendor\":\"\",\"appName\":\"Netscape\",\"appVersion\":\"5.0 (X11)\",\"product\":\"Gecko\"},\"timezone\":\"UTC\",\"timezoneOffset\":0,\"isOnline\":true,\"canvas\":\"8461bbc2\",\"webglFingerprint\":\"c504d946\",\"urlKey\":\"TBC3EAGJ\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 52\r\nContent-Type: application/json; charset=utf-8\r\nDate: Wed, 04 Feb 2026 20:05:31 GMT\r\nEtag: W/\"34-S+EaA05I+9mX0SSTtYiN9l4i6Tw\"\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=dSp2EzDMpFKzyv0Ch1b2zk19e6NTiGVNlo38DA4H4vU%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235531\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=dSp2EzDMpFKzyv0Ch1b2zk19e6NTiGVNlo38DA4H4vU%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235531\"\r\nServer: Heroku\r\nVia: 1.1 heroku-router\r\nX-Powered-By: Express\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":52,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b1946ddcafaef379dc6a72d1376f51c5","sha1":"4be11a034e48fbd997d12493b5888df65e22e93c","sha256":"f78c2fcd32146b2743a11599fcd7311c03fef16ccf4abe09d82bcd096f16d48d","sha512":"01fe19900cda9288f78f149bf5aab412d3d1e8dbc24593a417374f4556a90ddfb88cb49a6f2653598261a5c6a956c01f32ebcdec4e686d590fd8e14d4f0ad8b4","ssdeep":"","tlshash":"1690024117510121804512a4950555726065e410d511bcd50e9ea994087a8e55336517","first_seen":"2026-02-04T20:05:56.609462Z","last_seen":"2026-02-04T20:05:56.609462Z","times_seen":1,"resource_available":false,"data":null}},"time_used":845,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":845,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/4bd1b696-43ba64781d20dbb7.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:28.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /_next/static/chunks/4bd1b696-43ba64781d20dbb7.js HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/pay/TBC3EAGJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 04 Feb 2026 20:05:28 GMT\r\netag: W/\"307dc-19c0ede4a58\"\r\nlast-modified: Fri, 30 Jan 2026 12:26:15 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235528\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235528\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":198620,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"45ca197503404c3ec373884993e955e1","sha1":"36e650675619f1a0c1fd221e5c4adbcd6fe3cbd2","sha256":"98d3a8889b0fdd8156fe5ac9cf00c94dd4006abd75b7989e4a369ed4a6d82aa3","sha512":"26291fb3d9126c4feaf192d64b73bb562b61899f5f35f80720584d5a862e1f1947e2a7da51697eb7619d56f1e6d4bfdb9556a8f5d08143a5aa597c68982f7249","ssdeep":"1536:BWuX+ZW9jo1pByrzTS6BamVShi78V201vjZdq8CB8LyvKcjY8tO7r0aKoRdZidv:zjQq7SWGV2KldqOKxEr0BoD4","tlshash":"3114f7ec3d99e665aeb302a300df28037378661b240d4d60a214fd9da57845bb17bfde","first_seen":"2025-11-28T14:47:25.682505Z","last_seen":"2026-08-02T06:09:09.774908Z","times_seen":217,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/bybittonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/bybittonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 6895\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-c90d9c852a4d6c5132e3d65c14106bf8-fd2d1d1fc87143cb-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-1aef\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc8\r\nage: 107\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:03:43+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6895,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"0916d8dc0fe322b83ad60dc4bc8260cf","sha1":"da3b21840b67b25f8997c32c7fddeda06fedb76e","sha256":"8268630cfca7e33f69b193ff30605e3916ed4ef5874513c42df54f0e8e78795d","sha512":"0cbcab0f6ae34cd6ee4aad3804498700f057bfac59d6663bde4146efeced10158d1e8af31daa7410b79b5d9024e37b02788202a1881bafb5c6bb902ad54acbe5","ssdeep":"192:FS49XMVkI8gQaDwnLJAmdbdySsAf/8F1O1l:k49XMVkIzQawqMsukFal","tlshash":"5de18e57f6d1153fa0af9da9b2ecff226861430a54e0d24f6d17c8d30e1b9173d1988a","first_seen":"2025-11-22T11:30:21.536065Z","last_seen":"2026-07-29T17:03:54.747652Z","times_seen":400,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/nicegramwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/nicegramwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 3587\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-2d45e9cd6927e420a303466dd2dab557-6a5ad8481f0cc3bd-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-e03\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc6\r\nage: 43\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:04:47+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3587,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit grayscale, non-interlaced","md5":"87ca5b77ce1e13cff2867ae76f509c4d","sha1":"50b7941c8c1d6bc3bb13e42512a80ea71cbd2ce5","sha256":"e57a5da21f4f8fe1f226c957f00d69e1d64da4764b4305f58795df6a8084c591","sha512":"7f76188cb2109ded78ad61ef55c9973c622c468ebb3cdc81cad453fdba94f6dcdd49e776240476b70ec62611f65dd3523c0de69d8dc774b7f085add684d45ef5","ssdeep":"","tlshash":"9f715ba33754e78bc5cf0b73cdb55e829f294082dfca5449748d98938b41b922a8b602","first_seen":"2025-11-22T11:30:21.507445Z","last_seen":"2026-07-29T17:03:54.752007Z","times_seen":400,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/css/b5a5cbb6f243629e.css","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:28.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /_next/static/css/b5a5cbb6f243629e.css HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/pay/TBC3EAGJ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Wed, 04 Feb 2026 20:05:28 GMT\r\netag: W/\"9189-19c0ede4a58\"\r\nlast-modified: Fri, 30 Jan 2026 12:26:15 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235528\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235528\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37257,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (26379)","md5":"57e7411eef2153329966e29910f4670c","sha1":"956675469a6095a932510097d6b044466e9e4773","sha256":"507096a53c3b6b6bd2b2cf7fd162d52270099af8ed8248dfcdba75bbe36a2ab5","sha512":"d5d9c52c647e437d7e04184fbbc8d2b8cae777d3ea00f1985f4e0b650ca7aab0d92b92ccdc185afc58fb213e73bf55c1213ba721388cafe9e2597a26ea9f1934","ssdeep":"384:5NS7gZ7U1FwV+aux1f3Dvb1B7YK1//1u1W/JQkz7nutmPM5wBvwsNwnXw8kxLYIZ:jz+auTh1/NIW/JD45wBvwsNwnXwI0h","tlshash":"aaf2e918e21aa53dfc7beca375c83a23712c5011d6690a9aef252395edcb06303f7748","first_seen":"2026-02-04T19:51:15.888619Z","last_seen":"2026-02-06T18:25:28.641084Z","times_seen":6,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/5609-1550415b92b6ade5.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:28.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /_next/static/chunks/5609-1550415b92b6ade5.js HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/pay/TBC3EAGJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 04 Feb 2026 20:05:28 GMT\r\netag: W/\"38cf-19c0ede4a58\"\r\nlast-modified: Fri, 30 Jan 2026 12:26:15 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235528\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235528\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\ncontent-length: 3714\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14543,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14543), with no line terminators","md5":"9d2698849e5bfbf94fd6c1b0796fb833","sha1":"717aef7f52774bff3eea758c2894d44b4f3b9c5f","sha256":"2bdb8146b8702c71ff3cce5b5e9ec1b18de020b9a44bec3ab0f1ee0210d602dc","sha512":"69b6bee4491ca6b08db8c2feaa87cc19e83800c11b3dc6d39980d98d829d97d87faffc21aa380dcc83f08ace635909177383c0820bf52dcf0e883502a28578e2","ssdeep":"384:gChOoooeoqtYh7o9oho+tICuo28mHmMFwqDIs2v49PcGhOoooeoqtYh7o9oho+tV:NYoooeoqtYh7o9oho+tIfo28mHmMGqDh","tlshash":"b562c5d8630053e9f942c77899167595786f39fdab59c4a8d3e82c3096a40ec3e4bfc2","first_seen":"2026-02-04T19:51:15.870992Z","last_seen":"2026-02-19T05:40:38.028111Z","times_seen":15,"resource_available":true,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/favicon.ico","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:29.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/pay/TBC3EAGJ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/x-icon\r\ndate: Wed, 04 Feb 2026 20:05:29 GMT\r\netag: W/\"358-19c0ed97be0\"\r\nlast-modified: Fri, 30 Jan 2026 12:21:00 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=2hNghJzFlLd%2Bnb%2F2ecgo9LtnCzYLjANI6Bj9R7YLq90%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235529\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=2hNghJzFlLd%2Bnb%2F2ecgo9LtnCzYLjANI6Bj9R7YLq90%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235529\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\ncontent-length: 856\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":856,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced","md5":"d999311a8506a6e8739bb504ed06b009","sha1":"ab10d6fc14c8780e3eca25ce0fcedd3a4bdfae20","sha256":"39b7dbded284d8d5b9ddc44722b75eb5f804cbfceb56c22e2fe9434a5b833b20","sha512":"3e8983b34b630f54dce5db1d038bea6224767bd4bdbb89ad241bb0ea21b485553d38ecb7c03b1088608210a4b41b1c32968f597d75c853334f66116ad8f1aea5","ssdeep":"","tlshash":"8511daf668c65854c23978366f72e9f94373c02540d5c8883286f8e601b82fca139795","first_seen":"2026-02-04T19:51:15.853891Z","last_seen":"2026-08-02T04:22:45.06525Z","times_seen":55,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/safepalwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/safepalwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 735\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-255cbd294904492343f282ba93455b7f-2f334e16088389e1-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-2df\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc5\r\nage: 97\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:03:53+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":735,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 4-bit colormap, non-interlaced","md5":"0538634f954d877d5ed633b704fc475d","sha1":"97cf8e669eafa065d964a577c7f58af15d7555ac","sha256":"2173dbf44e5b986d15cb52b206af9e85e2dcc4808aebd6f7f29fdb5949f5fa4a","sha512":"a8d4a748977b04a6e5e2a6cc205822a9286cd2c0c8d0330d83bb8ea7debe5e8460d2a62910c9be688b67e1c33444d31c111022993b3b91ebebb2c51b3d6af696","ssdeep":"","tlshash":"430160f4cece0801853f8c215418a4c8e940c28fa06ac7330db4cc1a61c9c90a93f512","first_seen":"2024-06-30T12:44:46Z","last_seen":"2026-07-29T17:03:54.748878Z","times_seen":1069,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend-production-828174075858.herokuapp.com/socket.io/?EIO=4\u0026transport=polling\u0026t=gj2lkq1h\u0026sid=nmUdXDfdr1frv3Q5AAE8","fqdn":"backend-production-828174075858.herokuapp.com","domain":"backend-production-828174075858.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"18.208.60.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:32.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.herokuapp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BC:F1:45:C8:21:19:7F:72:A4:09:2F:2F:B0:51:8E:A3:9E:AF:0F:BF","sha256":"7C:C7:DF:0A:D1:20:69:CA:B9:7F:44:40:75:60:56:00:94:ED:A3:72:FD:A6:ED:DC:49:F8:84:38:52:8C:55:88"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=gj2lkq1h\u0026sid=nmUdXDfdr1frv3Q5AAE8 HTTP/1.1\r\nHost: backend-production-828174075858.herokuapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://paymentcryptomus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-store\r\nContent-Length: 113\r\nContent-Type: text/plain; charset=UTF-8\r\nDate: Wed, 04 Feb 2026 20:05:32 GMT\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=Srbk6FM2ntGZqh5Mtb3yQWgmgo3pUWjmychLziAFNmM%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235532\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=Srbk6FM2ntGZqh5Mtb3yQWgmgo3pUWjmychLziAFNmM%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235532\"\r\nServer: Heroku\r\nVia: 1.1 heroku-router\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":113,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"0c4dba7d28f5a2cf0248d8057b3109d0","sha1":"2d9befd8913e3ccca742ffe51f2fd15ecf77bdd3","sha256":"ea79866c34ed664d17a5fd6b192cb4bec53fa9738e692eff28600e8cfa3aa8be","sha512":"d6ba7e70dd3f3432dc485f75b6638f667ce7a0e0085fc04a9a6296f9a3cb27fd7e75b7a0ec2532cacc472d41ba8f57e32c354790d873287e4aa54ef08f2a8505","ssdeep":"","tlshash":"7cb012410b01141d530341e2fc71a1f0d368e9115b422cda079d8e284a39acfb2772d7","first_seen":"2026-02-04T20:05:56.619269Z","last_seen":"2026-02-04T20:05:56.619269Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/3794-b16d22429af19980.