{"report_id":"f97803cf-b8d2-4843-bb5a-10e5415340b6","version":6,"status":"done","tags":[],"date":"2026-04-25T12:17:01Z","url":{"schema":"http","addr":"cxonboard.com","fqdn":"cxonboard.com","domain":"cxonboard.com","tld":"com"},"ip":{"addr":"172.67.152.192","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cxonboard.com/","fqdn":"cxonboard.com","domain":"cxonboard.com","tld":"com"},"title":"Crypto.com Employee Onboarding","dom":{"size":16186,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2299)","md5":"8385409cc3786696c02a638ea28b7e79","sha1":"cd8eeedfeaeb9a64077d97f212562a4b92c044ad","sha256":"26f3c9e63a9d7f5c63483e77e26bf4453b56e183c6e56df243117e3e7205b991","sha512":"d3afca691e1bf2c3aa7bb2c9ccf6bbd302ad09640224b9fe2e83aa87c0578d9e60b1edeac41a44d70f2498e4838bbdb400190d12eeac20628206c7345ad589f5","ssdeep":"192:3kRdKyaAmMPP/lBJ9jCZuiwctJe0FVgMX2Q8+Q29ehDRUKNKfIbWMURT+MrluxbO:30g07iLFGMX2Q8FDRUVMURT+MrEpO","tlshash":"9b72d60870a05a794c7308d6bfedab167ad4b00bc6259841b0ec4bf40fc3ea93d67a19","dom_hash":"domhashfe0e7985a226853e41bc476a19312193","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cxonboard.com","fqdn":"cxonboard.com","domain":"cxonboard.com","tld":"com"},"ip":{"addr":"172.67.152.192","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-30T12:17:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"cxonboard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-25","alert":"Phishing Block","trigger":"cxonboard.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"cxonboard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"cxonboard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"btcpay907928.lndyn.com","ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"domain_registered":"2014-05-18","domain_rank":0,"first_seen":"2026-04-25T12:17:02.924651Z","last_seen":"2026-04-25T12:17:02.924651Z","alert_count":0,"request_count":22,"received_data":1064051,"sent_data":12046,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"cxonboard.com","ip":{"addr":"172.67.152.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-12","domain_rank":0,"first_seen":"2026-04-25T12:17:02.924529Z","last_seen":"2026-04-25T12:17:02.924529Z","alert_count":20,"request_count":5,"received_data":120109,"sent_data":2271,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-19T22:16:46.237507Z","alert_count":0,"request_count":3,"received_data":84210,"sent_data":1686,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":1,"received_data":9206,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/vendor/jquery-validate/jquery.validate.js?v=rV2mESVTvXURrqZN0Y0jzveXQyFIFC12ZCTJAN2RnQo","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c29329b3785f63b3c4ea85b9d25ad653","sha1":"7f7c82b1cbfa21a1948f5cf70fce9267361e3019","sha256":"827ccfc99aee080b4d87540736a4f44601369fb8e6ea276d37a0eb0378fcb9b7","sha512":"2d3973613173163be472ca0880826e2169dc9ca794defbdea537ff3d34ac10f04fb4babd7bca1d56082c951f3ae2afff6b030e831e1838173311793384bf4a41","ssdeep":"768:XlXMiVvARSSKBvI/Vrom26//A9Of5Kstt+2KTq/L4gDue84kI9YON3mGnfaBVXu3:WiVvARSSKdI/Vron6//A9Of5KsTdIxg/","tlshash":"09135088fbde005b4a6931aeac5e51cd76fc4071a500a87ebcdd14a425e4dbc12f9f78","size":42629,"data":"","first_seen":"2023-04-05T15:14:35Z","last_seen":"2026-04-27T12:25:16.914384Z","times_seen":447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"7aeb9fefc3ec05b75f48766e031dda83","sha1":"88198b2c9cd2f7afe0846c1a2cbbbb8e6121b997","sha256":"14b49bf2a31fb7e5912325a8307758e75ea494bf5a4986c03004ce0965be7e97","sha512":"44adcb61b3f17eda16eeb3c83a98a3b04298acc0a5747c52d8f95001df7ea8115bc169001b65c5a8ecb3d373a76309a125f24d5d933f427e67e6b33f298b8cb5","ssdeep":"","tlshash":"9be0ecbe7448463621d66099be477688763361d17202a439810c488475e1d4f6ea4f89","size":420,"data":"","first_seen":"2025-10-03T10:26:39.162406Z","last_seen":"2026-04-25T14:28:41.430799Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cxonboard.com/","fqdn":"cxonboard.com","domain":"cxonboard.com","tld":"com"},"ip":{"addr":"172.67.152.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c1b14c2823b842b090490df232befd43","sha1":"687d9dcd985da45cd021747f791e902ee6f6f1c2","sha256":"0bfd131497b17b27ffb748e6a2412ef84fe232063657d1804bf4026cc21447fc","sha512":"9ed29290ddb01d6c2563421d38ef558a3a507f3db18b92d2fa9e2ccae34cb64d27c6c78e5aa5dc872733e8d7e79a456ccc737767c6ecce6a1f6bd1d39921bd16","ssdeep":"","tlshash":"9101260f7de30c3154bb35bd574f964826365443b009ded23a4c8614aff4e918a76799","size":661,"data":"","first_seen":"2026-04-25T12:17:06.801739Z","last_seen":"2026-04-25T14:28:41.430007Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"a6f29283dcffb7c84370c494b2416a6e","sha1":"1c96c8729801396d9114c4ca053f662f60cbeb61","sha256":"31af1c7a3d45f06547d9c5adc9e61789b25d17d3657dc6e0844881741afe4133","sha512":"e453b82667422c7fbaca1961b196618524dba6162a3261e9008105d60257a223cfd4474394182e7f0d5b7b6831e44c99436cc05bfd3f6f93b9beea54973299d0","ssdeep":"","tlshash":"81f0a7493179c18c0c6f10cb018b468ab6f92657d0445a40b41d58d44f78ef87342a4f","size":514,"data":"","first_seen":"2023-11-05T08:41:53Z","last_seen":"2026-04-25T14:28:41.432534Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/main/utils.js?v=GGKGEnV8_rl1MlU1mHEhO9a-tTDyY9wYKWz3LURGvYo","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b0f6f06bb765e4c1ef60a5c9cca5de0","sha1":"8b73b98a6db0641ecb7ee1e32c6eed3a214f5e71","sha256":"18628612757cfeb9753255359871213bd6beb530f263dc18296cf72d4446bd8a","sha512":"61d21c34824a5eafea69adf893802e7a104d2656198d30f78ca363949aea8a820c35a687b712857252b87de1499e079ff42422a4a8c1537bdcd56111c0e817f5","ssdeep":"","tlshash":"7221101b36b785b24933aaf65b6ba5c12e35139b2a05d6563c0e8b200f50d2c2156b92","size":1354,"data":"","first_seen":"2026-02-11T06:35:11.705598Z","last_seen":"2026-04-25T14:28:41.417125Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/vendor/jquery/jquery.min.js?v=_xUj-3OJU5yExlq6GSYGSHk7tPXikynS7ogEvDej_m4","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-27T18:18:04.482979Z","times_seen":456220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/js/copy-to-clipboard.js?v=gUIhHSFrxjOWYkQXgWIWW0meIeilBL1BZcAaKvrd8W4","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"94407889f195ad53d8fa401d8fccbd8d","sha1":"06bad941f5eb52ca35f86f76bd8dd21739a5bfde","sha256":"8142211d216bc633966244178162165b499e21e8a504bd4165c01a2afaddf16e","sha512":"de1420acae9f32c0fa2bc6dd72b8fc956fd2884ad4aebdf478753717599d10dad6a1968d4d75c8ef7afc93ed5d3643b4dc16bac71aebbfcd6a8f6abf1c58fe95","ssdeep":"","tlshash":"3461006ef2be25b6c167bc65662f17023821b1437c46c89dbd5ccb401f10c29a9abba5","size":3320,"data":"","first_seen":"2025-08-04T06:10:28.782739Z","last_seen":"2026-04-25T14:28:41.429203Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/vendor/flatpickr/flatpickr.js?v=8JjFd2_SowFyDnEwKGCXnvEUEMOYRuk9wPYg-ghhTwo","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"38789c4f4e6cb355b69b0ef72b0269db","sha1":"c54e43492fd3b5d0b658e246c1f46d58c0624129","sha256":"f098c5776fd2a301720e71302860979ef11410c39846e93dc0f620fa08614f0a","sha512":"aedf8e115e56d76afa1e4c26c0610a3c63849c7ccac4922bb93636927846db33e0a0f00a21cd166d71486a17c451a55df97e421456c9abbae982e9bab64aba41","ssdeep":"1536:QLkJcCmh0zkcdN4z25P0XLAhmtKDyA/pSwLvjkx8YeGoaltPfmBM/YosZQ7x:QL2ohi8eSL9KwoxBM/YoHx","tlshash":"a2c3614668e714325627687e9b9f20077e358f63054dde207c7ca2096fa892853fdfe8","size":121471,"data":"","first_seen":"2023-03-26T11:40:26Z","last_seen":"2026-04-25T14:28:41.416513Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/vendor/jquery-validate-unobtrusive/jquery.validate.unobtrusive.js?v=LmzdY-Okp130SCZsjbN6_WkFEOESflnda1b5AJNnw6Y","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"79ca56d4af2c2986b8a886790945805f","sha1":"85ef225144982cef56269008dcc98d3a610a3657","sha256":"2e6cdd63e3a4a75df448266c8db37afd690510e1127e59dd6b56f9009367c3a6","sha512":"518b6965d359f60c61d9b7768f84a9ad8a7aa907e9006ad0d268aaf35c4f2a2312900ec498e253fc1f95e4bc8ab31ac1a6baed7a7b8b698aa8fbf976c811db42","ssdeep":"384:WiZ6mPiQ1rdgpMGr1Jn0JncPlf5qcVeWdRC/nnQA8yPm1BKCbJnna2MlZFOHCCbx:WQ1rdA0J4F5qHLMBOY","tlshash":"1e824f48399743318da730ed5b9fe004b6b4c227b015c851b89d43e55f59ef4a3a3b9e","size":18618,"data":"","first_seen":"2023-03-12T07:56:20Z","last_seen":"2026-04-25T23:27:53.587608Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/vendor/bootstrap/bootstrap.bundle.min.js?v=CDOy6cOibCWEdsRiZuaHf8dSGGJRYuBGC-mjoJimHGw","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80721,"data":"","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-04-27T18:21:30.471029Z","times_seen":23256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cxonboard.