{"report_id":"fc6b8609-e336-426c-8a4d-853dd47b1930","version":0,"status":"done","tags":[],"date":"2026-10-09T16:00:14Z","url":{"schema":"http","addr":"buyp2p-binance.com/","fqdn":"buyp2p-binance.com","domain":"buyp2p-binance.com","tld":"com"},"ip":{"addr":"212.227.222.67","port":0,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"buyp2p-binance.com/","fqdn":"buyp2p-binance.com","domain":"buyp2p-binance.com","tld":"com"},"title":"1 new message","dom":{"size":52794,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (37066)","md5":"5a2633288ac71b363f47c63bd96744a4","sha1":"00e8f9267147ad23412171029eff4a74c8e1ee79","sha256":"f5676420ef36543b8955e57ce70a01a325d41bb15c7477e65d3e3ebed7a74b59","sha512":"bc4c02e64a35d9436d1cda56f7e25f512a9996d3992ffc22e5065198ed2c777bdf2111ff82a1f9513033ed371c0be9354126ccd1909bb99553b8a2a9c1285f6d","ssdeep":"1536:BxG853SCfp4rTX/XOgjxzVFjXyqyam4eRfu4gd:BnW","tlshash":"d833b632e385186b52574a94f1e2b77e73fa4206c616cb78737c12762fcdcb948a2349","dom_hash":"domhashc91af616a7340caeca5e078896bc22c9","first_seen":"2026-10-09T16:00:42.02589Z","last_seen":"2026-10-09T16:00:42.02589Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"buyp2p-binance.com/","fqdn":"buyp2p-binance.com","domain":"buyp2p-binance.com","tld":"com"},"ip":{"addr":"212.227.222.67","port":0,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T16:00:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"buyp2p-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"buyp2p-binance.com","ip":{"addr":"212.227.222.67","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"domain_registered":"2026-10-03","domain_rank":0,"first_seen":"2026-10-09T16:00:33.768053Z","last_seen":"2026-10-09T16:00:33.768053Z","alert_count":16,"request_count":16,"received_data":3662617,"sent_data":9215,"comment":"","tags":null,"fingerprints":null},{"fqdn":"va.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2026-10-06T04:42:23.268865Z","alert_count":0,"request_count":3,"received_data":6189,"sent_data":1708,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-10-05T23:17:26.233129Z","alert_count":0,"request_count":13,"received_data":694495,"sent_data":6668,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"vsb129.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":982730,"first_seen":"2025-02-25T11:08:23Z","last_seen":"2026-10-07T04:09:10.587885Z","alert_count":0,"request_count":1,"received_data":417,"sent_data":1109,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0932bfcbc6f24c14db6ecf6a40c237b","sha1":"ca93c1dadc8581327bcf1566f1ea65125668bb0e","sha256":"f0cc6e5637c9a4770c234b6572fce7619a43ae07744c6b5b7b46bf54dd4782f4","sha512":"f542105bc75e6856f311b124d727e05eeb762d539e385316b12ea653681771807fd7642f377be1a9768b26e5c43c444731e34577fb808843d4b5cbc3a4a1078d","ssdeep":"6144:w1on1J2gFAAPvkV3ymzXLXkCQTei40OFAyN9d/y0b:wC2FAPvktTDkCQTA0O6yN9d/y0b","tlshash":"25645cd871a2743103fa59e120bb1106b33969193409c4acf61deeea3e7ad4a5277f7c","size":325187,"data":"","first_seen":"2026-09-25T08:45:54.043189Z","last_seen":"2026-10-09T19:45:56.006945Z","times_seen":2499,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MinWidget-DFrnenzP.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"792fff828f71afcb92d017b5421e20e5","sha1":"3609d3920c7c8b297a3283b81748e35ee0dfeb6b","sha256":"0f7b7085c1b8777d04101b7c35ded70447916b7265e2e57c6ef56a5226c27b2b","sha512":"f393ababd92b25ced8d206d2404a54bc8157eb47cf7afd9fd29ddff7b23b8c39d4aa27e0ebf521eff48496b681eeece2acf6e2350a0e113c2d5f1663fbe13455","ssdeep":"384:hA5ZA6nHofI+waonyDkyqnisaDf8R3G5xlXkuEm8ZOqs:65u6nIAHvyDkwUAbk9Oqs","tlshash":"54421966f288a169c734c28590c56d7c222d03b58f908dfaf0b5ae7703d5dc8647ab7d","size":13016,"data":"","first_seen":"2026-09-25T08:45:54.098851Z","last_seen":"2026-10-09T19:45:55.979931Z","times_seen":2252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-BrandingWidget-MJiLQkQP.