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:28.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /_next/static/chunks/3794-b16d22429af19980.js HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/pay/TBC3EAGJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 04 Feb 2026 20:05:28 GMT\r\netag: W/\"2fac1-19c0ede4a58\"\r\nlast-modified: Fri, 30 Jan 2026 12:26:15 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235528\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235528\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":195265,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"132a3a987b79559e5e145d2629a2f904","sha1":"30c0b9571c7abab379aba15e72861b811347e6eb","sha256":"f377dd2981c53b54b9177262f3edc3a57de414dc849c0af9601f8089f1e38e35","sha512":"93954f7f35a93bb4f0a08c376104b1dee1b3b9f2bd0c5689e83498ecf4ad6932f61343e815c9f874589dd4c545963c7557233f4d1908a33925e85a614d74fbfe","ssdeep":"1536:5OVOEGCzPAfNuGIzANAPeEkTkbS81W/cxAhxMEbS+iBzuEOsx4vJheboQtT9elUf:8sNAPeEkQpvH3O3YbNA2FtKHm","tlshash":"1b14e9fa35d0f8a207a740e6c43f4006f2295c77145e74a0a3e6dcd975a45dea0b3faa","first_seen":"2026-02-04T19:51:15.86Z","last_seen":"2026-07-12T21:09:00.036638Z","times_seen":58,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/6809c4f0-b55e5589f94f439d.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:28.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /_next/static/chunks/6809c4f0-b55e5589f94f439d.js HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/pay/TBC3EAGJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 04 Feb 2026 20:05:28 GMT\r\netag: W/\"3b7b9-19c0ede4a58\"\r\nlast-modified: Fri, 30 Jan 2026 12:26:15 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235528\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235528\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":243641,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21800)","md5":"947521f639a7a600afce157d322ab1f9","sha1":"5a89d321f28c96a1e9ccc4557bc70b8028a6984d","sha256":"a9b037de2b374eb94039ab3fb8293dde4146c935c8198e6704e73e5111400a21","sha512":"69c79dee0dc1749d87e5a4f26d9396a1edf5fb34cb6e704368b0e7bbfd29585efa308f6df225233563632e75d64f36f953a7b6018d7d2c47848ed315995304c3","ssdeep":"6144:2z+KTAtWq7KvsdeevgMlrCOWF92Atf6RjA+EVVGKlcM4qo9rB2WFkwC5ZUE7IHj8:+8WqqsH1l8","tlshash":"cf3429dab387b261234b47d944774152f32e18fa180d857cfb69498a3f50988d2bbbf4","first_seen":"2026-02-04T19:51:15.882927Z","last_seen":"2026-07-12T21:09:00.045871Z","times_seen":52,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/app/layout-377446f569a1d2bc.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:28.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-377446f569a1d2bc.js HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/pay/TBC3EAGJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 04 Feb 2026 20:05:28 GMT\r\netag: W/\"6fc-19c0ede4a58\"\r\nlast-modified: Fri, 30 Jan 2026 12:26:15 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235528\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235528\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\ncontent-length: 915\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1788,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1786), with no line terminators","md5":"25819febebfa985f0fab701420a9333d","sha1":"3967debe29f1b2eb0a534efd66509a5a81b0016d","sha256":"6d4f5ab9a3b1d850f48ce3e97ff68dab8297a721b76d4f92e96650e728b7acdd","sha512":"6942228dc40f1f889d7735a82840da909e5aebdaad950779bd6d2c5c76aa2ab7114a0f13ec9ef011c31878a346dfe26c7f125d87b5fc9be7210d08c85b7bc0c7","ssdeep":"","tlshash":"75314445014439aa27af094df63bdd4ab026252c0816986457acdcba3875fe4a2b2bed","first_seen":"2026-02-04T19:51:15.846242Z","last_seen":"2026-02-04T20:05:56.622176Z","times_seen":2,"resource_available":true,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/bitgettonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/bitgettonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 805\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-ad00f17c7af92146d2edf162cb0baf7d-b340c6d515a63c4c-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-325\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc8\r\nage: 189\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:02:21+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":805,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"e3234b49342c8b98e1bc18701f14697b","sha1":"a586c5d69f22119f46e774cbbdc1cb3bb6bed9c4","sha256":"8f269136c30e6b880e03e3f6db1501c4023f8b8d1cd4ae841aed85ec1501bc61","sha512":"73a189fed61c6c60fa71206a0ad48962d330878fab88579e3153c4251ee9fdb40ba1f43f8f876c74c2849bc24ae4bf78adeda37751e4153a5540060fa6b2e714","ssdeep":"","tlshash":"070166854312d45eff1b8d3a0031d7d097a559f6c236a8a86bff152b1e3140c66db391","first_seen":"2025-11-22T11:30:21.50347Z","last_seen":"2026-07-29T17:03:54.751353Z","times_seen":401,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":43,"receive":4,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/uxuywallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/uxuywallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 2006\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-ade97124a62c8c0ad567e81960f17a4b-ed37ff782d104088-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-7d6\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc4\r\nage: 43\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:04:47+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2006,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"341b60fd079e8dbd6019ba142d4d2b78","sha1":"1b6ff34914394c495bcc6c2e4e7aedf5313668d0","sha256":"e411f1b732b3ab0aa8a503ec3e26f9f60c2b8617beca17967bf81115de56b217","sha512":"2b95e6895292db780caa0e60a2477bc50e17252e46f8b831c14e15ffec6965040f6602b3b9008a4b28d7230f9ede3b121e7bc606aa8ab1ce93c7afd8e40f7c63","ssdeep":"","tlshash":"24410ae34268dc2cd4670ef6e8bab5c8877620cc6a30550a9d62a0ae108344deb1e3d5","first_seen":"2025-11-22T11:30:21.525633Z","last_seen":"2026-07-29T17:03:54.762105Z","times_seen":400,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/defiway.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/defiway.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 20702\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-0f3a6a71f6af13e93c7f1b6b6b7d63b3-dd7ad28a262b43bc-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-50de\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc5\r\nage: 118\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:03:32+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20702,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"6fe8902e9f84eca83e2d0f9c3aa0caf1","sha1":"3273f7b3cc278a24398aeef31157f92ed1851b50","sha256":"26019945f9a28a6f088ceb7f89ec093553618735b300cfd930bc9083f2a097e2","sha512":"dfefdd71c4a1dd66b96342be3c094a5908c6222fb1c307159123b48f5b78404cb608f4f9e1ab2377613f8f64968357f615ad2e277ddfcbb81c663fe87dcb05e5","ssdeep":"384:k23WSXzaKK4C2lCU6t7GOfhWF4NjaS0H3A:lXGN4CcCldG+WF4N+w","tlshash":"0e92e04400af6a2f1f6bd02deb845092a5569ef22d158834bfcb82c7d6d833d98986dd","first_seen":"2025-11-22T11:30:21.496351Z","last_seen":"2026-07-29T17:03:54.745605Z","times_seen":400,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend-production-828174075858.herokuapp.com/pay/TBC3EAGJ","fqdn":"backend-production-828174075858.herokuapp.com","domain":"backend-production-828174075858.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"18.208.60.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.herokuapp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BC:F1:45:C8:21:19:7F:72:A4:09:2F:2F:B0:51:8E:A3:9E:AF:0F:BF","sha256":"7C:C7:DF:0A:D1:20:69:CA:B9:7F:44:40:75:60:56:00:94:ED:A3:72:FD:A6:ED:DC:49:F8:84:38:52:8C:55:88"}}},"request":{"raw":"GET /pay/TBC3EAGJ HTTP/1.1\r\nHost: backend-production-828174075858.herokuapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://paymentcryptomus.com/\r\nContent-Type: application/json\r\nOrigin: https://paymentcryptomus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 155\r\nContent-Type: application/json; charset=utf-8\r\nDate: Wed, 04 Feb 2026 20:05:30 GMT\r\nEtag: W/\"9b-CXVA7fMp2mAYLFrR9KEeEEIMtWA\"\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=NYqf8Buc898k8iES36Apq9rGmXcAtmOS1mQiDHUfDg4%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235530\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=NYqf8Buc898k8iES36Apq9rGmXcAtmOS1mQiDHUfDg4%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235530\"\r\nServer: Heroku\r\nVia: 1.1 heroku-router\r\nX-Powered-By: Express\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":155,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"81be5e9c48f6ca7aeda8ce814b82e91d","sha1":"097540edf329da60182c5ad1f4a11e10420cb560","sha256":"58830cc303faf9f63c09b52df18657c916ff9623ba63f878cb08b1c0e08166cd","sha512":"a2f29530e4a26cecac84e2030cd955f3b26eb00fd048cce0f0a518683ec96d010b72514cd7e6512f94b4ce500fd938c15307464e957b50c3d54195ffbe9645d3","ssdeep":"","tlshash":"f9c08c0b2b681370088262c15cea103a22b9a66786e200a0ce8e6a4c85a82203913a2a","first_seen":"2026-02-04T20:05:56.624828Z","last_seen":"2026-02-04T20:05:56.624828Z","times_seen":1,"resource_available":false,"data":null}},"time_used":645,"timings":{"blocked":-1,"dns":49,"connect":95,"send":0,"wait":208,"receive":0,"ssl":232},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/app/not-found-61c46764a77362ab.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:28.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /_next/static/chunks/app/not-found-61c46764a77362ab.js HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/pay/TBC3EAGJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 04 Feb 2026 20:05:28 GMT\r\netag: W/\"c48-19c0ede4a58\"\r\nlast-modified: Fri, 30 Jan 2026 12:26:15 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235528\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235528\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\ncontent-length: 1360\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3144,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3144), with no line terminators","md5":"3b7c6171e675214e80ae193b02c23c3c","sha1":"7e0e4bc86a74b8f59be9fc735548bc6e6355803a","sha256":"88737a3ad76cb907eec84d574a143a8400ccc46c40dc1b19b1a1aa36d2ce2711","sha512":"f200389b5d526532da4c174deed9455de00528ec416051587e8a1118d08ed86849fde9166b2a4c2dae6d62d6d742fb83c6af60b76453580e905ff2a2608d34d1","ssdeep":"","tlshash":"3151431c92d5beacf8224a95976de06c721f795def09c8b1eb6829300c810d87717fd4","first_seen":"2026-02-04T19:51:15.892374Z","last_seen":"2026-02-04T20:05:56.625947Z","times_seen":2,"resource_available":true,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:28.