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"cxonboard.com","domain":"cxonboard.com","tld":"com"},"ip":{"addr":"172.67.152.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-27T18:18:23.901453Z","times_seen":315190,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cxonboard.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"cxonboard.com","domain":"cxonboard.com","tld":"com"},"ip":{"addr":"172.67.152.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-27T18:18:23.901453Z","times_seen":315190,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cxonboard.com/","fqdn":"cxonboard.com","domain":"cxonboard.com","tld":"com"},"ip":{"addr":"172.67.152.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"485861691d7a7618363685157a5234fc","sha1":"4d341d20f479faa935d1c1c42fedfa3ace6abefd","sha256":"36c2607a91e6e5f0b5a9d89ee75bbf0a7c53b5025a4a75e86bfa015ef06623c9","sha512":"754afddbdcb1e126eb966f03bc6a7ee128e11a514fe84162999ec616987756db818811c4f692a7c8f56a7a9ea0f7becb29bced9833170b98add41fa1b1a82d56","ssdeep":"192:YqQBpFUNqpCjnM3m7tYheTjqeE2t2+gPmuS9VElEnA8RsXIGDSnxjE9QHi9m9Qzw:zOmq+M3mBYQ6msY9b4ME9X9m9XlSRztm","tlshash":"3b32a8ef78be00308eab29fea18752b9793440153d41cb8134ac516c1ff4fa1a9779e9","size":11996,"data":"","first_seen":"2026-04-25T12:17:06.803466Z","last_seen":"2026-04-25T14:28:41.431454Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/main/site.js?v=j3vAWnNm90JNA-dtVMKs-4RUWI2NcaPFjbEkvVsyl7s","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"2553c313bd3ee55bacfdbe6f68487f4e","sha1":"33ea024a2ade02f6f3a5af80af4ab96719ba4f37","sha256":"8f7bc05a7366f7424d03e76d54c2acfb8454588d8d71a3c58db124bd5b3297bb","sha512":"53633b4d7d400919b60f5a8810ac35e9cd53fd95951fcd2fd47a0dddf1fcae59a6cbfb4917275984bcb9dae1c4917db75aad897dccd60f33e022f6ffb1eb9e9a","ssdeep":"384:GU+qMq5/I0rf9D0wzb1GeRhRZwPnljIKCW:Gpq3/I0rf9D001GeRhR2z7","tlshash":"eea2a72971b3113147bb70bb1f9b20017a3220477945d9587e4dc7842fa0aa9eafbbdd","size":23213,"data":"","first_seen":"2026-02-11T06:35:11.683989Z","last_seen":"2026-04-25T14:28:41.418851Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/vendor/moment/moment.min.js?v=4iQZ6BVL4qNKlQ27TExEhBN1HFPvAvAMbFavKKosSWQ","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"761502841c035afcf6a9bdc5d0a20d11","sha1":"69ab16ba8ca68431ab59eff286c7ed1e520bca30","sha256":"e22419e8154be2a34a950dbb4c4c448413751c53ef02f00c6c56af28aa2c4964","sha512":"8b60959c08a0b8de929c9dddd8284e39d74c590caf8104f39b4a928222a13aa04c182c787c653906dcd71326e729ab563c39173c5c8223495b1b8d819d58ebfd","ssdeep":"768:ToMKhfq4fY0Warbcvc6EsloNkUa+I2IcP/8fe4bK9mx:sM09Y0lr0c7slRqnue6r","tlshash":"8433a3ca3646b12267a212f5083f480be33e5d55684e4d1df508e9da3939c7e427bfb8","size":53324,"data":"","first_seen":"2023-03-07T12:01:33Z","last_seen":"2026-04-27T12:45:33.949457Z","times_seen":4249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/js/theme-switch.js?v=FD4J-7Hw_Q1BpQRNQrv3VMtgBJy9_rjJOQLjWsV03dQ","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"d300c302e8b432e3e2654dfbee82ea20","sha1":"e639dc3bb8f7a140dd25b91cdb71c886b2216510","sha256":"143e09fbb1f0fd0d41a5044d42bbf754cb60049cbdfeb8c93902e35ac574ddd4","sha512":"8fb1887d2e3b7348cfe39aebeb5077d3a236f8116a10c39d4e816a72c0a5ca323f836025246d5199d47548d394a0f0ed7c4554d6817ae50b4f79dd02e12178b1","ssdeep":"","tlshash":"6e21673c1027221604b724ac372b3520687a30237029cd153f9e86519f2a59ae2b9fdf","size":1225,"data":"","first_seen":"2024-01-25T18:16:59Z","last_seen":"2026-04-25T14:28:41.421836Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/vendor/jquery/jquery.min.js?v=_xUj-3OJU5yExlq6GSYGSHk7tPXikynS7ogEvDej_m4","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06","date":"2026-04-25T12:16:39.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcpay907928.lndyn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 21:03:25 GMT","end":"Sat, 18 Jul 2026 21:03:24 GMT"},"fingerprint":{"sha1":"1B:C1:74:99:3B:F7:42:56:C8:50:0B:85:1A:D6:65:01:DD:2C:C9:43","sha256":"96:03:EF:6E:26:32:75:C0:18:2C:79:C6:53:27:10:40:BD:08:7F:AF:9B:95:F6:C5:BF:1B:58:A3:57:E0:26:16"}}},"request":{"raw":"GET /vendor/jquery/jquery.min.js?v=_xUj-3OJU5yExlq6GSYGSHk7tPXikynS7ogEvDej_m4 HTTP/1.1\r\nHost: btcpay907928.lndyn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 12:16:39 GMT\r\ncontent-type: text/javascript\r\ncache-control: public,max-age=31536000\r\netag: W/\"1dc90d8b0ef4c1d\"\r\nlast-modified: Thu, 29 Jan 2026 04:35:27 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-27T18:18:04.482979Z","times_seen":456220,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/vendor/moment/moment.min.js?v=4iQZ6BVL4qNKlQ27TExEhBN1HFPvAvAMbFavKKosSWQ","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06","date":"2026-04-25T12:16:39.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcpay907928.lndyn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 21:03:25 GMT","end":"Sat, 18 Jul 2026 21:03:24 GMT"},"fingerprint":{"sha1":"1B:C1:74:99:3B:F7:42:56:C8:50:0B:85:1A:D6:65:01:DD:2C:C9:43","sha256":"96:03:EF:6E:26:32:75:C0:18:2C:79:C6:53:27:10:40:BD:08:7F:AF:9B:95:F6:C5:BF:1B:58:A3:57:E0:26:16"}}},"request":{"raw":"GET /vendor/moment/moment.min.js?v=4iQZ6BVL4qNKlQ27TExEhBN1HFPvAvAMbFavKKosSWQ HTTP/1.1\r\nHost: btcpay907928.lndyn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 12:16:39 GMT\r\ncontent-type: text/javascript\r\ncache-control: public,max-age=31536000\r\netag: W/\"1dc90d8b0eec1cc\"\r\nlast-modified: Thu, 29 Jan 2026 04:35:27 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53324,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (53324), with no line terminators","md5":"761502841c035afcf6a9bdc5d0a20d11","sha1":"69ab16ba8ca68431ab59eff286c7ed1e520bca30","sha256":"e22419e8154be2a34a950dbb4c4c448413751c53ef02f00c6c56af28aa2c4964","sha512":"8b60959c08a0b8de929c9dddd8284e39d74c590caf8104f39b4a928222a13aa04c182c787c653906dcd71326e729ab563c39173c5c8223495b1b8d819d58ebfd","ssdeep":"768:ToMKhfq4fY0Warbcvc6EsloNkUa+I2IcP/8fe4bK9mx:sM09Y0lr0c7slRqnue6r","tlshash":"8433a3ca3646b12267a212f5083f480be33e5d55684e4d1df508e9da3939c7e427bfb8","first_seen":"2023-03-07T12:01:33Z","last_seen":"2026-04-27T12:45:33.949457Z","times_seen":4249,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/fonts/open-sans-v17-latin-ext_latin-700.woff2","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06","date":"2026-04-25T12:16:40.