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"09a8a4df0fbc87c70a3579eb083e45cb","sha1":"eaadb2ae4b49e5ce917ddeaf7fc859c6bbfb8dd9","sha256":"e51ee752f7c29f39ca4f4a911150c3345f92808c4fd3ae18a0b58d7a3d473f4d","sha512":"f08ae1af034284ca5f5c0a6d3474f1e10289281a915f5955648bb1a51edae305c44dca5a6ac9f43efac504837d44ec8d919f00aaf17f980a62f57939ddc40177","ssdeep":"","tlshash":"a671e70ff0eab4e5f335510440eb663e947e1b0887758df5823baca22354dc290b7a76","size":3526,"data":"","first_seen":"2026-09-25T08:45:54.071971Z","last_seen":"2026-10-09T19:45:56.064427Z","times_seen":2256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MessagePreview-KbNQqIX-.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ec0736224b16cd4c3c1504f06b8b79fe","sha1":"b05896bd4f8df58b5606dee7965f4d13de1100a1","sha256":"4c02dab373a3b0ba5a24f333cf4a83538c9a9c756cc776d52acb000e4b831043","sha512":"d50f077c11522ab690f78cfde45f9cb91014dd4ecbfa0ecbf830c414f8aaea93e0d538de4d6a2b89bf85c4d0d5e85fd328a42afb18701e01dc379a6fa122bcb2","ssdeep":"192:8cfBABqWkgk3rOQeOF0N30SbX3kXSKC4qUuKQfvrYXL8vNRywfCfxVYEx5uhbQ30:8YBtxya0NNbXuC4qUufsXAv7ywfjGwxd","tlshash":"25323b1ab2a8683c933786cab1cb6625731c1f305612d4e3f06d5f9f1365da810d6f2b","size":11206,"data":"","first_seen":"2026-09-25T08:45:54.033119Z","last_seen":"2026-10-09T19:45:56.03543Z","times_seen":2224,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-iframe-styles--AKXn-6M.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a5911fd0628b3cf5cec05686e05ab9d9","sha1":"8425eca2130d070fa14f6c4f10a598114b55e059","sha256":"1201d8d289332d47312fab8f697cef54c6d442ba048130d8a5da9072b3573105","sha512":"fa28703ea9d3cc47a30ccf066ce8b7af7e372c145148df990a6caa89ab727c79acf72b293d13b0cd36a2f7b73bcbd18b25e3705eace8d6ea7df2aa1d2cb33f9c","ssdeep":"192:VJLb83BvkHM9NiEJqisgZLvk+5/+qsqXf8utWAEIU5UyWkS7D/7df26G2Ld8AAH:vb8xwMTqils7UWAEIU5jWkS7DzdNG2LY","tlshash":"e302c522f3df3065b2148a4855f7fbb83e2d61216f518df129a4bb391b84ac62021f7d","size":9008,"data":"","first_seen":"2026-09-14T08:43:43.604039Z","last_seen":"2026-10-09T19:45:56.021349Z","times_seen":2762,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-message-format-DKJXm_pH.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3b65489e3df378341353ddc879819d4a","sha1":"a8547609851fc4f6e9adfc85d3672c84cac94aee","sha256":"ca93c85d600a921de5746273d9bc0e73bed8be60db0232371c2f95cd9dab1a0e","sha512":"e23cec57ff2cdafbc120676028fb4afe24112f66ec86a3263c9994032a595897715885d4018fdc81afaf0d5cb8c3e7b3babf9f64e909dd6c772500dfee984472","ssdeep":"96:vEE1QwTybFyqrWvTArxxmCeac6tBXKvC2CaLsCawwD7CZfdME2IIo:vr1QwatWvTArxxm2c6tBXKvKu9LZiE6o","tlshash":"d591d682f190a04243b03a1079da4921f07bea4badd59b15d659b813ba36b0b58f7bdc","size":4539,"data":"","first_seen":"2026-09-14T08:43:43.633565Z","last_seen":"2026-10-09T19:45:56.077311Z","times_seen":2722,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buyp2p-binance.com/","fqdn":"buyp2p-binance.com","domain":"buyp2p-binance.com","tld":"com"},"ip":{"addr":"212.227.222.67","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0fdc661dfb4f67df5637a410b0ddbc6","sha1":"65685a2917677ab0ad614a06a4f2dcf37c58999e","sha256":"f1374eaccadbd5680e6fd8c7f9ee0bb0a32e07e4b09349731f0c6ce54f636896","sha512":"4fd23936d955f792576725bb9f55c1f9e0f0f192e58d79e1fd81359018a0c9a1204e202861a214ca50f10ee7fd13902c7312c960bed5a45d1283cac00d280f4a","ssdeep":"","tlshash":"39e0682e28077931a24b91a713b7da083053301ba504e491bc9f88452f08d4a0156f68","size":362,"data":"","first_seen":"2026-10-09T16:00:42.110321Z","last_seen":"2026-10-09T16:00:42.110321Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buyp2p-binance.com/assets/index-TqzI4fZe.js","fqdn":"buyp2p-binance.com","domain":"buyp2p-binance.com","tld":"com"},"ip":{"addr":"212.227.222.67","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbbd586c852aacc835f3b7015dfeff13","sha1":"6f83efbb4cf081b2c0839c2a33abdbc2a66e40c0","sha256":"e597d6994d46c44db8cb43e780c92141c283b5a26dd37e2979f96e8a7c0b5e5a","sha512":"84cf1df2f107a5cde0ed7f4215fd9cc4b29bdaa249cec268bf803d909af054fd429ca5cd39790300b39055ae0db49ac9a789087ac497a2e0b67609527d2ab4d1","ssdeep":"3072:81132xaHXg+KsPekHAOrK9M2w0g6i0gbWS3Em10BC+5+fQ/vfsGYqPzwscGxW82R:811yn8e1b/JYqjcGZUVxjlqw","tlshash":"98643cd