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 04 Feb 2026 20:05:28 GMT\r\ndate: Wed, 04 Feb 2026 20:05:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-08-02T18:49:23.17325Z","times_seen":38963,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":56,"dns":1,"connect":7,"send":0,"wait":22,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/telegram_wallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/telegram_wallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 24341\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-bbe6dcb16ae57149df190c15c6aa8f12-b28b908ac0806e43-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-5f15\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc8\r\nage: 160\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:02:50+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24341,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"ea821489af4c2e485a86112942971907","sha1":"3fb8aab37a0bc8a4394c296adf2249f1ad494faf","sha256":"6c30dcf8baf07a22361167e8dc7e8152274db474fadf9eea0a1e7bcd9a24df9e","sha512":"c56226380bc790cd2426d8ba38acd67e52a7247302e653646c37d7809a229d6ffc085a1030de216392c51ba5c90ea6b27d43ae3700236abbadfe18f8c5b052dd","ssdeep":"384:U6Mamo5oPY3GXjRKfmka0+sGGoc5Km3ow/745k5o1RH1kL4DcfXSPG0u/Whpr:UlamvPKGXj+mF0TG3c53Yw/745wo1o4R","tlshash":"41b2e1c9968bd133bc4a5d4865985e39c6282c363d13d6056f1b72b88bf380e91d8ed9","first_seen":"2024-04-21T23:23:38Z","last_seen":"2026-07-29T17:03:54.746967Z","times_seen":835,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":26,"dns":0,"connect":13,"send":0,"wait":32,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/dewallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/dewallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 42298\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-8d67817f67641265e9ee62038ca4e191-1fc2383687bef01f-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-a53a\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc8\r\nage: 160\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:02:50+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42298,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit grayscale, non-interlaced","md5":"34717c55f237500cb1400c90bcdebb01","sha1":"81848e39f29d0b944f283453ee1659c6c8a22723","sha256":"364eacdfeee2020e26d196aac612ac93cc8aa3ebc707d02ca57e9aacaaef541b","sha512":"732e94a9ab2004ec2f473c87d9beeed448e48b431176e698ea9c6f0c63d06057689c90c485fb0387988e9331367cafaaea40d2ab8e4104e108dcaab5bbc2fbe6","ssdeep":"768:YfrDuKY1eR4xH9a+jbGg6oRrWP6AnW4KIH0L2kApMJiDr9eTzddSA3PuWhwST:YfrBY1XxH9vbGsWPZlH06kSMJE9eNdVz","tlshash":"3d13f2b2e8c6c6ae8452a8e24d9eb4af0c457db622a53f19c405f44b5f74d27321fc1b","first_seen":"2025-11-22T11:30:21.476583Z","last_seen":"2026-07-29T17:03:54.760529Z","times_seen":400,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/xtonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/xtonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 6673\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-c3f987e717473f92c09ec847ae1be37c-b992db821f269507-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-1a11\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc5\r\nage: 97\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:03:53+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6673,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"3cdb7697d40d42ba9183cfec43e867cc","sha1":"5f99574ff04392bae80c5c23f5892972ebb71e23","sha256":"d52abdfbc9303922359179dae6503455e022175e2b559edd7b53b5c797bcfec9","sha512":"3169c2a3895844ff32f42a70ff7ae781826e6469d7dce457ce5b6f2e0a386f8b3fcc71fb9daa8a7d678157d7a1d19b99ccf372ddea3c86c4d8efeb827deb9064","ssdeep":"96:UscWJioWzrqf2mWHxBYp4JSFrEtVGWDg3mWQpILYmyBgPLotkw3enAEVJzs1:UgwoWZjxuWOotVGuTpuYmyFtkwuAEm","tlshash":"7cd15b93cb111271e97d46b108a35b208fcad67134a757123b78a638eee6641b093f94","first_seen":"2025-11-22T11:30:21.524252Z","last_seen":"2026-07-29T17:03:54.749525Z","times_seen":400,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/main-app-d84523bbf11a34fc.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:28.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /_next/static/chunks/main-app-d84523bbf11a34fc.js HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/pay/TBC3EAGJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 04 Feb 2026 20:05:28 GMT\r\netag: W/\"211-19c0ede4a58\"\r\nlast-modified: Fri, 30 Jan 2026 12:26:15 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235528\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235528\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\ncontent-length: 529\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":529,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (529), with no line terminators","md5":"acb8b634298ea310dce24f419d318446","sha1":"9b7dfee207d424821800b56c4151e162c5a8ea8b","sha256":"2d187ddf94bf781bef15826cf8d634052a864bb14653fe2431529fa106ea65b9","sha512":"0555c8c7edc2bc56110419ec555e19a202844b20ded02030f1a637799adec5b737ab14b2c72eb8d4a3d393f16537d90888c2726705ff8ba18fd36d95963af922","ssdeep":"","tlshash":"63f0f45a4f1df41f5c26ae64fe966ce2285f8535102b4e607900ee612d27facd2a1408","first_seen":"2026-02-04T19:51:15.872815Z","last_seen":"2026-02-04T20:05:56.629163Z","times_seen":2,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/binanceweb3tonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/binanceweb3tonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 1607\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-c0ac90e742f2231899109b76393935a4-7fe487c8e07e27f9-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-647\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc7\r\nage: 80\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:04:10+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1607,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"292e89cefe60c940848daaf7ab58e11b","sha1":"07d3ede03ae361212cd9c7d0f91cf9edf3c8583c","sha256":"0cf1b71e664487b9bbfade7ff380f3c7388f22ff82b2331cd1326c5242f2c5a5","sha512":"f3410481b475b54a5d6a2b2ef1bd6bf8963ffa10e003d575e0a6233c2e5d701a826fa86dcd52057b7bbbb15ec12e2f2e92d9bdec5e725eb35633419f73cd15ab","ssdeep":"","tlshash":"4131eacf35170ed3ce765b56babe0c736d89157033ca2845527d25c55406d0c43cb462","first_seen":"2025-11-22T11:30:21.504787Z","last_seen":"2026-07-29T17:03:54.753015Z","times_seen":401,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":46,"receive":8,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/media/e4af272ccee01ff0-s.p.woff2","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:29.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /_next/static/media/e4af272ccee01ff0-s.p.woff2 HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/_next/static/css/b5a5cbb6f243629e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: font/woff2\r\ndate: Wed, 04 Feb 2026 20:05:29 GMT\r\netag: W/\"bd30-19c0ede4a58\"\r\nlast-modified: Fri, 30 Jan 2026 12:26:15 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=2hNghJzFlLd%2Bnb%2F2ecgo9LtnCzYLjANI6Bj9R7YLq90%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235529\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=2hNghJzFlLd%2Bnb%2F2ecgo9LtnCzYLjANI6Bj9R7YLq90%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235529\"\r\nserver: Heroku\r\nvia: 2.0 heroku-router\r\ncontent-length: 48432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-08-02T18:49:44.812071Z","times_seen":85763,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/css/439623a40f457636.css","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:28.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /_next/static/css/439623a40f457636.css HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/pay/TBC3EAGJ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Wed, 04 Feb 2026 20:05:28 GMT\r\netag: W/\"faa7-19c0ede4a58\"\r\nlast-modified: Fri, 30 Jan 2026 12:26:15 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235528\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235528\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":64167,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (64167), with no line terminators","md5":"4a21af0eaed064eecb8abada4957f276","sha1":"e85ccbe8854b73c70c523ffacf7280bb8057ace5","sha256":"baed1312387ed6712e71414f4c8b2769fd4d69b6c07afd8966b88238d0ab6a8e","sha512":"59c13d919a61f28b070e1c395fd35a23ac98e626a5665ace28a79e6bdac29bc2f56b73a2af43e8f2a13f03e1c84f943c7f5e6d870186dfe99b60b70ea6631272","ssdeep":"768:hSkyIEFGmQDy+QCEExfMb5QcfQJQzFLadqnt9qJB3l6A:CIEFG7y+QgUs+NM3P","tlshash":"8753c8a59220b33db827d8399dd89a9d9124c052cf264bdefd52a23c87c77d12a713c9","first_seen":"2026-02-04T19:51:15.842283Z","last_seen":"2026-07-07T05:06:07.158209Z","times_seen":50,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/okxwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/okxwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 50253\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-dbf6df005dbd9ca85de0cd2419c29b8b-5f82a7d4b7e83562-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-c44d\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc7\r\nage: 189\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:02:21+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50253,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"cb9159c1e2edd95e3a1aa12a3fd6c19b","sha1":"9478e1695f1e905cc7eae54768e895683348b484","sha256":"c5d0323a3d22fa19a7b31663ef57e66bb2ee14feacd110386d77da70510f2ae0","sha512":"884c20e6550acd343bcb8a4300a3706b4bd8db2d3b8a65a65dae59fec3dbbc882ef47fa9f43a3cca0c70554c1fc3176b99ddde1b5091596fc5584adb7753a3bf","ssdeep":"768:h7kYcFW8PletzHHsDYV5aurztuvndxlTgftq0iZs2mLG3+TSrnZ7cGee2mKU/9De:hU7mHMD/uUvn3pgf80iiLG3qGeme97","tlshash":"3633029bff6b7cc60d6110d30d28079b960a9146ec70dc97e406552b1bd8b82b7dfb61","first_seen":"2025-11-22T11:30:21.534651Z","last_seen":"2026-07-29T17:03:54.759566Z","times_seen":401,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":33,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/bitgetweb3.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/bitgetweb3.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 1176\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-33fd49fd3fe9df71908c59c7586a3d42-8757ff14c4ea9f3c-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-498\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc8\r\nage: 97\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:03:53+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1176,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"5d9631b0982fce76f8acc8c1c1f29e3c","sha1":"7e9d2c3adaf1a34c615c802c6ca5008ea9e46e5d","sha256":"da61705b68b0f898ebbf4416c74a0bbc94d98253af445b4b93f5498905d81111","sha512":"a00da5a594b804cf3bedf492e48b6f09287fd208c4e3b0c24b75808207ec66d264842b8ec528b6b56dfd1a698e0986c5e5d3794d0df10a8cad3bf0dc8c2707b1","ssdeep":"","tlshash":"2d2111ebcd5a11bf145b620a024b35d054b6d56f25028ecedf15287808075d6f6b6a87","first_seen":"2025-11-22T11:30:21.528379Z","last_seen":"2026-07-29T17:03:54.743781Z","times_seen":400,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/media/e4af272ccee01ff0-s.p.woff2","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:28.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /_next/static/media/e4af272ccee01ff0-s.p.woff2 HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://paymentcryptomus.com/pay/TBC3EAGJ\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: font/woff2\r\ndate: Wed, 04 Feb 2026 20:05:28 GMT\r\netag: W/\"bd30-19c0ede4a58\"\r\nlast-modified: Fri, 30 Jan 2026 12:26:15 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235528\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235528\"\r\nserver: Heroku\r\nvia: 2.0 heroku-router\r\ncontent-length: 48432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-08-02T18:49:44.812071Z","times_seen":85763,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/1293-ad8b137f5002e267.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:28.