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcpay907928.lndyn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 21:03:25 GMT","end":"Sat, 18 Jul 2026 21:03:24 GMT"},"fingerprint":{"sha1":"1B:C1:74:99:3B:F7:42:56:C8:50:0B:85:1A:D6:65:01:DD:2C:C9:43","sha256":"96:03:EF:6E:26:32:75:C0:18:2C:79:C6:53:27:10:40:BD:08:7F:AF:9B:95:F6:C5:BF:1B:58:A3:57:E0:26:16"}}},"request":{"raw":"GET /fonts/open-sans-v17-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: btcpay907928.lndyn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btcpay907928.lndyn.com/main/fonts/OpenSans.css?v=5or0eXX_npKCPPnU9xra_vLu1Z6CkpExoyK3FcrhT0E\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 12:16:40 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 20108\r\naccept-ranges: bytes\r\ncache-control: public,max-age=31536000\r\netag: \"1dc90d8b0ee5f0c\"\r\nlast-modified: Thu, 29 Jan 2026 04:35:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20108, version 1.0","md5":"5717b08cf679657595d0383d291a04c3","sha1":"e54f8981dfe2c7909646716d7f3da669d5df2d15","sha256":"59a3166f7bacce6a65bf901ad20f141b619bca39a1318ea5efbdaa587b48a800","sha512":"a99075d05051d7f10435ecacc2ac64da3c2fe38648adb911bae89e0f0aaaeeac8f19a511e90911c1763148890c63070701129e5b7191b9169e6f06e3cf63081f","ssdeep":"384:VurhOtti4ZcLVdhghOp0n7aqKAAaCp1j3GZjvNly/6r6J4E+14gFAblOf9mv4:Vurhwi4Zofp0ZkaCDrGZjvNUdJ8iOKO7","tlshash":"7292e1179aa8943796c45f2dc8f919de2e6ef449ae02cda87b73ae0037f425c17c011d","first_seen":"2023-05-15T12:08:38Z","last_seen":"2026-04-27T12:08:48.058078Z","times_seen":451,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cxonboard.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"cxonboard.com","domain":"cxonboard.com","tld":"com"},"ip":{"addr":"172.67.152.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cxonboard.com/","date":"2026-04-25T12:16:39.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cxonboard.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Apr 2026 11:12:31 GMT","end":"Tue, 14 Jul 2026 11:12:30 GMT"},"fingerprint":{"sha1":"C9:80:EC:CA:6E:CE:46:67:AC:1B:EB:A6:6E:F2:BD:B3:45:A3:17:0B","sha256":"28:35:C8:C7:4C:7A:6A:84:E8:80:98:FE:E1:DD:EF:BB:F7:1A:CE:46:34:A6:F5:82:41:5F:B7:17:81:6A:41:16"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: cxonboard.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cxonboard.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Mon, 27 Apr 2026 12:16:39 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rkw36TsmVxX6awkRaizj8%2F1nFV8Pc5dkmhGfeHJK82jnakWCRBmHjE5g1aXuf1kFWOMNfCKRX2Bv4jJOLlnD91s9rCjmje2SHdj%2BvC2%2BP%2FHZu1jSaI1tQUEhMc7ZSqlz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sat, 25 Apr 2026 12:16:39 GMT\r\ncf-ray: 9f1d47b7785e56a2-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-27T18:18:23.901453Z","times_seen":315190,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"cxonboard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-25","alert":"Phishing Block","trigger":"cxonboard.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"cxonboard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"cxonboard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/main/site.css?v=kuv4TawwoE64onYR0GfAu7WeSdRysOcG1wH6q4pXSAE","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06","date":"2026-04-25T12:16:39.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcpay907928.lndyn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 21:03:25 GMT","end":"Sat, 18 Jul 2026 21:03:24 GMT"},"fingerprint":{"sha1":"1B:C1:74:99:3B:F7:42:56:C8:50:0B:85:1A:D6:65:01:DD:2C:C9:43","sha256":"96:03:EF:6E:26:32:75:C0:18:2C:79:C6:53:27:10:40:BD:08:7F:AF:9B:95:F6:C5:BF:1B:58:A3:57:E0:26:16"}}},"request":{"raw":"GET /main/site.css?v=kuv4TawwoE64onYR0GfAu7WeSdRysOcG1wH6q4pXSAE HTTP/1.1\r\nHost: btcpay907928.lndyn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 12:16:39 GMT\r\ncontent-type: text/css\r\ncache-control: public,max-age=31536000\r\netag: W/\"1dc90d8b0ee67dc\"\r\nlast-modified: Thu, 29 Jan 2026 04:35:27 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30300,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (866)","md5":"64bd64dadaf306eef381f1496be5a252","sha1":"c086d4ab58daa2efd7321f5a61b597f6d49a8658","sha256":"92ebf84dac30a04eb8a27611d067c0bbb59e49d472b0e706d701faab8a574801","sha512":"edb1f778c9a3cb0f282952091f734ec98bf7e32acddc3f792f893c39ae6f66c497ec69ef8b137c037e1517a16347ef6de9f21009abc1403f8d7638bf2b1236a1","ssdeep":"384:hxPhu+fp3yZvdr/2PLHnlzqqslOYiqYePdA8sTGIBY:hJyZvAHdzYiqYelAxTw","tlshash":"59d27300d9b36978ac7b96242fdf6648731ca043ce09ed6cbadd20444fc62fd9c66e94","first_seen":"2025-08-04T06:10:28.74914Z","last_seen":"2026-04-25T14:28:41.427435Z","times_seen":33,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/vendor/jquery-validate-unobtrusive/jquery.validate.unobtrusive.js?v=LmzdY-Okp130SCZsjbN6_WkFEOESflnda1b5AJNnw6Y","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06","date":"2026-04-25T12:16:39.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcpay907928.lndyn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 21:03:25 GMT","end":"Sat, 18 Jul 2026 21:03:24 GMT"},"fingerprint":{"sha1":"1B:C1:74:99:3B:F7:42:56:C8:50:0B:85:1A:D6:65:01:DD:2C:C9:43","sha256":"96:03:EF:6E:26:32:75:C0:18:2C:79:C6:53:27:10:40:BD:08:7F:AF:9B:95:F6:C5:BF:1B:58:A3:57:E0:26:16"}}},"request":{"raw":"GET /vendor/jquery-validate-unobtrusive/jquery.validate.unobtrusive.js?v=LmzdY-Okp130SCZsjbN6_WkFEOESflnda1b5AJNnw6Y HTTP/1.1\r\nHost: btcpay907928.lndyn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 12:16:39 GMT\r\ncontent-type: text/javascript\r\ncache-control: public,max-age=31536000\r\netag: W/\"1dc90d8b0ee593a\"\r\nlast-modified: Thu, 29 Jan 2026 04:35:27 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18618,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"79ca56d4af2c2986b8a886790945805f","sha1":"85ef225144982cef56269008dcc98d3a610a3657","sha256":"2e6cdd63e3a4a75df448266c8db37afd690510e1127e59dd6b56f9009367c3a6","sha512":"518b6965d359f60c61d9b7768f84a9ad8a7aa907e9006ad0d268aaf35c4f2a2312900ec498e253fc1f95e4bc8ab31ac1a6baed7a7b8b698aa8fbf976c811db42","ssdeep":"384:WiZ6mPiQ1rdgpMGr1Jn0JncPlf5qcVeWdRC/nnQA8yPm1BKCbJnna2MlZFOHCCbx:WQ1rdA0J4F5qHLMBOY","tlshash":"1e824f48399743318da730ed5b9fe004b6b4c227b015c851b89d43e55f59ef4a3a3b9e","first_seen":"2023-03-12T07:56:20Z","last_seen":"2026-04-25T23:27:53.587608Z","times_seen":112,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cxonboard.com/","date":"2026-04-25T12:16:39.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cxonboard.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 24 Apr 2026 23:13:58 GMT\r\nexpires: Sat, 24 Apr 2027 23:13:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 46961\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-04-27T18:23:16.342113Z","times_seen":9692,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":131,"dns":0,"connect":8,"send":0,"wait":8,"receive":3,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/main/themes/default-dark.css?v=oZbmHsUytKCXWh1vLiI0kB1DUSGa_sUEx3N3CrIpY-0","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06","date":"2026-04-25T12:16:39.