8726db6766ea346a510af1107b13d2c23640d8870f534eda93b7408a61bbffd","size":315261,"data":"","first_seen":"2026-10-09T16:00:42.04484Z","last_seen":"2026-10-09T16:00:42.04484Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/66efeedbe5982d6c7bb2c746/default","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3b77946bf85c0ae524336667aff73a6","sha1":"bbb346c27f3474d3ef0bd2082d5599a68568d1a0","sha256":"a90d03677f8f714dd0e58c66e29f21b5ddb6dddc65e5a9deb56cc028e1772bb6","sha512":"c9df2e98793e29046973617030ba049313862767904462cf9458733fb2b640f87647d8fceb3645c45d1fffa8fc971ba21e036a10dd7e470e460073caad910853","ssdeep":"","tlshash":"862144f5be1a663baa31409a2a9eea0934b2019b04081cc5460de8c5365077a161bde9","size":1157,"data":"","first_seen":"2026-10-09T16:00:42.084947Z","last_seen":"2026-10-09T16:00:42.084947Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-messenger-components.es-CXRrtReg.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ed6ca00f1050102e4e4ce885305432fd","sha1":"d6104b463664341a070f5d9f5af146097d4d5eb5","sha256":"f6dd6cee58e0ca61447eef9bcb6b752f2f088532a03505219576ef56c108fa68","sha512":"8d2eb35e39c78bf82763f82f64dd6454bb328d7e2769490aaa80e04ed1d08afb1597d08852868ba9c834fd774ae26cb88842cab4683aa06540771ac0aa02a9c8","ssdeep":"3072:ee+mto1mo5Ar6VKkOPnsM5KiYXAIoOoc5shON:ee+mto8o5Ar6kfKicoOoc2QN","tlshash":"d1245bd4f68796f8d5e6db98948ba202336e12766df4c4c0d0a4cfd922d0e78259ff18","size":215095,"data":"","first_seen":"2026-09-25T08:45:54.035123Z","last_seen":"2026-10-09T19:45:56.093244Z","times_seen":2243,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"[pocketbase-wrapper] ignoring PocketBase base URL \"undefined\" passed by app code — using the platform-correct URL \"https://buyp2p-binance.com/.sfs-be/\" instead.","filename":"https://buyp2p-binance.com/assets/index-TqzI4fZe.js","line_number":49,"column_number":91351}]},"http":[{"url":{"schema":"https","addr":"buyp2p-binance.com/.sfs-fonts/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"buyp2p-binance.com","domain":"buyp2p-binance.com","tld":"com"},"ip":{"addr":"212.227.222.67","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:23.189Z","timestamp":1791561503189,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buyp2p-binance.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Thu, 01 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"38:0B:68:4D:F5:A3:96:56:00:3D:69:54:A1:1E:7B:BC:C9:28:1B:10","sha256":"5B:BC:31:3B:37:C2:86:09:84:6E:41:86:C0:70:79:19:DD:58:1D:96:5C:28:72:FB:46:56:82:28:84:EB:F1:FA"}}},"request":{"raw":"GET /.sfs-fonts/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: buyp2p-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://buyp2p-binance.com/.sfs/css2?family=Plus+Jakarta+Sans:ital,wght@0,400;0,500;0,600;0,700;0,800;1,400\u0026family=JetBrains+Mono:wght@400;500\u0026display=swap\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: font/woff2\r\ncontent-length: 31432\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 100\r\nx-ws-ratelimit-remaining: 89\r\nserver: sffe\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 15:58:23 GMT\r\nx-content-type-options: nosniff\r\nexpires: Sat, 09 Oct 2027 15:58:23 GMT\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncache-control: public, max-age=31536000\r\nx-cdn-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":31858,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-10-09T19:27:39.820771Z","times_seen":20766,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"buyp2p-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buyp2p-binance.com/.sfs-fonts/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"buyp2p-binance.com","domain":"buyp2p-binance.com","tld":"com"},"ip":{"addr":"212.227.222.67","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:23.196Z","timestamp":1791561503196,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buyp2p-binance.