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /_next/static/chunks/1293-ad8b137f5002e267.js HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/pay/TBC3EAGJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 04 Feb 2026 20:05:28 GMT\r\netag: W/\"6d0d-19c0ede4a58\"\r\nlast-modified: Fri, 30 Jan 2026 12:26:15 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235528\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235528\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27917,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (26830)","md5":"d21be57659cf037e03080fe9feb616af","sha1":"15b2d0cee69f1e60f5652a2f7b845e5f2dce5210","sha256":"50e454a64a4abe1ef67414389adc1a78d4365ad2ff7db96064e5a8a2821e5ed4","sha512":"f2304d9bf5f9ff8c74819c6c311e3df127e112271e27d08b49066205f72102aa39539c4e0fc8a58927e6001c5bd47c6a0b100a0f8098905602de2c0163d251c3","ssdeep":"384:ngnIYIOL076rKuQHoHK0V/BMbu7Q2NES3EjLl8rgatbluwPgzwFe4Sx8:gRjiIq0V/B+EQ233Et4C6gzwFa8","tlshash":"94c2f86fe2d7fb3c47defa48e22908446e1a1b59ca8461f4aac86441bc7c4d70247b77","first_seen":"2026-02-04T19:51:15.85156Z","last_seen":"2026-07-12T21:09:00.076657Z","times_seen":52,"resource_available":true,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/4936-b8ab84e20fd02c34.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:28.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /_next/static/chunks/4936-b8ab84e20fd02c34.js HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/pay/TBC3EAGJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 04 Feb 2026 20:05:28 GMT\r\netag: W/\"589c-19c0ede4a58\"\r\nlast-modified: Fri, 30 Jan 2026 12:26:15 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235528\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235528\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22684,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (22684), with no line terminators","md5":"30c8fff02498112a7204dcfe1ef994ba","sha1":"b92ae74472a33b09e9bee3f46cf5889105db7e6b","sha256":"d05954f993e95b54e215ec41c2cb727687c6667daed14a60f9c6c62ce6d799b2","sha512":"9ff2d18b680a2b211d3bb79ae341b883380445ce5290ddb250b4503087673e0f4ac54e48ab2eb5d80626550658ea32e752ea53806d1df94faa31c234330744e1","ssdeep":"384:hYoikqO5pU4HF3kW1ZZNjTgWxIrz66/chAS9HYWOgI6AEg2RmhKFe4m8+TJtpskQ:WYpU63IrYzVRmhKlm8+TRRIGzZTAogL","tlshash":"29a2d88db751b16b53ab51c6442f0405e2fea9a8241d096cfb51d4c3b8b8da590f7f38","first_seen":"2026-02-04T20:05:56.633487Z","last_seen":"2026-02-06T18:25:28.645746Z","times_seen":3,"resource_available":true,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/tonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/tonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 5386\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-e3531d5e80a802abd226fc959ea62b1c-93a7151c3b3c002c-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-150a\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc5\r\nage: 97\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:03:53+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"bd4264d4c32c16d646517faf4462e5be","sha1":"df6493d70355759579c8941728747814ac5f081d","sha256":"6da4766fae3c3ba2cb931c8b3485461fddc96d6244cdc45fdb800e70e0e1a0ec","sha512":"1e63fc6f27b609bf8386333b3a535cc0a08c18594681c6344ea96dda3582ed5bb85f1bbb53f0f7c9d6b7659ec61a14c8da6b13d5f30a556779b2ebb6a39a40ce","ssdeep":"96:HzmLnGewr7Elc/cd0sNz13DX8DxS6fzuenbEdUApFXnEVMNlW75wm+o:HyDyrkbRzJDMDxREbFXgMrAw8","tlshash":"38b18e5f3da8d243ab5c913f455cc44e3201cc857a8c4a1176acc64f606a2628feea1f","first_seen":"2025-03-22T03:47:07.763738Z","last_seen":"2026-07-29T17:03:54.750148Z","times_seen":1011,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/architec_ton.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/architec_ton.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 16202\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-ba69910de74c4bceaf91c99a73498950-f76e0c7feda16ebe-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-3f4a\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc5\r\nage: 97\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:03:53+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 228 x 228, 8-bit/color RGBA, non-interlaced","md5":"247af337378ab26527a7e001e772a863","sha1":"e5555ce55b512c99db267178c0b6776408e29531","sha256":"562fb3c02d160472278ce219266068aee29ced8b152695a66ba519ef6dc66b90","sha512":"dc562e28b94ccdfae6763b225d96b023d65a692476df4946c8131168c1d682deb990a4dbc289e8e6aa009ede05b56ab7324deb1ac96fab75f894048bc55f92e1","ssdeep":"192:eYEWkPbfZhkY8WlA82HMVGvl94k4BFgS599ARP8NdG743LVSCBUF0G7VtvBuImVe:2PzZH8Eaf4TH5gtL7wVSZWM0ImJ5E","tlshash":"4072bf6ce55034b7a1cadd9421ec480a4e319c0ad6ba4cd87b8de484cfdcade0c9d6ca","first_seen":"2025-11-22T11:30:21.470356Z","last_seen":"2026-07-29T17:03:54.755275Z","times_seen":400,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/sparx.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/sparx.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 12031\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-40b31971673da4d614992260fe46da7e-e94fc17dcd29515a-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-2eff\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc7\r\nage: 43\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:04:47+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12031,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"350d95923ef7019d8c78aa10e3dcc84c","sha1":"f2dd0e01a18a84ac6310bb609df5a3a52c2cd35b","sha256":"d380702b04582bb035eb3e5ebfb4cb99b1944447fed694d759e5b87cb0502b17","sha512":"ac6a84ea2bcb39b631b3eada1b91042c58f3b9650e8bfd52c5f7a473b5b2651a03c2ed3bbc0fa281710f11feff2a0d7924a47f770d95fecd553e543f0b61a3e5","ssdeep":"192:wS4DQJ05f0IFbka5nldHEujoV152XcyLNH7L1GflxCNH/slQvlgmk7uoHWIaLbog:XiXf0i1fHpjuHGx9ilx06QvAu3IaL0zk","tlshash":"b0428ede615d3ac9e13a13f537db186b2e9723bec012b29d29137f160e7a00a9572c5c","first_seen":"2025-12-24T06:30:42.004317Z","last_seen":"2026-07-29T17:03:54.734335Z","times_seen":507,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend-production-828174075858.herokuapp.com/socket.io/?EIO=4\u0026transport=polling\u0026t=gj2fr3nt\u0026sid=nmUdXDfdr1frv3Q5AAE8","fqdn":"backend-production-828174075858.herokuapp.com","domain":"backend-production-828174075858.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"18.208.60.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:32.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.herokuapp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BC:F1:45:C8:21:19:7F:72:A4:09:2F:2F:B0:51:8E:A3:9E:AF:0F:BF","sha256":"7C:C7:DF:0A:D1:20:69:CA:B9:7F:44:40:75:60:56:00:94:ED:A3:72:FD:A6:ED:DC:49:F8:84:38:52:8C:55:88"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=gj2fr3nt\u0026sid=nmUdXDfdr1frv3Q5AAE8 HTTP/1.1\r\nHost: backend-production-828174075858.herokuapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://paymentcryptomus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-store\r\nContent-Length: 32\r\nContent-Type: text/plain; charset=UTF-8\r\nDate: Wed, 04 Feb 2026 20:05:32 GMT\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=Srbk6FM2ntGZqh5Mtb3yQWgmgo3pUWjmychLziAFNmM%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235532\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=Srbk6FM2ntGZqh5Mtb3yQWgmgo3pUWjmychLziAFNmM%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235532\"\r\nServer: Heroku\r\nVia: 1.1 heroku-router\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"3996e0269effc2282068e44d776509c2","sha1":"28d27b571b3867b44c2089fda659a51735186958","sha256":"f6c3da7ce1c38bae48aaa4fadfdb160dab31aa8550e34cef21a4789bef228a4e","sha512":"fde0ac20227874e603fa3a758f094a94664d6afbf84e8967ef35fcec36f29598c25415ab758c7dd2bed55e88918eb934d54b0426825ece67c977ebe7edb0cf3a","ssdeep":"","tlshash":"f1800000c223a0038222300332a8000830280008e2802208ba2c000b080300a2028022","first_seen":"2026-02-04T20:05:56.636903Z","last_seen":"2026-02-04T20:05:56.636903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/webpack-f46c3bf09d77875e.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:28.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /_next/static/chunks/webpack-f46c3bf09d77875e.js HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/pay/TBC3EAGJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 04 Feb 2026 20:05:28 GMT\r\netag: W/\"17d4-19c0ede4a58\"\r\nlast-modified: Fri, 30 Jan 2026 12:26:15 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235528\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235528\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\ncontent-length: 3443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6100,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6100), with no line terminators","md5":"16385972f7311836a6a9633b1c5a58a2","sha1":"190cafde997617f74b35191ff00c67a2f322d4d4","sha256":"5f4cd1d82d6fe974f4d22fc9c9401008ea7e6ca41ab51b0eab4559e89c75a179","sha512":"fefcc47d966379572d7b4584bc95f1a4726fc9d59d2b2319ce901e18a2900a0215ced52234bae820fa98e431b6d91b0d2598fb6884f03a4ba8f7ecf6d47a0d7e","ssdeep":"96:zxLBsNQqNAX8F1evEmz86dT/5X5+0nWd1r74hqTEexVaPNV7ILsOGFB/zl2eJg+k:tLFAAMrecmz86d/5XtWd1r74iVxKNJI9","tlshash":"72c11ca926a8f4b62f7101946c3b5c60b106e1323c2e44e1e35bc9b56831eb95937fb5","first_seen":"2026-02-04T19:51:15.880842Z","last_seen":"2026-02-06T18:25:28.637152Z","times_seen":6,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:29.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:01 GMT","end":"Mon, 06 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"32:D1:51:F3:25:53:74:EC:B9:1B:D7:7E:15:C3:08:AE:8D:84:63:44","sha256":"7C:E5:93:66:E3:68:18:E9:BB:F3:0A:10:43:B7:30:2F:55:66:99:2C:37:0C:EE:D9:DA:5C:8D:5E:49:17:7B:F6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://paymentcryptomus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Feb 2026 17:24:59 GMT\r\nexpires: Thu, 04 Feb 2027 17:24:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 9630\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-02T18:46:53.96137Z","times_seen":251270,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":97,"dns":1,"connect":29,"send":0,"wait":29,"receive":40,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/cactuslink.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/cactuslink.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 2402\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-6dee8539ecab8348117f45a2d0002a1d-905bd72dfd6b0e2a-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-962\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc6\r\nage: 97\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:03:53+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2402,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"9571ca461ce9dd8f0f042f28d3a1c27e","sha1":"d0eeaaf50dde6b257b1b04a67a9ff0330cfb36e7","sha256":"20c297ad923829fae31753cb8d1bb92f5955e117052f7eacc962b25c0f60dc2f","sha512":"d336ceff51fb4d0309bb95e2eebbd657f09d12ce577b0a3ca514837e32aabbb7bd3d888016eb4b6fa3fb70fed617e468d4a8127f9b2d749aa9f6400bb5498a38","ssdeep":"","tlshash":"ba412a430319bf3175e18a155b61978edf6ec89cdf2c48acf59b660a1915388aac26c8","first_seen":"2025-11-22T11:30:21.490083Z","last_seen":"2026-07-29T17:03:54.700716Z","times_seen":400,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:01 GMT","end":"Mon, 06 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"32:D1:51:F3:25:53:74:EC:B9:1B:D7:7E:15:C3:08:AE:8D:84:63:44","sha256":"7C:E5:93:66:E3:68:18:E9:BB:F3:0A:10:43:B7:30:2F:55:66:99:2C:37:0C:EE:D9:DA:5C:8D:5E:49:17:7B:F6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://paymentcryptomus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Feb 2026 17:24:59 GMT\r\nexpires: Thu, 04 Feb 2027 17:24:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 9631\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-02T18:46:53.96137Z","times_seen":251270,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:28.