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcpay907928.lndyn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 21:03:25 GMT","end":"Sat, 18 Jul 2026 21:03:24 GMT"},"fingerprint":{"sha1":"1B:C1:74:99:3B:F7:42:56:C8:50:0B:85:1A:D6:65:01:DD:2C:C9:43","sha256":"96:03:EF:6E:26:32:75:C0:18:2C:79:C6:53:27:10:40:BD:08:7F:AF:9B:95:F6:C5:BF:1B:58:A3:57:E0:26:16"}}},"request":{"raw":"GET /main/themes/default-dark.css?v=oZbmHsUytKCXWh1vLiI0kB1DUSGa_sUEx3N3CrIpY-0 HTTP/1.1\r\nHost: btcpay907928.lndyn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 12:16:39 GMT\r\ncontent-type: text/css\r\ncache-control: public,max-age=31536000\r\netag: W/\"1dc90d8b0ee1886\"\r\nlast-modified: Thu, 29 Jan 2026 04:35:27 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2310,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"67484e9315cc832a54ab86443aefd38a","sha1":"3b2c605cb1615ff855516358135ba6ca4710927b","sha256":"a196e61ec532b4a0975a1d6f2e2234901d4351219afec504c773770ab22963ed","sha512":"981a86012c2aeb899eb88c1a264e19541d9c5678cf6a82352fceb9ca732fbcc73f4d55d252d9857ab9f61f40ac4d1a3a06accd37a1f66d0c1889dc278af324fa","ssdeep":"","tlshash":"85418358d120b9bc39ff9e762ece290d626c64014e16e6816a82c15c0f833bf3ddcc99","first_seen":"2024-08-19T13:50:35.268208Z","last_seen":"2026-04-25T14:28:41.428505Z","times_seen":41,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/vendor/jquery-validate/jquery.validate.js?v=rV2mESVTvXURrqZN0Y0jzveXQyFIFC12ZCTJAN2RnQo","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06","date":"2026-04-25T12:16:39.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcpay907928.lndyn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 21:03:25 GMT","end":"Sat, 18 Jul 2026 21:03:24 GMT"},"fingerprint":{"sha1":"1B:C1:74:99:3B:F7:42:56:C8:50:0B:85:1A:D6:65:01:DD:2C:C9:43","sha256":"96:03:EF:6E:26:32:75:C0:18:2C:79:C6:53:27:10:40:BD:08:7F:AF:9B:95:F6:C5:BF:1B:58:A3:57:E0:26:16"}}},"request":{"raw":"GET /vendor/jquery-validate/jquery.validate.js?v=rV2mESVTvXURrqZN0Y0jzveXQyFIFC12ZCTJAN2RnQo HTTP/1.1\r\nHost: btcpay907928.lndyn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 12:16:39 GMT\r\ncontent-type: text/javascript\r\ncache-control: public,max-age=31536000\r\netag: W/\"1dc90d8b0eeb706\"\r\nlast-modified: Thu, 29 Jan 2026 04:35:27 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42630,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (511)","md5":"c29329b3785f63b3c4ea85b9d25ad653","sha1":"7f7c82b1cbfa21a1948f5cf70fce9267361e3019","sha256":"827ccfc99aee080b4d87540736a4f44601369fb8e6ea276d37a0eb0378fcb9b7","sha512":"2d3973613173163be472ca0880826e2169dc9ca794defbdea537ff3d34ac10f04fb4babd7bca1d56082c951f3ae2afff6b030e831e1838173311793384bf4a41","ssdeep":"768:XlXMiVvARSSKBvI/Vrom26//A9Of5Kstt+2KTq/L4gDue84kI9YON3mGnfaBVXu3:WiVvARSSKdI/Vron6//A9Of5KsTdIxg/","tlshash":"09135088fbde005b4a6931aeac5e51cd76fc4071a500a87ebcdd14a425e4dbc12f9f78","first_seen":"2023-04-05T15:14:35Z","last_seen":"2026-04-27T12:25:16.914384Z","times_seen":447,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cxonboard.com/favicon.ico","fqdn":"cxonboard.com","domain":"cxonboard.com","tld":"com"},"ip":{"addr":"172.67.152.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cxonboard.com/","date":"2026-04-25T12:16:39.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cxonboard.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Apr 2026 11:12:31 GMT","end":"Tue, 14 Jul 2026 11:12:30 GMT"},"fingerprint":{"sha1":"C9:80:EC:CA:6E:CE:46:67:AC:1B:EB:A6:6E:F2:BD:B3:45:A3:17:0B","sha256":"28:35:C8:C7:4C:7A:6A:84:E8:80:98:FE:E1:DD:EF:BB:F7:1A:CE:46:34:A6:F5:82:41:5F:B7:17:81:6A:41:16"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cxonboard.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cxonboard.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 25 Apr 2026 12:16:40 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xk%2B1uek7%2Fgp%2BnEKAkEIHz%2FGTx9%2FyGTDzHCNIFWZKPdOPOZtQ5sFe0AH7sGuJH2p3qd%2FvcQx72WQKwKiUplHUXiuRZN8bcjh1lez9yavAomU8GJmXLRUuQE4dETH33nlJ\"}]}\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1d47b9088356a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":276,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"5de712b76d065b39d2169e3bd8d2ae61","sha1":"6bc6ecfde6df313453afeefc3da8f55da7ae45f8","sha256":"a6de8159889c9ad926048fbb6fe0ebd1776bd1953feaf68a0c8cc7cd83995267","sha512":"234c6fcf85194f82a58aef05656c3a1895d8e73fa7ff806f478b1b5b2a68daf3b5fa8b62b90655f167c28bc3f261060e635889ecd9e3af9737515610d31d3474","ssdeep":"","tlshash":"a3d02bde9043638b5922159039c155c2268d12e6a47a85e82dc6d88b529863ecdabe8c","first_seen":"2026-04-25T12:17:06.78256Z","last_seen":"2026-04-25T12:17:06.78256Z","times_seen":1,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"cxonboard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"cxonboard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"cxonboard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-25","alert":"Phishing Block","trigger":"cxonboard.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/main/fonts/OpenSans.css?v=5or0eXX_npKCPPnU9xra_vLu1Z6CkpExoyK3FcrhT0E","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06","date":"2026-04-25T12:16:39.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcpay907928.lndyn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 21:03:25 GMT","end":"Sat, 18 Jul 2026 21:03:24 GMT"},"fingerprint":{"sha1":"1B:C1:74:99:3B:F7:42:56:C8:50:0B:85:1A:D6:65:01:DD:2C:C9:43","sha256":"96:03:EF:6E:26:32:75:C0:18:2C:79:C6:53:27:10:40:BD:08:7F:AF:9B:95:F6:C5:BF:1B:58:A3:57:E0:26:16"}}},"request":{"raw":"GET /main/fonts/OpenSans.css?v=5or0eXX_npKCPPnU9xra_vLu1Z6CkpExoyK3FcrhT0E HTTP/1.1\r\nHost: btcpay907928.lndyn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 12:16:39 GMT\r\ncontent-type: text/css\r\ncache-control: public,max-age=31536000\r\netag: W/\"1dc90d8b0ee1cfa\"\r\nlast-modified: Thu, 29 Jan 2026 04:35:27 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3450,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8b799cd4f6c3f9f20396a27e0a74cf73","sha1":"9c4a542f2b7b4c33ee052135b5c2c51047635694","sha256":"e68af47975ff9e92823cf9d4f71adafef2eed59e82929131a322b715cae14f41","sha512":"9da157c3617e07974aba592988ff41f106f143a22dea0e42f22d055c2b40ab16895fce8edb41ef5ed242e76b3ffe3a7ad65bd8148493d50298c7c8e5ada9e022","ssdeep":"","tlshash":"1961e5551aeb3a268b020e4b7f9f5d298f285d31310d85bb2f7ca8405cbaf5c53a4b4d","first_seen":"2024-01-07T20:06:57Z","last_seen":"2026-04-25T14:28:41.415927Z","times_seen":53,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/main/site.js?v=j3vAWnNm90JNA-dtVMKs-4RUWI2NcaPFjbEkvVsyl7s","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06","date":"2026-04-25T12:16:39.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcpay907928.lndyn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 21:03:25 GMT","end":"Sat, 18 Jul 2026 21:03:24 GMT"},"fingerprint":{"sha1":"1B:C1:74:99:3B:F7:42:56:C8:50:0B:85:1A:D6:65:01:DD:2C:C9:43","sha256":"96:03:EF:6E:26:32:75:C0:18:2C:79:C6:53:27:10:40:BD:08:7F:AF:9B:95:F6:C5:BF:1B:58:A3:57:E0:26:16"}}},"request":{"raw":"GET /main/site.js?v=j3vAWnNm90JNA-dtVMKs-4RUWI2NcaPFjbEkvVsyl7s HTTP/1.1\r\nHost: btcpay907928.lndyn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 12:16:39 GMT\r\ncontent-type: text/javascript\r\ncache-control: public,max-age=31536000\r\netag: W/\"1dc90d8b0ee4b2d\"\r\nlast-modified: Thu, 29 Jan 2026 04:35:27 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23213,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"2553c313bd3ee55bacfdbe6f68487f4e","sha1":"33ea024a2ade02f6f3a5af80af4ab96719ba4f37","sha256":"8f7bc05a7366f7424d03e76d54c2acfb8454588d8d71a3c58db124bd5b3297bb","sha512":"53633b4d7d400919b60f5a8810ac35e9cd53fd95951fcd2fd47a0dddf1fcae59a6cbfb4917275984bcb9dae1c4917db75aad897dccd60f33e022f6ffb1eb9e9a","ssdeep":"384:GU+qMq5/I0rf9D0wzb1GeRhRZwPnljIKCW:Gpq3/I0rf9D001GeRhR2z7","tlshash":"eea2a72971b3113147bb70bb1f9b20017a3220477945d9587e4dc7842fa0aa9eafbbdd","first_seen":"2026-02-11T06:35:11.683989Z","last_seen":"2026-04-25T14:28:41.418851Z","times_seen":27,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cxonboard.com/","date":"2026-04-25T12:16:39.