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Wed, 04 Feb 2026 20:05:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Jul 2025 14:26:51 GMT\r\netag: W/\"6888da2b-1bd46\"\r\nexpires: Sun, 08 Feb 2026 20:05:29 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":113990,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"70dbd7ade763706614c7ee99973dcc9c","sha1":"0b980ef4fe3e17d253fc2cdb672f1208736b733f","sha256":"b47f6cb105860d35b4ae512c22696a33157a365f4c885a33488f22ea8a3b6a03","sha512":"03c1f60831856975b61bea126ead239f116235fb0422178425d6b8c86553a3548d487c919f0f3f81e14de201680f63b7be24106589faffd8f3c56b28c2d19b45","ssdeep":"1536:pO5TpRdo54F0WN2Zbjcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV76/xHK8ITrm:s5TpRdccKFU76x1H","tlshash":"6eb32e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","first_seen":"2025-07-29T21:33:08.487755Z","last_seen":"2026-07-18T07:05:28.914407Z","times_seen":3814,"resource_available":true,"data":null}},"time_used":2158,"timings":{"blocked":1042,"dns":13,"connect":23,"send":0,"wait":48,"receive":0,"ssl":1030},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/assets/Inter_SemiBold-BClnkAft.woff2","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:29.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /assets/Inter_SemiBold-BClnkAft.woff2 HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/_next/static/css/439623a40f457636.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 04 Feb 2026 20:05:29 GMT\r\netag: \"ggxxgjjdxs6wo\"\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=2hNghJzFlLd%2Bnb%2F2ecgo9LtnCzYLjANI6Bj9R7YLq90%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235529\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=2hNghJzFlLd%2Bnb%2F2ecgo9LtnCzYLjANI6Bj9R7YLq90%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235529\"\r\nserver: Heroku\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 heroku-router\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nx-powered-by: Next.js\r\ncontent-length: 8952\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":8952,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (8952), with no line terminators","md5":"21885463c8b73851a8f1b72e78de7137","sha1":"fdaca2c0d02a7db583606c71c1ef7fbfa46c6ece","sha256":"eb8394dc9a8a77da7019366156915e0392739e4288b1d5ade3f58f365619378c","sha512":"8a9b508765bc9e8e74709d8349f2a8dbb2986c6a1f030c9d5a7182f51ea39806a08f7a93154e3c22754023558fbcec8c17248acd8bf30035f4820b5ee6415c72","ssdeep":"192:tSBVCBCUOoFj0HnvqkL6z2QmsKBye5sgfD7:tSXa3OoVSvrT/lL7","tlshash":"e002352fbd05dd5aec7b6d69413dad3a60cfc83b8624c9b4c2ddcf5806819b61b99c80","first_seen":"2026-02-04T19:51:15.819862Z","last_seen":"2026-02-04T20:05:56.641716Z","times_seen":2,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/hot.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/hot.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 45772\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-61e6f284c8057d6e7734a0efa0efa936-9d0b4b9ac6655da6-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-b2cc\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc7\r\nage: 160\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:02:50+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45772,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"e0c38efe88759bb68b5c92d1aacc16a7","sha1":"4210f53af06a80b16d33ef2e91ea36da1ca4a18b","sha256":"e76b11422e3b828486011d5dd9bd915a430f4eee4adcd886d3c2ea0cd22af212","sha512":"9b3c5c58b7c8a96b6e6263f34db1799096305d64565a8e1a91b3ea682f30b7415718475d478cf5b5927e2014b1baf3e234e063329f96eaf824562e530defd30f","ssdeep":"768:bi4+80cr13Z6pTZ3DvnfO4J+JjxrcxB0iRXPClWJbHCN8MUwvQliqmXH41M+KZ/r:biVSr1sbTvfPaixB0iR/OYbHCNZUyee7","tlshash":"5d2302c35f518748ade59b4e8fa28464d27fe999b3417fc20948eac0c219e54fb428de","first_seen":"2025-11-22T11:30:21.526783Z","last_seen":"2026-07-29T17:03:54.710099Z","times_seen":400,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/tomowallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/tomowallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 764\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-fb88d1396e0285692d15657ef147200b-42d4fb04ea506153-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-2fc\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc4\r\nage: 97\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:03:53+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":764,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 75 x 82, 8-bit colormap, non-interlaced","md5":"591694f0be4f3e0593e9e8d9ea3aeb31","sha1":"911632556978f58f5f7299d7e8e659535aaebcc0","sha256":"0b338c2788aeccf2e2518d357fb136dffb28ad0f6312cd417c20ee382b9338db","sha512":"b389fe4083832ce8d6b886b658ce0d5a8a83c40e73e5f6d4d6fae76863734e887e3933cacda11b6cc5ddb10a7eed507f249f4e82e80aee04ece03bad7ce69730","ssdeep":"","tlshash":"f50175c69b3c484f4ce422c10796e0d89210c4710088a01abc9b48561a7c8ef3b5eb0e","first_seen":"2025-11-22T11:30:21.469469Z","last_seen":"2026-07-29T17:03:54.75362Z","times_seen":400,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/favicon.ico?v=1770235529848","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /favicon.ico?v=1770235529848 HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/pay/TBC3EAGJ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/x-icon\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\netag: W/\"358-19c0ed97be0\"\r\nlast-modified: Fri, 30 Jan 2026 12:21:00 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=z5FPALj6%2FNybhWSn2IHmu3IdO19RqaEsGmc59Smxxhg%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235530\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=z5FPALj6%2FNybhWSn2IHmu3IdO19RqaEsGmc59Smxxhg%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235530\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\ncontent-length: 856\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":856,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced","md5":"d999311a8506a6e8739bb504ed06b009","sha1":"ab10d6fc14c8780e3eca25ce0fcedd3a4bdfae20","sha256":"39b7dbded284d8d5b9ddc44722b75eb5f804cbfceb56c22e2fe9434a5b833b20","sha512":"3e8983b34b630f54dce5db1d038bea6224767bd4bdbb89ad241bb0ea21b485553d38ecb7c03b1088608210a4b41b1c32968f597d75c853334f66116ad8f1aea5","ssdeep":"","tlshash":"8511daf668c65854c23978366f72e9f94373c02540d5c8883286f8e601b82fca139795","first_seen":"2026-02-04T19:51:15.853891Z","last_seen":"2026-08-02T04:22:45.06525Z","times_seen":55,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/bitgetwalletlite.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/bitgetwalletlite.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 2008\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-b8dc7f6eba3af87bc0b98e8ecc7530ee-3e83a83a6aeac5b3-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-7d8\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc4\r\nage: 77\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:04:13+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"09790056c70e889c7f74f91a9222bc01","sha1":"26194deadd44d9a00ca48ae053924b76656e885a","sha256":"e85acd2f35d2deb9726a0db27737b931b600fd4bad9b73b3009be6ece7fcbefb","sha512":"b71f8a277680fc9cba3c8a4a272b21b8b157714a31ebaa7fd8f8dc8639ee872948dff4af3f0af395b2cebbc75f15ff7ebfbe9fa5ac87e363afc8c11eb69399d3","ssdeep":"","tlshash":"6941b6835134d5fc3e5b3826800b8f1f51ab1607d1d26455c77b98381f73ce96662b2b","first_seen":"2025-11-22T11:30:21.492928Z","last_seen":"2026-07-29T17:03:54.760124Z","times_seen":400,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/echoootonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/echoootonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 56008\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-ed92ac63ed238c5572e6882b85c56eb0-c791652a4a4970f7-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-dac8\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc6\r\nage: 138\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:03:12+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"0045354563623ba7033b82568a35011b","sha1":"d30a9a2cba690a17b513a8cc91edc1166f807213","sha256":"b795fde982e92cc1ba959c241406c4708c085481ead3d10f56dee883cb4742f8","sha512":"3a2f5a407d92e20d81bd44b566edbe377f7ae52e53d8167fc601204dfbe7ff2563abd6d05ce2693d6ace7441f930dc6a7de4a114877ef762b02aecaef0298afb","ssdeep":"1536:ONwl6IKG8c33My8czUrOrqIHc2XkV79P2uIZ998V+1EYG6:D6IKenMy8cYItHSV7jIZj8V+1T","tlshash":"4b4301dabdcc4f123ff773d7e0094366ee4872492732543801de65c62668b6679fa148","first_seen":"2025-11-22T11:30:21.508458Z","last_seen":"2026-07-29T17:03:54.698913Z","times_seen":400,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/9045-3b70795c3bd3bd21.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:28.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /_next/static/chunks/9045-3b70795c3bd3bd21.js HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/pay/TBC3EAGJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 04 Feb 2026 20:05:28 GMT\r\netag: W/\"8b3a-19c0ede4a58\"\r\nlast-modified: Fri, 30 Jan 2026 12:26:15 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235528\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235528\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35642,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35636), with no line terminators","md5":"bbb5b69751a187e98d2616bd559e39cf","sha1":"93b5bd94e245709ab74122e3710d7179ca9cc558","sha256":"7fe186cdae7b16ee46cf4b63063bfaa5957f2a849ba5837e8cbe816c04452b98","sha512":"7656255b0c3920f0c491f2ca90affed512d488ddb37c3ec9b391e556584e24e6c870bc1d9958aa8de9fae6c46c5977a969ef23f6f2e6cbc8809b5748012eb0b3","ssdeep":"768:172l7A2GED2sQUCWULaYklXC62UJqsc60Vss2vIjA+2EDMIjA+c1HeBZdvEmct7n:tGS62t4/3ci","tlshash":"84f2c745db9ab74cf02781aca2df600c756f15a8a60e48f97bbc743132864d53b2bbc5","first_seen":"2026-02-04T20:05:56.646513Z","last_seen":"2026-02-04T20:05:56.646513Z","times_seen":1,"resource_available":true,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/tokenpocket.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/tokenpocket.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 5985\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-e3f4d285e797a8135811ceaac1f51327-0c709861827d0395-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-1761\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc8\r\nage: 43\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:04:47+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5985,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, interlaced","md5":"987444e9a03d1c96165134993befbf9e","sha1":"f10357bacad45366cb96605509f7d5ac4533ac35","sha256":"3dcd239d221b091127db2a3dd71d63f0885105b244ceb32962f9fca4dc2f6982","sha512":"1daa7d636e12964377287fd733a9c8d5fae5d28ef4fba8a68eb0d1d7f0c36868b76d9436b991588bf83c3311818c3ebad599111398cbb3538bbf77f9cb2b7abf","ssdeep":"96:mgpKD/yRZMOU/XHJBNt/8kBIU93p9MztPvzoAM8GqlSvQF0epLhExssssTsPHNsX:vRevz05U9DMztHzoJASvQF3pL+lsPtzs","tlshash":"3dc14cde48dbae57754e4b726b625319c1a543f6e0f2ce4b4d078a30797b6507433148","first_seen":"2025-11-22T11:30:21.530051Z","last_seen":"2026-07-29T17:03:54.761077Z","times_seen":400,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/wallets-v2.json","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:29.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /wallets-v2.json HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://paymentcryptomus.com/\r\nOrigin: https://paymentcryptomus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:29 GMT\r\ncontent-type: application/json\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-e54ba7966d081b0b4d153d8a3ac2f2da-1984cbd6a480fb99-01\r\nx-shard: digi-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 23 Dec 2025 12:00:57 GMT\r\netag: W/\"694a8479-5316\"\r\ncache-control: public, max-age=180\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc4\r\nage: 151\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:02:58+00:00\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21270,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a0655f50aa0250f2ae65ae3a3927f526","sha1":"0760daff9527229f6242b94d7b1ad8997a4eac4b","sha256":"a567518f689cc35abf33d1aaaf13631b9167621753da2699d26906fabaa9eefb","sha512":"4628ff912358e40fcbc8cb3723da4ec87636bb750cea13b39eb08be4ec66f8b3698337ba2e729ccc5a3d32dca82c9c70d0adb259b2aa0e699ffe64e4b2da7116","ssdeep":"192:kRWpwKMv4irypxGHf7Dv29yRYX9y4pqB8NRbpp/KlI+JaG5kXPJiGRkpSC6RUppD:kRQ4gHlaR3eHmF5","tlshash":"16a2f4a7c6384c67025561f4b89a2286f211028bccd0bd6df74c489c9faddaf14b779d","first_seen":"2025-12-25T05:38:46.984185Z","last_seen":"2026-02-24T03:25:10.178985Z","times_seen":109,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":122,"dns":60,"connect":26,"send":0,"wait":27,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/okxtonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/okxtonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 1419\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-838ecfda632050b28cb1b2c0c19a253f-e9671e1f558807b2-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-58b\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc8\r\nage: 116\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:03:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1419,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 270 x 270, 8-bit colormap, non-interlaced","md5":"eae57e6670b0935844d704d55c8a6c1f","sha1":"b48e9e4136e1686c69f95e8e3cdf406e857b4864","sha256":"88c1133276ed03cd0da7ae1b8e6e97b388ca84bb2aa40644f280b914ff11b8e8","sha512":"ad44608a7fccfadcd5c3cbf3d9dfb765e3305b784539880c30494f0b0d4bdfea7998dee5a66cbf44954651f08001276b496f674aa436f08e052066cb95997bfe","ssdeep":"","tlshash":"24212c4760c10c90fa75da758fe612629df61f348a54c4d82a52e37d141eae80eacb8f","first_seen":"2025-11-22T11:30:21.475658Z","last_seen":"2026-07-29T17:03:54.741219Z","times_seen":400,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend-production-828174075858.herokuapp.com/client","fqdn":"backend-production-828174075858.herokuapp.com","domain":"backend-production-828174075858.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"18.208.60.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.herokuapp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BC:F1:45:C8:21:19:7F:72:A4:09:2F:2F:B0:51:8E:A3:9E:AF:0F:BF","sha256":"7C:C7:DF:0A:D1:20:69:CA:B9:7F:44:40:75:60:56:00:94:ED:A3:72:FD:A6:ED:DC:49:F8:84:38:52:8C:55:88"}}},"request":{"raw":"OPTIONS /client HTTP/1.1\r\nHost: backend-production-828174075858.herokuapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://paymentcryptomus.com/\r\nOrigin: https://paymentcryptomus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: *\r\nDate: Wed, 04 Feb 2026 20:05:31 GMT\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=dSp2EzDMpFKzyv0Ch1b2zk19e6NTiGVNlo38DA4H4vU%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235531\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=dSp2EzDMpFKzyv0Ch1b2zk19e6NTiGVNlo38DA4H4vU%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235531\"\r\nServer: Heroku\r\nVary: Access-Control-Request-Headers\r\nVia: 1.1 heroku-router\r\nX-Powered-By: Express\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T18:49:44.792728Z","times_seen":17676519,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/9e84c5da-87a4fcd6721a0ca8.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:28.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /_next/static/chunks/9e84c5da-87a4fcd6721a0ca8.js HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/pay/TBC3EAGJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 04 Feb 2026 20:05:28 GMT\r\netag: W/\"11669-19c0ede4a58\"\r\nlast-modified: Fri, 30 Jan 2026 12:26:15 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235528\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235528\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":71273,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"de5b61281836d9da597ea43a5f9fcdac","sha1":"45144de9d297ca974e0e6a9d4fe2cbaa846d78d4","sha256":"527b14e5161612ae7204c548ec8e4cc5ff7ae7e1aebce0a4d2d306b178ccac12","sha512":"89859f1b93b0c942bb79fa8a1332f21ecfd53b5563eb5ae293a8da8cf3d330010d5c2f5fc739ac70e5947c147875cd8de30cc8122d47d9db37f0d385bc02635e","ssdeep":"1536:2YoSAskvFOxKEvaMEJqVzgGjGTb5wLzRnCJ:uSAskNOxKEvxVMGaCLzVCJ","tlshash":"55631ab2bb50f02407f3519968632121f3392e8955558078f73dc8e2ae716cd93b7bba","first_seen":"2026-02-04T19:51:15.874585Z","last_seen":"2026-07-12T21:09:00.051538Z","times_seen":52,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/3395-a2a3e3b3583f7a37.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:28.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /_next/static/chunks/3395-a2a3e3b3583f7a37.js HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/pay/TBC3EAGJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 04 Feb 2026 20:05:28 GMT\r\netag: W/\"1f264-19c0ede4a58\"\r\nlast-modified: Fri, 30 Jan 2026 12:26:15 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235528\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235528\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":127588,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64318)","md5":"14b73d44aa4f86964a94d623c3a89b38","sha1":"f8d761fb6ea6764300af1d4b7ebc8f87f1ba0e61","sha256":"cb0bd0f77c7ef15d135e433e19f1a90dc4298127220e28c4ebb5544c31186bd4","sha512":"7e59f30072e011c56bbe31b70a224ab8bb8a9daf8f1eedc3423bb071049d3ddf6f174d0d363cf4aa01344fc2f2f3d113612e6068389d6bb0367f9938fc5ecdd3","ssdeep":"3072:tXx3rYgN49XAyLRZHy2xi0x5JS9o7459Kjjq8y:tXx3kgN49XAyLoI5JS9o7459Kjjq8y","tlshash":"44c3d841b3923135139f220879434678a26af954531a84b5739cc47bcfb4aecb9f3bda","first_seen":"2026-02-04T19:51:15.84433Z","last_seen":"2026-02-04T20:05:56.652261Z","times_seen":2,"resource_available":true,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":608,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend-production-828174075858.herokuapp.com/pay/TBC3EAGJ","fqdn":"backend-production-828174075858.herokuapp.com","domain":"backend-production-828174075858.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"18.208.60.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.herokuapp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BC:F1:45:C8:21:19:7F:72:A4:09:2F:2F:B0:51:8E:A3:9E:AF:0F:BF","sha256":"7C:C7:DF:0A:D1:20:69:CA:B9:7F:44:40:75:60:56:00:94:ED:A3:72:FD:A6:ED:DC:49:F8:84:38:52:8C:55:88"}}},"request":{"raw":"OPTIONS /pay/TBC3EAGJ HTTP/1.1\r\nHost: backend-production-828174075858.herokuapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://paymentcryptomus.com/\r\nOrigin: https://paymentcryptomus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: *\r\nDate: Wed, 04 Feb 2026 20:05:30 GMT\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=NYqf8Buc898k8iES36Apq9rGmXcAtmOS1mQiDHUfDg4%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235530\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=NYqf8Buc898k8iES36Apq9rGmXcAtmOS1mQiDHUfDg4%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235530\"\r\nServer: Heroku\r\nVary: Access-Control-Request-Headers\r\nVia: 1.1 heroku-router\r\nX-Powered-By: Express\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T18:49:44.792728Z","times_seen":17676519,"resource_available":true,"data":null}},"time_used":778,"timings":{"blocked":340,"dns":51,"connect":95,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/mytonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/mytonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 4757\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-f71ccaa90357566b3fd4ed2591d63049-6033d3dd55484050-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-1295\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc4\r\nage: 116\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:03:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4757,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"9c99a1956e242fb70baded72541ffd92","sha1":"082f808542c3fb82616e0c72e8eafd0c520531c1","sha256":"01b23585151ba32129c7ea121bb156f4064f6f3234c7e543bc660b775fe54871","sha512":"9fa1a9f1f077ee0092ec5d57a346693cfd2bd1575b3d2d99d411402ad659793313e50bac91118c39ce0d949e1d28de958a1aa214fbd1f8fa9de14881c7c75393","ssdeep":"96:LSyBAvitJVte8Ir4md9tjbJ/6sojcynHwHYqiebuHU:LSyBAQfU8IEmvtjbQxjCZPu0","tlshash":"d8a18d6913a62f00e0be22f33b88a2048767738344716b0b6e69200f3e1cf9501eb1f1","first_seen":"2025-04-19T14:12:50.877844Z","last_seen":"2026-06-28T15:09:18.446084Z","times_seen":931,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":37,"dns":1,"connect":28,"send":0,"wait":35,"receive":8,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"backend-production-828174075858.herokuapp.com/socket.io/?EIO=4\u0026transport=websocket\u0026sid=nmUdXDfdr1frv3Q5AAE8","fqdn":"backend-production-828174075858.herokuapp.com","domain":"backend-production-828174075858.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"18.208.60.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:32.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.herokuapp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BC:F1:45:C8:21:19:7F:72:A4:09:2F:2F:B0:51:8E:A3:9E:AF:0F:BF","sha256":"7C:C7:DF:0A:D1:20:69:CA:B9:7F:44:40:75:60:56:00:94:ED:A3:72:FD:A6:ED:DC:49:F8:84:38:52:8C:55:88"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket\u0026sid=nmUdXDfdr1frv3Q5AAE8 HTTP/1.1\r\nHost: backend-production-828174075858.herokuapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://paymentcryptomus.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: BshqHylv7kDaVC9mIxwqdA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nAccess-Control-Allow-Origin: *\r\nConnection: Upgrade\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=Srbk6FM2ntGZqh5Mtb3yQWgmgo3pUWjmychLziAFNmM%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235532\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=Srbk6FM2ntGZqh5Mtb3yQWgmgo3pUWjmychLziAFNmM%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235532\"\r\nSec-Websocket-Accept: 1qorSfZrki67fOLmLjlfRXfRSRU=\r\nServer: Heroku\r\nUpgrade: websocket\r\nVia: 1.1 heroku-router\r\nDate: Wed, 04 Feb 2026 20:05:32 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T18:49:44.792728Z","times_seen":17676519,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":0,"dns":1,"connect":93,"send":0,"wait":96,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/assets/Inter_Regular-B2uJs5iC.woff2","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:29.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /assets/Inter_Regular-B2uJs5iC.woff2 HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/_next/static/css/439623a40f457636.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 04 Feb 2026 20:05:29 GMT\r\netag: \"ggxxgjjdxs6wo\"\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=2hNghJzFlLd%2Bnb%2F2ecgo9LtnCzYLjANI6Bj9R7YLq90%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235529\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=2hNghJzFlLd%2Bnb%2F2ecgo9LtnCzYLjANI6Bj9R7YLq90%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235529\"\r\nserver: Heroku\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 heroku-router\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nx-powered-by: Next.js\r\ncontent-length: 8952\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":8952,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (8952), with no line terminators","md5":"21885463c8b73851a8f1b72e78de7137","sha1":"fdaca2c0d02a7db583606c71c1ef7fbfa46c6ece","sha256":"eb8394dc9a8a77da7019366156915e0392739e4288b1d5ade3f58f365619378c","sha512":"8a9b508765bc9e8e74709d8349f2a8dbb2986c6a1f030c9d5a7182f51ea39806a08f7a93154e3c22754023558fbcec8c17248acd8bf30035f4820b5ee6415c72","ssdeep":"192:tSBVCBCUOoFj0HnvqkL6z2QmsKBye5sgfD7:tSXa3OoVSvrT/lL7","tlshash":"e002352fbd05dd5aec7b6d69413dad3a60cfc83b8624c9b4c2ddcf5806819b61b99c80","first_seen":"2026-02-04T19:51:15.819862Z","last_seen":"2026-02-04T20:05:56.641716Z","times_seen":2,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/tonkeeper.