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Plus+Jakarta+Sans:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cxonboard.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 25 Apr 2026 12:16:39 GMT\r\ndate: Sat, 25 Apr 2026 12:16:39 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8520,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"612eba4131c0b0f312afeec87ba75848","sha1":"8d8781f681d811fffe090ba3c12a3bc3160251fa","sha256":"2fe46206b69b1a3bd5ecd62dd2de57d1e0e0976f69b7c12a5894dbae17db856e","sha512":"bb07c109d08f88ced8fa3c2cf9764b633f7341604079f9a0d187f04adb3cba35eafea1e91cf54e520eff973d089394d4c4b66cd3617f943dce2108d3545f0d1f","ssdeep":"96:HOEaCyOEauOEahJc+ueOEaCNuOXaCyOXauOXahJc+ueOXaCNuOxMaCyOxMauOxMF:ACFJRSdCmaRBUCj3Ro7CcQRvSC5VRed","tlshash":"2b02a2a0092fa540eb431cc663cf3d3a9e9e6196601584b99bfd0858dc7ec2a7375b1c","first_seen":"2025-09-26T18:34:54.70177Z","last_seen":"2026-04-27T17:40:26.547552Z","times_seen":693,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":171,"dns":1,"connect":21,"send":0,"wait":33,"receive":0,"ssl":151},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cxonboard.com/logo.png","fqdn":"cxonboard.com","domain":"cxonboard.com","tld":"com"},"ip":{"addr":"172.67.152.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cxonboard.com/","date":"2026-04-25T12:16:39.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cxonboard.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Apr 2026 11:12:31 GMT","end":"Tue, 14 Jul 2026 11:12:30 GMT"},"fingerprint":{"sha1":"C9:80:EC:CA:6E:CE:46:67:AC:1B:EB:A6:6E:F2:BD:B3:45:A3:17:0B","sha256":"28:35:C8:C7:4C:7A:6A:84:E8:80:98:FE:E1:DD:EF:BB:F7:1A:CE:46:34:A6:F5:82:41:5F:B7:17:81:6A:41:16"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: cxonboard.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cxonboard.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 25 Apr 2026 12:16:39 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 12 Mar 2026 22:33:10 GMT\r\netag: \"f7c2-64cdb565dd844\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 63426\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rv7fCgOCuFmxuAVeraN%2FDYGVV6jO0WPJ5gRZWCGck9ZoSPilpuVUBlWDzxN0SLD8upETHBa37CFp%2Bgb1KXESpxYYizC7srUcfXrrecZKNpAvBMl%2Bmm4RzRwR5Hg6jFo8\"}]}\r\ncf-ray: 9f1d47b7285856a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63426,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 458, 8-bit/color RGBA, non-interlaced","md5":"451da15872f488ff9f596807759025aa","sha1":"1273a330a0832939b1af4e413d6c075b285cca90","sha256":"562053c0057f32631188ebce151b15d11a4ca58f62fd3e0606f1e67d1fea7ae6","sha512":"e8ac2bc14354d2d55fd3e52e7580027b249c8f200b2782a318d5991c38bc249bdf6c50d3b89f03f3573ac828890bc1134cbebe4650296b789fdbc68a876cc292","ssdeep":"1536:nQAqAL9V9+H3fRMGQInpHY8tYhNmsB3w5e+/fWp7RqpXSmjtL:nQAqALT9+X57npHY8tYhNmsB3w4+nhXl","tlshash":"215302d4af565828d80bed312891179443f9c71e428183d1bb3ef261ef09ea3fab7591","first_seen":"2026-04-25T12:17:06.786121Z","last_seen":"2026-04-25T14:28:41.414421Z","times_seen":2,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-25","alert":"Phishing Block","trigger":"cxonboard.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"cxonboard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"cxonboard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"cxonboard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cxonboard.com/","date":"2026-04-25T12:16:39.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cxonboard.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 24 Apr 2026 23:13:58 GMT\r\nexpires: Sat, 24 Apr 2027 23:13:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 46961\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-04-27T18:23:16.342113Z","times_seen":9692,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":79,"dns":1,"connect":7,"send":0,"wait":9,"receive":8,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/main/utils.js?v=GGKGEnV8_rl1MlU1mHEhO9a-tTDyY9wYKWz3LURGvYo","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06","date":"2026-04-25T12:16:39.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcpay907928.lndyn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 21:03:25 GMT","end":"Sat, 18 Jul 2026 21:03:24 GMT"},"fingerprint":{"sha1":"1B:C1:74:99:3B:F7:42:56:C8:50:0B:85:1A:D6:65:01:DD:2C:C9:43","sha256":"96:03:EF:6E:26:32:75:C0:18:2C:79:C6:53:27:10:40:BD:08:7F:AF:9B:95:F6:C5:BF:1B:58:A3:57:E0:26:16"}}},"request":{"raw":"GET /main/utils.js?v=GGKGEnV8_rl1MlU1mHEhO9a-tTDyY9wYKWz3LURGvYo HTTP/1.1\r\nHost: btcpay907928.lndyn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 12:16:39 GMT\r\ncontent-type: text/javascript\r\ncache-control: public,max-age=31536000\r\netag: W/\"1dc90d8b0ee14ca\"\r\nlast-modified: Thu, 29 Jan 2026 04:35:27 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1354,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"5b0f6f06bb765e4c1ef60a5c9cca5de0","sha1":"8b73b98a6db0641ecb7ee1e32c6eed3a214f5e71","sha256":"18628612757cfeb9753255359871213bd6beb530f263dc18296cf72d4446bd8a","sha512":"61d21c34824a5eafea69adf893802e7a104d2656198d30f78ca363949aea8a820c35a687b712857252b87de1499e079ff42422a4a8c1537bdcd56111c0e817f5","ssdeep":"","tlshash":"7221101b36b785b24933aaf65b6ba5c12e35139b2a05d6563c0e8b200f50d2c2156b92","first_seen":"2026-02-11T06:35:11.705598Z","last_seen":"2026-04-25T14:28:41.417125Z","times_seen":27,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cxonboard.com/","date":"2026-04-25T12:16:39.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cxonboard.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 24 Apr 2026 23:13:58 GMT\r\nexpires: Sat, 24 Apr 2027 23:13:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 46961\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-04-27T18:23:16.342113Z","times_seen":9692,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":59,"dns":1,"connect":20,"send":0,"wait":8,"receive":4,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/main/bootstrap/bootstrap.css?v=xA5bs9boeKDtToIPljUhTotEvXPwwGyGL38b-51Frq4","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06","date":"2026-04-25T12:16:39.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcpay907928.lndyn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 21:03:25 GMT","end":"Sat, 18 Jul 2026 21:03:24 GMT"},"fingerprint":{"sha1":"1B:C1:74:99:3B:F7:42:56:C8:50:0B:85:1A:D6:65:01:DD:2C:C9:43","sha256":"96:03:EF:6E:26:32:75:C0:18:2C:79:C6:53:27:10:40:BD:08:7F:AF:9B:95:F6:C5:BF:1B:58:A3:57:E0:26:16"}}},"request":{"raw":"GET /main/bootstrap/bootstrap.css?v=xA5bs9boeKDtToIPljUhTotEvXPwwGyGL38b-51Frq4 HTTP/1.1\r\nHost: btcpay907928.lndyn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 12:16:39 GMT\r\ncontent-type: text/css\r\ncache-control: public,max-age=31536000\r\netag: W/\"1dc90d8b0eab9b6\"\r\nlast-modified: Thu, 29 Jan 2026 04:35:27 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":305206,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (347)","md5":"960a2476e87e7f52bc40affa18e799ea","sha1":"f6c1119b54e4017d03f177f9e07f2e5f328a472d","sha256":"c40e5bb3d6e878a0ed4e820f9635214e8b44bd73f0c06c862f7f1bfb9d45aeae","sha512":"e24605f19a241727969ea860cd88e168c652bf8019e9ee123d9e6ddea91430a20c1f4258b3e38546dccf4464bfd7b06b85956571e962f169fbc1d0dc74e6f24f","ssdeep":"1536:hD+v3SCzl7kKsQP2GQ51xof5J/1d+hVMjyNBj+zxe5uv80uDtIjNbPZ6yGTWs:27w0uDtIjNbPZsj","tlshash":"c4541158f9f1247838bb9a796dcfbafc7b6c50418a09cc61b6c121248f473ed5ca6d48","first_seen":"2025-05-06T14:54:46.900574Z","last_seen":"2026-04-25T14:28:41.420383Z","times_seen":39,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/main/themes/default.css?v=niXnkDTK2DxlcfZP0_JEWgzb0N7cTjcU4-I0nqNSl_4","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06","date":"2026-04-25T12:16:39.