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/tonkeeper.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 1284\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-6ad54521f51b387c926188b140fe524b-d37786f394b1718e-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-504\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc8\r\nage: 116\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:03:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1284,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"cba93fd4ef01e8b6a839f321b198e6ef","sha1":"cd425ede89e3ced40f919bd9bf2867153f528e68","sha256":"b7e60fdb63fa58ac414061aec15fbe1db8d0c822fce3c379d90004ebec3fb1e9","sha512":"57223145df0dbe2ac141e408851155593552c1ae82880721326c21a633b263b8235c76afb910d91cf2fcae4ceda09c72693bbe68d88bbc394bb76aedcd9a74a0","ssdeep":"","tlshash":"ae218a03c579e3175e9b15b2552a1fc35c93a8b00dc6158fec459dcd5649c8bc71128b","first_seen":"2025-04-26T05:32:18.028477Z","last_seen":"2026-07-29T17:03:54.75821Z","times_seen":988,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":28,"dns":0,"connect":15,"send":0,"wait":44,"receive":4,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/assets/Inter_Medium-Bqylrw2L.woff2","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /assets/Inter_Medium-Bqylrw2L.woff2 HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/_next/static/css/439623a40f457636.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\netag: \"ggxxgjjdxs6wo\"\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=z5FPALj6%2FNybhWSn2IHmu3IdO19RqaEsGmc59Smxxhg%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235530\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=z5FPALj6%2FNybhWSn2IHmu3IdO19RqaEsGmc59Smxxhg%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235530\"\r\nserver: Heroku\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 heroku-router\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nx-powered-by: Next.js\r\ncontent-length: 8952\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":8952,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (8952), with no line terminators","md5":"21885463c8b73851a8f1b72e78de7137","sha1":"fdaca2c0d02a7db583606c71c1ef7fbfa46c6ece","sha256":"eb8394dc9a8a77da7019366156915e0392739e4288b1d5ade3f58f365619378c","sha512":"8a9b508765bc9e8e74709d8349f2a8dbb2986c6a1f030c9d5a7182f51ea39806a08f7a93154e3c22754023558fbcec8c17248acd8bf30035f4820b5ee6415c72","ssdeep":"192:tSBVCBCUOoFj0HnvqkL6z2QmsKBye5sgfD7:tSXa3OoVSvrT/lL7","tlshash":"e002352fbd05dd5aec7b6d69413dad3a60cfc83b8624c9b4c2ddcf5806819b61b99c80","first_seen":"2026-02-04T19:51:15.819862Z","last_seen":"2026-02-04T20:05:56.641716Z","times_seen":2,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/7609-e6c2ca3a3b9a6723.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:28.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /_next/static/chunks/7609-e6c2ca3a3b9a6723.js HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/pay/TBC3EAGJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 04 Feb 2026 20:05:28 GMT\r\netag: W/\"196d02-19c0ede4a58\"\r\nlast-modified: Fri, 30 Jan 2026 12:26:15 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235528\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235528\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1666306,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (55864)","md5":"b67ab2a88dae28c329c61da20f414cc8","sha1":"1c8228b4c4cf3ee521c44d44a6533516f79bd319","sha256":"0cef42d827bde33a89e1afe5b42faef05d8291800cbef1816cb34beca7012a8e","sha512":"bea4091dbeffbc9b4fb8d613139fbbd032cb4f941fe9acda31f05a78b4d55b7a1746047303d4ae65c2c13526dad6afc7f56af0d0fe788196c0a728fb90fc5f97","ssdeep":"24576:wXNgcfordg0bQas89dsiBx/l/sT26IHwAfy:wMrdrbQqsiBx/l/sT26IHwAa","tlshash":"46256d557326f43743db529ea83a1101f23c8865140d442cfba8ecfbaa989c9627ff75","first_seen":"2026-02-04T19:51:15.885465Z","last_seen":"2026-02-06T18:25:28.646986Z","times_seen":5,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/tonhub.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/tonhub.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 55132\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-003b6b23cd7ff1e926062f60e2bf395b-1e80f35783300530-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-d75c\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc6\r\nage: 189\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:02:21+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55132,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"2fee343f7186afe4fb4d313b974019e9","sha1":"8ddc2316409184cc4b7e5c92191c329217f60e9f","sha256":"0571664b9059e4571a007acc4c523c275cf008cbb9ee96d56934d54d5ca845f6","sha512":"70ebc03c8093604560561fabe864542cc40ccd1540634b024d57ceb0b6d0dfafffebb8620355caa823debd157b0c879c8fe3cafeb631ff25e631c3ab0d8e7fd5","ssdeep":"1536:DjbrTlVNHKUAaRU82bWa4YLS9IB+zFH+5pSrS:DnNHKiq82bW/eYIY1+5pSe","tlshash":"98330165f221113a8721c9287a1f1e6b1cc1393b88aeed3252239b6ed845d610fc39b3","first_seen":"2025-11-22T11:30:21.502499Z","last_seen":"2026-07-29T17:03:54.728999Z","times_seen":401,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":46,"receive":15,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/gatewallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/gatewallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 6751\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-1996e62142e4a2c0f0530d18c1be070c-63c14874a2504694-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-1a5f\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc8\r\nage: 97\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:03:53+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6751,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"851d63e4f663bfecd0370dfcdb0ba69b","sha1":"de014e7a7df805557a65d9d58fb4e70224799e61","sha256":"6e84eb43cd2faeb5037e32b4b2e2aec1b417bd32dfee397de90918bcbef561b1","sha512":"5e2f2434179f71ecc5ba2b689a7359df2d723254bbc08c29512b87b5e85e25ebf756f661964cd82058becea038846870359b4fe72ac76c9a8ec5e55ca4a5cf9c","ssdeep":"192:FSzHxFMOKxw3uBeLUr7iMgf4v4LVrjfQNCG3:kzHxFM7guBguia+rs","tlshash":"b4d19fc4a398933dc95e61cb3ed36b939f829614632462267fb5353124f215cbeb8372","first_seen":"2025-11-22T11:30:21.512015Z","last_seen":"2026-07-29T17:03:54.72268Z","times_seen":400,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/openmask.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/openmask.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 4441\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-46631ef69b324fbea3296678b510abd5-4ffa8c44a6d526d1-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-1159\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc7\r\nage: 97\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:03:53+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4441,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"ec081e53ad51c57d64e634569182acce","sha1":"4a4fb1ce3714e386197cc321460177367014fe58","sha256":"773c0248eae5d85ac71cf6f4e4cf4f57160e448a68178cac269c33badf4ffb8d","sha512":"b2e8d498747d61c8defb07867cc333429afae8abb90b082538d17e0c8a5ca8fc631efe1500834be01a40daf2896873f5fe7e1a26e21b598ff5931449fb426003","ssdeep":"96:DhV3jO9vXvgpAhSstqNNE2/F6/d0O1256XClGogKDDvc+x9:DXC9vvgKzqNNE296/OO1Gb0ovDvc+n","tlshash":"80917dced641c49fe92241e2ce7fbdd21d15ee29c804768032aa11254df711e6bd609e","first_seen":"2025-11-22T11:30:21.537023Z","last_seen":"2026-07-29T17:03:54.742697Z","times_seen":400,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/blitzwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/blitzwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 2190\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-9c0a370966bc09ef85016fb4136d3863-a1a880db2264f2db-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-88e\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc5\r\nage: 107\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:03:43+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2190,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit grayscale, non-interlaced","md5":"687ff1806febae6872dfb083388f5a9d","sha1":"7b01cff612a09cb833e4e56fd07e0f33d65fb92c","sha256":"8859af2e5f1d4b4c988792e28d45d70fec01dbacc4bd5c8447459e8126c95c41","sha512":"f887b619274884bebf0a0630d8ef9a337e8edbef12d2800bad8e66f980b07fb7421c37fc722fe1068d8457262cabf72f4aa07b6d2907a394bd6076736d4fde6e","ssdeep":"","tlshash":"3141e96896f0437bcc6a3ba7611d9d8d1bbf90930b4a5c4dad08dc6b0c8287c93868d7","first_seen":"2025-11-22T11:30:21.493807Z","last_seen":"2026-04-21T00:00:51.391513Z","times_seen":242,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/koloweb3wallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/koloweb3wallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 9346\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-0382968492389054b7c5845fd65eb890-bb1b7bca24edbcbc-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-2482\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc8\r\nage: 107\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:03:43+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9346,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"f446d0b0b827dc92763198290f6d1913","sha1":"04594a5bf79e05ce7877e4f71c7900d7fe01f0d1","sha256":"835ac69b7fcb8a385ab079c693ee6a2c40a0185932816448de9067e132e548c1","sha512":"ae8496a514ffe87c754ab51530eec863d0980b87876bacfe98dff71835d68f936e2372f4e0675e374bf3285e57775aed390c3391978b6846b06a7b32a758a401","ssdeep":"192:oK2RPyVPVwevy1jvZpWZqXYTNsQFia/QX3mTnVBMTk8WAC:oFdyVNwnjvZsoXsNvFias38nzVx5","tlshash":"60129f81b6d20209e7bf62db2ec9bbc254a7ad374c39917e1b55e08138f14b681c5dc7","first_seen":"2025-11-22T11:30:21.47152Z","last_seen":"2026-07-29T17:03:54.759017Z","times_seen":400,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend-production-828174075858.herokuapp.com/socket.io/?EIO=4\u0026transport=polling\u0026t=gj2cvewk","fqdn":"backend-production-828174075858.herokuapp.com","domain":"backend-production-828174075858.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"18.208.60.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:31.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.herokuapp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BC:F1:45:C8:21:19:7F:72:A4:09:2F:2F:B0:51:8E:A3:9E:AF:0F:BF","sha256":"7C:C7:DF:0A:D1:20:69:CA:B9:7F:44:40:75:60:56:00:94:ED:A3:72:FD:A6:ED:DC:49:F8:84:38:52:8C:55:88"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=gj2cvewk HTTP/1.1\r\nHost: backend-production-828174075858.herokuapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://paymentcryptomus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-store\r\nContent-Length: 118\r\nContent-Type: text/plain; charset=UTF-8\r\nDate: Wed, 04 Feb 2026 20:05:32 GMT\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=Srbk6FM2ntGZqh5Mtb3yQWgmgo3pUWjmychLziAFNmM%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235532\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=Srbk6FM2ntGZqh5Mtb3yQWgmgo3pUWjmychLziAFNmM%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235532\"\r\nServer: Heroku\r\nVia: 1.1 heroku-router\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":118,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"e8c4009dcce93647110fa7e2b152f32f","sha1":"68a1db71c8c00ec571745087df4c23115851f376","sha256":"91003b793b4303cd043e532f05c6f61a8f9add5ff0cd8013a9cbb889e2291d61","sha512":"c44fb95871038acc8ae7456a6a269404739694b5fccaa3a63e86f8dcce955bde15a37c650705a0bfb256aca03c0821f835a19654bf18fb1c527374b2112c3f43","ssdeep":"","tlshash":"2fb09b84531dd685da60728071e12d254554796e6ac6455c611504844555514212531f","first_seen":"2026-02-04T20:05:56.660513Z","last_seen":"2026-02-04T20:05:56.660513Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/pay/TBC3EAGJ","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-04T20:05:27.