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcpay907928.lndyn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 21:03:25 GMT","end":"Sat, 18 Jul 2026 21:03:24 GMT"},"fingerprint":{"sha1":"1B:C1:74:99:3B:F7:42:56:C8:50:0B:85:1A:D6:65:01:DD:2C:C9:43","sha256":"96:03:EF:6E:26:32:75:C0:18:2C:79:C6:53:27:10:40:BD:08:7F:AF:9B:95:F6:C5:BF:1B:58:A3:57:E0:26:16"}}},"request":{"raw":"GET /main/themes/default.css?v=niXnkDTK2DxlcfZP0_JEWgzb0N7cTjcU4-I0nqNSl_4 HTTP/1.1\r\nHost: btcpay907928.lndyn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 12:16:39 GMT\r\ncontent-type: text/css\r\ncache-control: public,max-age=31536000\r\netag: W/\"1dc90d8b0ee5f92\"\r\nlast-modified: Thu, 29 Jan 2026 04:35:27 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19986,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1259d8ec18f0bea6c7b16e0dd12655b3","sha1":"6ededb3c824eb32bbf2672fcc64afbe925952c36","sha256":"9e25e79034cad83c6571f64fd3f2445a0cdbd0dedc4e3714e3e2349ea35297fe","sha512":"0576ec6b18fffccd59d3b9f2d4eae28e31b4f995cf66872c674fb3d1b58b2b470093713205ba6576de22eff41fd544b77488e30288cba7b94d062d8196213fb9","ssdeep":"192:WEBKHjoKjFkFlFKeh4dFZ9gnNjzU44yJM99+9N0ZrG9q9hBYEg6MxpyJkIkoUVEo:tKTjFRTdwR","tlshash":"af925814d120b9bc39ff9d7b7ece2a4e226824818915da91bec590180f833be3dddd85","first_seen":"2025-05-06T14:54:46.917495Z","last_seen":"2026-04-25T14:28:41.425205Z","times_seen":39,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/js/theme-switch.js?v=FD4J-7Hw_Q1BpQRNQrv3VMtgBJy9_rjJOQLjWsV03dQ","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06","date":"2026-04-25T12:16:39.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcpay907928.lndyn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 21:03:25 GMT","end":"Sat, 18 Jul 2026 21:03:24 GMT"},"fingerprint":{"sha1":"1B:C1:74:99:3B:F7:42:56:C8:50:0B:85:1A:D6:65:01:DD:2C:C9:43","sha256":"96:03:EF:6E:26:32:75:C0:18:2C:79:C6:53:27:10:40:BD:08:7F:AF:9B:95:F6:C5:BF:1B:58:A3:57:E0:26:16"}}},"request":{"raw":"GET /js/theme-switch.js?v=FD4J-7Hw_Q1BpQRNQrv3VMtgBJy9_rjJOQLjWsV03dQ HTTP/1.1\r\nHost: btcpay907928.lndyn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 12:16:39 GMT\r\ncontent-type: text/javascript\r\ncache-control: public,max-age=31536000\r\netag: W/\"1dc90d8b0ee1549\"\r\nlast-modified: Thu, 29 Jan 2026 04:35:27 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1225,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"d300c302e8b432e3e2654dfbee82ea20","sha1":"e639dc3bb8f7a140dd25b91cdb71c886b2216510","sha256":"143e09fbb1f0fd0d41a5044d42bbf754cb60049cbdfeb8c93902e35ac574ddd4","sha512":"8fb1887d2e3b7348cfe39aebeb5077d3a236f8116a10c39d4e816a72c0a5ca323f836025246d5199d47548d394a0f0ed7c4554d6817ae50b4f79dd02e12178b1","ssdeep":"","tlshash":"6e21673c1027221604b724ac372b3520687a30237029cd153f9e86519f2a59ae2b9fdf","first_seen":"2024-01-25T18:16:59Z","last_seen":"2026-04-25T14:28:41.421836Z","times_seen":43,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/vendor/bootstrap/bootstrap.bundle.min.js?v=CDOy6cOibCWEdsRiZuaHf8dSGGJRYuBGC-mjoJimHGw","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06","date":"2026-04-25T12:16:39.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcpay907928.lndyn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 21:03:25 GMT","end":"Sat, 18 Jul 2026 21:03:24 GMT"},"fingerprint":{"sha1":"1B:C1:74:99:3B:F7:42:56:C8:50:0B:85:1A:D6:65:01:DD:2C:C9:43","sha256":"96:03:EF:6E:26:32:75:C0:18:2C:79:C6:53:27:10:40:BD:08:7F:AF:9B:95:F6:C5:BF:1B:58:A3:57:E0:26:16"}}},"request":{"raw":"GET /vendor/bootstrap/bootstrap.bundle.min.js?v=CDOy6cOibCWEdsRiZuaHf8dSGGJRYuBGC-mjoJimHGw HTTP/1.1\r\nHost: btcpay907928.lndyn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 12:16:39 GMT\r\ncontent-type: text/javascript\r\ncache-control: public,max-age=31536000\r\netag: W/\"1dc90d8b0ef2ad1\"\r\nlast-modified: Thu, 29 Jan 2026 04:35:27 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80721,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-04-27T18:21:30.471029Z","times_seen":23256,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/js/copy-to-clipboard.js?v=gUIhHSFrxjOWYkQXgWIWW0meIeilBL1BZcAaKvrd8W4","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06","date":"2026-04-25T12:16:39.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcpay907928.lndyn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 21:03:25 GMT","end":"Sat, 18 Jul 2026 21:03:24 GMT"},"fingerprint":{"sha1":"1B:C1:74:99:3B:F7:42:56:C8:50:0B:85:1A:D6:65:01:DD:2C:C9:43","sha256":"96:03:EF:6E:26:32:75:C0:18:2C:79:C6:53:27:10:40:BD:08:7F:AF:9B:95:F6:C5:BF:1B:58:A3:57:E0:26:16"}}},"request":{"raw":"GET /js/copy-to-clipboard.js?v=gUIhHSFrxjOWYkQXgWIWW0meIeilBL1BZcAaKvrd8W4 HTTP/1.1\r\nHost: btcpay907928.lndyn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 12:16:39 GMT\r\ncontent-type: text/javascript\r\ncache-control: public,max-age=31536000\r\netag: W/\"1dc90d8b0ee1d78\"\r\nlast-modified: Thu, 29 Jan 2026 04:35:27 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3320,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"94407889f195ad53d8fa401d8fccbd8d","sha1":"06bad941f5eb52ca35f86f76bd8dd21739a5bfde","sha256":"8142211d216bc633966244178162165b499e21e8a504bd4165c01a2afaddf16e","sha512":"de1420acae9f32c0fa2bc6dd72b8fc956fd2884ad4aebdf478753717599d10dad6a1968d4d75c8ef7afc93ed5d3643b4dc16bac71aebbfcd6a8f6abf1c58fe95","ssdeep":"","tlshash":"3461006ef2be25b6c167bc65662f17023821b1437c46c89dbd5ccb401f10c29a9abba5","first_seen":"2025-08-04T06:10:28.782739Z","last_seen":"2026-04-25T14:28:41.429203Z","times_seen":37,"resource_available":true,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cxonboard.com/","date":"2026-04-25T12:16:39.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcpay907928.lndyn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 21:03:25 GMT","end":"Sat, 18 Jul 2026 21:03:24 GMT"},"fingerprint":{"sha1":"1B:C1:74:99:3B:F7:42:56:C8:50:0B:85:1A:D6:65:01:DD:2C:C9:43","sha256":"96:03:EF:6E:26:32:75:C0:18:2C:79:C6:53:27:10:40:BD:08:7F:AF:9B:95:F6:C5:BF:1B:58:A3:57:E0:26:16"}}},"request":{"raw":"GET /forms/acd1b2e3-f84b-451b-b000-5955782b5c06 HTTP/1.1\r\nHost: btcpay907928.lndyn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cxonboard.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 12:16:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nset-cookie: .AspNetCore.Antiforgery.Mk-_zf2J-V0=CfDJ8BNKlOJiqZZFg7jq3k43ihazW5M0xyVfxjf65QSJXJA79u8tdm-n8W-FpylQ76BFt1yPWFyDuvFDNZy5rOQML_UTJW81IT0mSZqNxrvXPM6oqsCINXX2SttQw57-6O1mpWgnf-cU-z8RIus8lDLDwAc; path=/; secure; samesite=strict; httponly\n.AspNetCore.Mvc.CookieTempDataProvider=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; secure; samesite=lax; httponly\r\nonion-location: http://nxu4geml7uzdawuffphwejdrz4j3n3kjb2ptea3iatkdujtsbtc2ufid.onion/forms/acd1b2e3-f84b-451b-b000-5955782b5c06\r\ncontent-security-policy: script-src 'self' 'nonce-629d665964f7a93e9e46960e02405ff9' 'nonce-1585b963ef6f0c7cbe201194bc62ba0e'\r\nreferrer-policy: same-origin\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":16721,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2263)","md5":"5259f094eb2f0514d57e8202388ad74f","sha1":"33ba65890653b45d74d11718bc0b06e9db879932","sha256":"d27e2d1be221f9397a818002cf47e0372be204ab08284bdafbc8b30cc9a5b127","sha512":"372b066900ca9eeea4584775e7bac92a53967f149bdd957c0fcad9db62c98566043689807c7b07357afc5507b353e2af2ef037049d4ed5dadd145702a70bac57","ssdeep":"192:LjjVSBV/lBJ9jCZuiwctJe0WCXiDN3xIH9e4DS5KNbfKMJMURT+MrluxbwdD:Lj8j7iLWYiDN3ADS54MURT+MrEpQ","tlshash":"2b72e80870a069b94c730ce6ffe96b167ad4b10bc6259c41b0ec4bb40fd2e993da7e55","first_seen":"2026-04-25T12:17:06.792285Z","last_seen":"2026-04-25T12:17:06.792285Z","times_seen":1,"resource_available":false,"data":null}},"time_used":880,"timings":{"blocked":372,"dns":140,"connect":110,"send":0,"wait":131,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/main/layout.css?v=mZVJZc-lAcZE-pUcj-aXBEjuqhBLm6fI8EL-ST5llnk","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06","date":"2026-04-25T12:16:39.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcpay907928.lndyn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 21:03:25 GMT","end":"Sat, 18 Jul 2026 21:03:24 GMT"},"fingerprint":{"sha1":"1B:C1:74:99:3B:F7:42:56:C8:50:0B:85:1A:D6:65:01:DD:2C:C9:43","sha256":"96:03:EF:6E:26:32:75:C0:18:2C:79:C6:53:27:10:40:BD:08:7F:AF:9B:95:F6:C5:BF:1B:58:A3:57:E0:26:16"}}},"request":{"raw":"GET /main/layout.css?v=mZVJZc-lAcZE-pUcj-aXBEjuqhBLm6fI8EL-ST5llnk HTTP/1.1\r\nHost: btcpay907928.lndyn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 12:16:39 GMT\r\ncontent-type: text/css\r\ncache-control: public,max-age=31536000\r\netag: W/\"1dc90d8b0ee57a2\"\r\nlast-modified: Thu, 29 Jan 2026 04:35:27 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17954,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"ee7a31966f303126c7ea80a265eb5df4","sha1":"55b42c428a4399bcadc0c886e8bbd14eff20e398","sha256":"7859a19d0e33f1bdc5be53b2967d28f46d0c1602e8979f995ff3bba0fa566972","sha512":"f4649b0692ad252a891fd1c73ca1917c7f14ce522f0248ea9f535bae99433711578faf96a59021d76269931a38898bdbe0789d8f08a84bbbb64ce5202f53671d","ssdeep":"192:9lVAmRv/zLnSlXAC3f2n1q/TnZiUyPH3jDdeDvslGFKxGuWOK/ZVZzT+H4aeqU7Z:jVhvtQQVTK/ZVtaMJWMvepJjciYjCOb","tlshash":"18823561aa3370b8ad77667c6bdf615c72a8a0434e09989cba8d11084fc33fd5d47f89","first_seen":"2025-08-04T06:10:28.788405Z","last_seen":"2026-04-25T14:28:41.424638Z","times_seen":38,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/vendor/flatpickr/flatpickr.js?v=8JjFd2_SowFyDnEwKGCXnvEUEMOYRuk9wPYg-ghhTwo","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06","date":"2026-04-25T12:16:39.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcpay907928.lndyn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 21:03:25 GMT","end":"Sat, 18 Jul 2026 21:03:24 GMT"},"fingerprint":{"sha1":"1B:C1:74:99:3B:F7:42:56:C8:50:0B:85:1A:D6:65:01:DD:2C:C9:43","sha256":"96:03:EF:6E:26:32:75:C0:18:2C:79:C6:53:27:10:40:BD:08:7F:AF:9B:95:F6:C5:BF:1B:58:A3:57:E0:26:16"}}},"request":{"raw":"GET /vendor/flatpickr/flatpickr.js?v=8JjFd2_SowFyDnEwKGCXnvEUEMOYRuk9wPYg-ghhTwo HTTP/1.1\r\nHost: btcpay907928.lndyn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 12:16:39 GMT\r\ncontent-type: text/javascript\r\ncache-control: public,max-age=31536000\r\netag: W/\"1dc90d8b0efcbff\"\r\nlast-modified: Thu, 29 Jan 2026 04:35:27 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":121471,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (311)","md5":"38789c4f4e6cb355b69b0ef72b0269db","sha1":"c54e43492fd3b5d0b658e246c1f46d58c0624129","sha256":"f098c5776fd2a301720e71302860979ef11410c39846e93dc0f620fa08614f0a","sha512":"aedf8e115e56d76afa1e4c26c0610a3c63849c7ccac4922bb93636927846db33e0a0f00a21cd166d71486a17c451a55df97e421456c9abbae982e9bab64aba41","ssdeep":"1536:QLkJcCmh0zkcdN4z25P0XLAhmtKDyA/pSwLvjkx8YeGoaltPfmBM/YosZQ7x:QL2ohi8eSL9KwoxBM/YoHx","tlshash":"a2c3614668e714325627687e9b9f20077e358f63054dde207c7ca2096fa892853fdfe8","first_seen":"2023-03-26T11:40:26Z","last_seen":"2026-04-25T14:28:41.416513Z","times_seen":59,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/fonts/open-sans-v17-latin-ext_latin-regular.woff2","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06","date":"2026-04-25T12:16:40.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcpay907928.lndyn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 21:03:25 GMT","end":"Sat, 18 Jul 2026 21:03:24 GMT"},"fingerprint":{"sha1":"1B:C1:74:99:3B:F7:42:56:C8:50:0B:85:1A:D6:65:01:DD:2C:C9:43","sha256":"96:03:EF:6E:26:32:75:C0:18:2C:79:C6:53:27:10:40:BD:08:7F:AF:9B:95:F6:C5:BF:1B:58:A3:57:E0:26:16"}}},"request":{"raw":"GET /fonts/open-sans-v17-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: btcpay907928.lndyn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btcpay907928.lndyn.com/main/fonts/OpenSans.css?v=5or0eXX_npKCPPnU9xra_vLu1Z6CkpExoyK3FcrhT0E\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 12:16:40 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19396\r\naccept-ranges: bytes\r\ncache-control: public,max-age=31536000\r\netag: \"1dc90d8b0ee5a44\"\r\nlast-modified: Thu, 29 Jan 2026 04:35:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19396,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"be21e759f9abd15b8cef68d92cedc081","sha1":"84a2292a0ae289e26139f38470c50b9fd9ed421f","sha256":"537d46273fe124bbced2f098f26222fa3155741e9d76f906c3c39e7fa09bf6a8","sha512":"5bceea1c31f944d77ac95406a484fdc5bf10a610784dd6568a11fd4bd0ae230d047b58de97195816a222720671d056c3148332ddd6f89966737a2bc6b965c731","ssdeep":"384:zIsUcxllFWN07g5RU5tTIg1C1n6bTAm+WWsYCv9jhJQ0F2ro4IIqJA:ksUc3SH1n6wm+xiv9R2RqJA","tlshash":"9e92d0070101203051b22b59d5d13edcffe46b8f95235ed529008bfeaad6169c53f5f1","first_seen":"2023-04-22T19:25:28Z","last_seen":"2026-04-27T12:08:48.251587Z","times_seen":653,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/fonts/open-sans-v17-latin-ext_latin-600.woff2","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06","date":"2026-04-25T12:16:40.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcpay907928.lndyn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 21:03:25 GMT","end":"Sat, 18 Jul 2026 21:03:24 GMT"},"fingerprint":{"sha1":"1B:C1:74:99:3B:F7:42:56:C8:50:0B:85:1A:D6:65:01:DD:2C:C9:43","sha256":"96:03:EF:6E:26:32:75:C0:18:2C:79:C6:53:27:10:40:BD:08:7F:AF:9B:95:F6:C5:BF:1B:58:A3:57:E0:26:16"}}},"request":{"raw":"GET /fonts/open-sans-v17-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: btcpay907928.lndyn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btcpay907928.lndyn.com/main/fonts/OpenSans.css?v=5or0eXX_npKCPPnU9xra_vLu1Z6CkpExoyK3FcrhT0E\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 12:16:40 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 20108\r\naccept-ranges: bytes\r\ncache-control: public,max-age=31536000\r\netag: \"1dc90d8b0ee5f0c\"\r\nlast-modified: Thu, 29 Jan 2026 04:35:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20108, version 1.0","md5":"ba13b15f5586edb960ed4a1f2ab7a27b","sha1":"62e43560aa59a69a1e7647a3516a90537ed0e520","sha256":"0b155ade172e77bc397377c1856af15289b509590b332b351e48f5c11f73a35e","sha512":"1bb8961898edc5b9f79da7305c3c883eb8b2ce057a7993b7f9fd9c3b412a34a542ffd9f86ebc9a0aaacbc91f1757c92466e2eefab05282be69520ac959c048aa","ssdeep":"384:K5Toh2bvK9VDaAD0VkvehgSGBQSjo4GN0Mf9tgFdp6EeyathEWG:SToh2rhADLmMCGo49FdkZrEWG","tlshash":"c092e0059429f4a6c30d2efdcd32a01a28d7156e3a3b0a27f5d910c3e671c6db29c973","first_seen":"2023-04-22T19:25:28Z","last_seen":"2026-04-27T04:19:59.773846Z","times_seen":444,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cxonboard.