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /pay/TBC3EAGJ HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 04 Feb 2026 20:05:28 GMT\r\nlink: \u003c/_next/static/media/e4af272ccee01ff0-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\"\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235528\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235528\"\r\nserver: Heroku\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 heroku-router\r\nx-powered-by: Next.js\r\ncontent-length: 3260\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":9253,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (9253), with no line terminators","md5":"d166bd91d57f821295bb2f55f95d9e1d","sha1":"93a984d53e9ce09deab414e7e35899277e68c044","sha256":"2a99dc47ce4250c02c57d76b59b12ea3d256af4706b1037ef3e7c40f48139a5c","sha512":"29cc641c9de26a623f7a5183b23cd750d3d68d2ea5c7f262db90121fa36ffc33c204776ab46fc495187cc8580684a818d2c8147c795d7d209745babf4e3e9f1b","ssdeep":"192:LCBCUOoF9C0HnvqkLF8jQmshATBkne55+gw:La3OobCSvcT6AT9w","tlshash":"cf12022f7d05dd56ac7bad5d413eae3a60cecc3b8724c9a4c2ddce5806428ba1799c80","first_seen":"2026-02-04T20:05:56.662007Z","last_seen":"2026-02-04T20:05:56.662007Z","times_seen":1,"resource_available":false,"data":null}},"time_used":740,"timings":{"blocked":312,"dns":102,"connect":103,"send":0,"wait":113,"receive":0,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/onekey.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/onekey.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 1469\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-6689e54c5425993291ef8b1d0226b192-5c4fa25ef471eea0-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-5bd\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc5\r\nage: 77\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:04:13+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1469,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"3630a1a80ed5fcbeeb9224e2b997d117","sha1":"25e3771b17938bcb89ff31bccd073a3e0b3b574f","sha256":"6df2ebc8dc341106bad5d235866f6c1851233231776786c16ffd2bcfafd47b57","sha512":"6c1eac4850a1741137d722d131b8f15ec363370398e511968ab663c733b5db501b111ef7a4be2a91885a7495fbc80ce8feced3f800ab9149b4368bbe12b476e7","ssdeep":"","tlshash":"8831529add12643fa5540670c77776e5ea760163b184ae4f4b030b342d5b1c2f977e80","first_seen":"2025-11-22T11:30:21.497762Z","last_seen":"2026-07-29T17:03:54.750762Z","times_seen":400,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend-production-828174075858.herokuapp.com/socket.io/?EIO=4\u0026transport=polling\u0026t=gj2foxdc\u0026sid=nmUdXDfdr1frv3Q5AAE8","fqdn":"backend-production-828174075858.herokuapp.com","domain":"backend-production-828174075858.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"18.208.60.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:32.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.herokuapp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BC:F1:45:C8:21:19:7F:72:A4:09:2F:2F:B0:51:8E:A3:9E:AF:0F:BF","sha256":"7C:C7:DF:0A:D1:20:69:CA:B9:7F:44:40:75:60:56:00:94:ED:A3:72:FD:A6:ED:DC:49:F8:84:38:52:8C:55:88"}}},"request":{"raw":"POST /socket.io/?EIO=4\u0026transport=polling\u0026t=gj2foxdc\u0026sid=nmUdXDfdr1frv3Q5AAE8 HTTP/1.1\r\nHost: backend-production-828174075858.herokuapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: text/plain;charset=UTF-8\r\nContent-Length: 57\r\nOrigin: https://paymentcryptomus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":57,"data":"40{\"type\":\"client\",\"clientId\":\"6983a68b338d7716119ed765\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-store\r\nContent-Length: 2\r\nContent-Type: text/html\r\nDate: Wed, 04 Feb 2026 20:05:32 GMT\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=Srbk6FM2ntGZqh5Mtb3yQWgmgo3pUWjmychLziAFNmM%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235532\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=Srbk6FM2ntGZqh5Mtb3yQWgmgo3pUWjmychLziAFNmM%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235532\"\r\nServer: Heroku\r\nVia: 1.1 heroku-router\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-02T18:37:03.695594Z","times_seen":444608,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend-production-828174075858.herokuapp.com/socket.io/?EIO=4\u0026transport=polling\u0026t=gj2odkui\u0026sid=nmUdXDfdr1frv3Q5AAE8","fqdn":"backend-production-828174075858.herokuapp.com","domain":"backend-production-828174075858.herokuapp.com","tld":"herokuapp.com"},"ip":{"addr":"18.208.60.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:32.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.herokuapp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"BC:F1:45:C8:21:19:7F:72:A4:09:2F:2F:B0:51:8E:A3:9E:AF:0F:BF","sha256":"7C:C7:DF:0A:D1:20:69:CA:B9:7F:44:40:75:60:56:00:94:ED:A3:72:FD:A6:ED:DC:49:F8:84:38:52:8C:55:88"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=gj2odkui\u0026sid=nmUdXDfdr1frv3Q5AAE8 HTTP/1.1\r\nHost: backend-production-828174075858.herokuapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://paymentcryptomus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-store\r\nContent-Length: 1\r\nContent-Type: text/plain; charset=UTF-8\r\nDate: Wed, 04 Feb 2026 20:05:32 GMT\r\nNel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nReport-To: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=Srbk6FM2ntGZqh5Mtb3yQWgmgo3pUWjmychLziAFNmM%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235532\"}],\"max_age\":3600}\r\nReporting-Endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=Srbk6FM2ntGZqh5Mtb3yQWgmgo3pUWjmychLziAFNmM%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235532\"\r\nServer: Heroku\r\nVia: 1.1 heroku-router\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"very short file (no magic)","md5":"1679091c5a880faf6fb5e6087eb1b2dc","sha1":"c1dfd96eea8cc2b62785275bca38ac261256e278","sha256":"e7f6c011776e8db7cd330b54174fd76f7d0216b612387a5ffcfb81e6f0919683","sha512":"3c9ad55147a7144f6067327c3b82ea70e7c5426add9ceea4d07dc2902239bf9e049b88625eb65d014a7718f79354608cab0921782c643f0208983fffa3582e40","ssdeep":"","tlshash":"c700000000030000c00000300000000000000000000c00000000000000000000000000","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-08-02T18:23:21.407093Z","times_seen":12023,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paymentcryptomus.com/_next/static/chunks/app/pay/%5Bkey%5D/page-544b7c0c7ebd2bb3.js","fqdn":"paymentcryptomus.com","domain":"paymentcryptomus.com","tld":"com"},"ip":{"addr":"75.2.60.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:28.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paymentcryptomus.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 12:13:12 GMT","end":"Thu, 30 Apr 2026 12:13:11 GMT"},"fingerprint":{"sha1":"20:C6:0B:C4:38:01:2C:29:89:45:AA:4A:A2:61:EE:1E:7C:D4:09:D8","sha256":"1A:D4:CB:2D:8D:7F:27:72:93:8F:01:BE:4A:57:CF:F4:1E:AC:54:2A:4D:7F:D7:E7:02:8E:A3:C9:F6:82:AC:8A"}}},"request":{"raw":"GET /_next/static/chunks/app/pay/%5Bkey%5D/page-544b7c0c7ebd2bb3.js HTTP/1.1\r\nHost: paymentcryptomus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/pay/TBC3EAGJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Wed, 04 Feb 2026 20:05:28 GMT\r\netag: W/\"10cdb-19c0ede4a58\"\r\nlast-modified: Fri, 30 Jan 2026 12:26:15 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\\u0026ts=1770235528\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=cEW5EWgnR%2B2zsGvHkwIQhsz0fLS8li995EeoDstTbiw%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1770235528\"\r\nserver: Heroku\r\nvary: Accept-Encoding\r\nvia: 2.0 heroku-router\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":68827,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65480), with no line terminators","md5":"7c33cfd3429eccf3dc2654e0320c961a","sha1":"a9b1ba80911190354790196ce5edcda3aca6110b","sha256":"2467932f5aa000ea03817e785a9831d5ab8ff749dd3307623d695a11b54d5ae0","sha512":"51047ddb61800fa47094bf9e7f10854845c07c54161ae738381cd4dedb8bfa32553610b96cf076941dec054dac4ac2c7d33cbb37e387852cda9f0d1e8611aacd","ssdeep":"768:dSi1ir1Am9vlGwDisFG/4/39DTV/QJwOw9sewK0OjLsfLbuPLD4C8OH4lYXtWwgj:o/d5pTVEVSLDNtC26wGYKvQvWolDI","tlshash":"7c63fa49e3987eacf00743e4bb1f602cb66f18a89f09c4b476bc247555580d87a5bfca","first_seen":"2026-02-04T20:05:56.666087Z","last_seen":"2026-02-04T20:05:56.666087Z","times_seen":1,"resource_available":true,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/tonkeeper_pro.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/tonkeeper_pro.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 18520\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-8d915090243bd0f726f16a17b6511d8c-23ca8f00fdd8b9bc-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-4858\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc4\r\nage: 118\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:03:32+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18520,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"3c952c0c19268d9ede72dba2b327d99c","sha1":"1b1e98ee3538963e3dc9089746386d6acf397e80","sha256":"2d0ab9711dbced8b88b2f207a139e623641ddb8c40e375cfa888016d32aa01ca","sha512":"e3bd01ffedf9d33530a5e5246cee26f8a54e17423861d6b595952024e9c6baecac67fa4d7f1250103cc46ae83428c82403cdff7751a665c760e01ab50b551af4","ssdeep":"192:uiYxYUIKZ50p++PRy145vrPXZNAvccFB6B6EfkpFcLYp29BTW8q2dqojHOX9k9uL:u9EKMn4SjXrA0cYjLYStPHMw/NfIBN/","tlshash":"af82d01622a3994d2f79a9f8ee25fa38344102dd5fdab8d9cdd6c0ce184ca64e533c61","first_seen":"2025-05-19T03:10:12.400525Z","last_seen":"2026-07-29T17:03:54.74479Z","times_seen":955,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/imtoken.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paymentcryptomus.com/pay/TBC3EAGJ","date":"2026-02-04T20:05:30.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 09:18:39 GMT","end":"Sun, 22 Feb 2026 09:18:38 GMT"},"fingerprint":{"sha1":"EA:D0:C5:61:5E:9D:FD:60:CA:20:47:BA:87:75:19:44:F6:93:9D:D7","sha256":"5C:84:C6:79:6D:5E:D1:DE:48:A1:E2:B6:3B:7B:D7:57:08:7B:10:81:4B:71:B7:A1:04:9B:A7:C1:D2:8E:FC:1A"}}},"request":{"raw":"GET /assets/imtoken.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paymentcryptomus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 20:05:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 43029\r\nx-id-fe: digi-hw-edge-gc4\r\ntraceparent: 00-3dac3710d28438a9cc0e423d4fad7f63-106710c36649d9d2-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-a815\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc5\r\nage: 138\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-04T20:03:12+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43029,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"cc556604e6bf887247f1bd52fc469c15","sha1":"bf52b5632265a357c8326781f25368723d02b7fc","sha256":"891316e4bfbce4e5dc444e414488869743fefdd68b7e5b50867cf67666c0dd10","sha512":"1aa2cdcdf851d9ef454a17fc884f14380ed1ae23bc4990c7b7c1a2eca6e120cfa6e9a415a2a1804e3d57e19f10074178a2fe0fee9c3cd3441f758ae360f6416b","ssdeep":"768:VqtrC4tzWxSI/N3jrFHcQDoz6hwaP9aCkirQqgWc7HxahU:VqtuUzOSE3FHpDoz63sAraWc8hU","tlshash":"6913f1fecfbf94d4849409a826909283cba94768ac8831e9015ed78fd04db735ee50f9","first_seen":"2025-11-22T11:30:21.472624Z","last_seen":"2026-07-29T17:03:54.733261Z","times_seen":400,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}