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"cxonboard.com","domain":"cxonboard.com","tld":"com"},"ip":{"addr":"172.67.152.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cxonboard.com/","date":"2026-04-25T12:16:39.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cxonboard.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Apr 2026 11:12:31 GMT","end":"Tue, 14 Jul 2026 11:12:30 GMT"},"fingerprint":{"sha1":"C9:80:EC:CA:6E:CE:46:67:AC:1B:EB:A6:6E:F2:BD:B3:45:A3:17:0B","sha256":"28:35:C8:C7:4C:7A:6A:84:E8:80:98:FE:E1:DD:EF:BB:F7:1A:CE:46:34:A6:F5:82:41:5F:B7:17:81:6A:41:16"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: cxonboard.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cxonboard.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Mon, 27 Apr 2026 12:16:39 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oM4DvwUrqIs%2F%2Bo7Avvr2zlTjpWWCBeTKA8%2BOcZiUYpaIFH%2BIVgJrW38k5pEfQnMgu25Bd9yv9TXMQ9B1wT2oGQvPMa3p6dOQGvGsF0CT97lCrMwuNCUNTBGoEUPwyuqT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sat, 25 Apr 2026 12:16:39 GMT\r\ncf-ray: 9f1d47b5784556a2-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-27T18:18:23.901453Z","times_seen":315190,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"cxonboard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"cxonboard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-25","alert":"Phishing Block","trigger":"cxonboard.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"cxonboard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/vendor/flatpickr/flatpickr.css?v=aTEDpz7abtWGeUQOzwxEDvFBy2H0_-4YlhmGHbTbU4Q","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06","date":"2026-04-25T12:16:39.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcpay907928.lndyn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 21:03:25 GMT","end":"Sat, 18 Jul 2026 21:03:24 GMT"},"fingerprint":{"sha1":"1B:C1:74:99:3B:F7:42:56:C8:50:0B:85:1A:D6:65:01:DD:2C:C9:43","sha256":"96:03:EF:6E:26:32:75:C0:18:2C:79:C6:53:27:10:40:BD:08:7F:AF:9B:95:F6:C5:BF:1B:58:A3:57:E0:26:16"}}},"request":{"raw":"GET /vendor/flatpickr/flatpickr.css?v=aTEDpz7abtWGeUQOzwxEDvFBy2H0_-4YlhmGHbTbU4Q HTTP/1.1\r\nHost: btcpay907928.lndyn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 12:16:39 GMT\r\ncontent-type: text/css\r\ncache-control: public,max-age=31536000\r\netag: W/\"1dc90d8b0ee5fb3\"\r\nlast-modified: Thu, 29 Jan 2026 04:35:27 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20019,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a91336e1e847a148520bc8bb0e61880d","sha1":"ce30bd12aca51677a02ed19bfd435a3e77a4558b","sha256":"693103a73eda6ed58679440ecf0c440ef141cb61f4ffee189619861db4db5384","sha512":"7370a67500990b63f79eb2b7043e4a0f3297cf407091dd672a0e66ab2bdecea16e0bedd4da94fef8dbe06d1aaa1ba3324fce8070a3d752c26a3f8ae5061c72d7","ssdeep":"384:gFFKaCDrVgyg06r29rhhw9Yed2HqPsrpP:MFPr29rhG2HqP4","tlshash":"78923e690a7306116526a6381fea638837289123458afcedfbda23344fc374dd5f47e9","first_seen":"2023-11-05T08:41:53Z","last_seen":"2026-04-25T14:28:41.421277Z","times_seen":58,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cxonboard.com/","fqdn":"cxonboard.com","domain":"cxonboard.com","tld":"com"},"ip":{"addr":"172.67.152.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-25T12:16:38.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cxonboard.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Apr 2026 11:12:31 GMT","end":"Tue, 14 Jul 2026 11:12:30 GMT"},"fingerprint":{"sha1":"C9:80:EC:CA:6E:CE:46:67:AC:1B:EB:A6:6E:F2:BD:B3:45:A3:17:0B","sha256":"28:35:C8:C7:4C:7A:6A:84:E8:80:98:FE:E1:DD:EF:BB:F7:1A:CE:46:34:A6:F5:82:41:5F:B7:17:81:6A:41:16"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cxonboard.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Apr 2026 12:16:39 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 19 Apr 2026 12:23:37 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JIXdrU7tZedG8%2FLrzmwsJIu%2FAXP0I7dID%2B5UXcdWT%2BbQiOkpoM2lxdJs5w24UE8OK1b5TmgbdZQg%2BOE9HxAnNkzxdDYo80pK0MaHs4cdZD5W%2Flgyocprd6GGa0YoB4kn\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9f1d47b2eddd8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50738,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (748)","md5":"e58f65fc01b298d1fdbcacaed5b00afc","sha1":"3a492c683ab06e1cf9b6294d65f582b15683e1cd","sha256":"68659dde005a6bac196a88a406f966ed6bc10f34848da4dc0c75328a95bf789a","sha512":"c2ad98c6bc28d57111be4f472001cd0f9d57ee78edab67e87dc22916df4c35d9ffccaee01556c495c630854733847c0308bbfdf83d255b7f7bdbc203f16a5721","ssdeep":"768:epQHL5WahRwJ7wR+pOnOhiWF/Bna1uqBbA7oMVNHNd5H5ZVTLWZS6M/YpmsgsMED:2Txna1uqBbA7vVNjTLWOYpmEbhAKzdD3","tlshash":"4633e92660a5043275639ca976b34f6f3660f107de0a8b5436ec52c89ff9ee1cd33698","first_seen":"2026-04-25T12:17:06.797227Z","last_seen":"2026-04-25T12:17:06.797227Z","times_seen":1,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":23,"dns":1,"connect":7,"send":0,"wait":188,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"cxonboard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-25","alert":"Phishing Block","trigger":"cxonboard.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"cxonboard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"cxonboard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btcpay907928.lndyn.com/LocalStorage/eda16b32-56dc-4922-8fb9-3f805b54434c-crypto.com%20logo%20blue.png","fqdn":"btcpay907928.lndyn.com","domain":"lndyn.com","tld":"com"},"ip":{"addr":"170.75.168.127","port":443,"asn":174,"as":"COGENT-174","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06","date":"2026-04-25T12:16:39.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcpay907928.lndyn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 21:03:25 GMT","end":"Sat, 18 Jul 2026 21:03:24 GMT"},"fingerprint":{"sha1":"1B:C1:74:99:3B:F7:42:56:C8:50:0B:85:1A:D6:65:01:DD:2C:C9:43","sha256":"96:03:EF:6E:26:32:75:C0:18:2C:79:C6:53:27:10:40:BD:08:7F:AF:9B:95:F6:C5:BF:1B:58:A3:57:E0:26:16"}}},"request":{"raw":"GET /LocalStorage/eda16b32-56dc-4922-8fb9-3f805b54434c-crypto.com%20logo%20blue.png HTTP/1.1\r\nHost: btcpay907928.lndyn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btcpay907928.lndyn.com/forms/acd1b2e3-f84b-451b-b000-5955782b5c06\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 12:16:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 145736\r\naccept-ranges: bytes\r\netag: \"1dcb3407369e4c8\"\r\nlast-modified: Fri, 13 Mar 2026 23:23:51 GMT\r\ncontent-disposition: inline\r\ncontent-security-policy: script-src ;\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":145736,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5000 x 960, 8-bit/color RGBA, non-interlaced","md5":"051a3e39a96cdf3c87550a53090bb697","sha1":"b93fecd48ea309e64721e3c79b65af7321b54dee","sha256":"5865efe0e11d4bf02fc2669f4cbe0743142a020040b7d71640b35fbfb7a80eb3","sha512":"4e18fc2b60e27104cda71d2671eb35bd73f11e4e466742ce557f5f19df6eff24a16945cc31b9c32f3b8d1fa499989daa53fe60f95afba9c1c409161dc1e43cfb","ssdeep":"3072:RE7oFdF3hbqn8adjR60cXJ+sTGryC54pysGCmd8zGsOWkn:K7ydFVq8adA5osTsyCupgsg","tlshash":"7ee3028d8507fac8dc298dfda8308ac386bc547f835c9cf1da6fe96b9a8157c451a4d0","first_seen":"2026-02-06T16:43:41.646448Z","last_seen":"2026-04-25T14:28:41.426318Z","times_seen":6,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}