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Thu, 01 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"38:0B:68:4D:F5:A3:96:56:00:3D:69:54:A1:1E:7B:BC:C9:28:1B:10","sha256":"5B:BC:31:3B:37:C2:86:09:84:6E:41:86:C0:70:79:19:DD:58:1D:96:5C:28:72:FB:46:56:82:28:84:EB:F1:FA"}}},"request":{"raw":"GET /.sfs-fonts/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: buyp2p-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://buyp2p-binance.com/.sfs/css2?family=Plus+Jakarta+Sans:ital,wght@0,400;0,500;0,600;0,700;0,800;1,400\u0026family=JetBrains+Mono:wght@400;500\u0026display=swap\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: font/woff2\r\ncontent-length: 27236\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 100\r\nx-ws-ratelimit-remaining: 86\r\nserver: sffe\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 15:58:23 GMT\r\nx-content-type-options: nosniff\r\nexpires: Sat, 09 Oct 2027 15:58:23 GMT\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncache-control: public, max-age=31536000\r\nx-cdn-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":27662,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-10-09T19:29:40.177097Z","times_seen":26848,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":90,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"buyp2p-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=66efeedbe5982d6c7bb2c746\u0026widgetId=default\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:24.173Z","timestamp":1791561504173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=66efeedbe5982d6c7bb2c746\u0026widgetId=default\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buyp2p-binance.com/\r\nOrigin: https://buyp2p-binance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-zhn7\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-5-0\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Fri, 09 Oct 2026 15:58:24 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: a47e96291bb5569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3103,"size_decoded":1895,"mime_type":"application/json","magic":"JSON text data","md5":"d27c6998506185642620aaf0fb37087d","sha1":"e8ac3e76b3068741dc604fccb99d21ce6836819c","sha256":"9d27aeae3f0ede871006c790c2f361371ac759cf45a563f63933861dbf655530","sha512":"bb857de21b983a1a31da277451ff53e58b56f63f7d4c95f955ce1485d0d8d0a6395cda5cfd29443ba3f00517c4a61d7faaed5e57e0fd3ab8c782fda651d16242","ssdeep":"","tlshash":"f15112298816dd7963cdd25361de3a27b93dd023e384155df0686e3983efacd221274b","first_seen":"2026-10-09T16:00:42.036105Z","last_seen":"2026-10-09T16:00:42.036105Z","times_seen":1,"resource_available":true,"data":null}},"time_used":436,"timings":{"blocked":4,"dns":3,"connect":0,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MinWidget-DFrnenzP.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:26.525Z","timestamp":1791561506525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-MinWidget-DFrnenzP.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-main.js\r\nOrigin: https://buyp2p-binance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 15:58:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"792fff828f71afcb92d017b5421e20e5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a47e9637ce51569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13016,"size_decoded":5404,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (11094)","md5":"792fff828f71afcb92d017b5421e20e5","sha1":"3609d3920c7c8b297a3283b81748e35ee0dfeb6b","sha256":"0f7b7085c1b8777d04101b7c35ded70447916b7265e2e57c6ef56a5226c27b2b","sha512":"f393ababd92b25ced8d206d2404a54bc8157eb47cf7afd9fd29ddff7b23b8c39d4aa27e0ebf521eff48496b681eeece2acf6e2350a0e113c2d5f1663fbe13455","ssdeep":"384:hA5ZA6nHofI+waonyDkyqnisaDf8R3G5xlXkuEm8ZOqs:65u6nIAHvyDkwUAbk9Oqs","tlshash":"54421966f288a169c734c28590c56d7c222d03b58f908dfaf0b5ae7703d5dc8647ab7d","first_seen":"2026-09-25T08:45:54.098851Z","last_seen":"2026-10-09T19:45:55.979931Z","times_seen":2252,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://vsb129.tawk.to/s/?k=6ac90f2229acc19987c10f8a\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2NmVmZWVkYmU1OTgyZDZjN2JiMmM3NDYiLCJ2aWQiOiI2NmVmZWVkYmU1OTgyZDZjN2JiMmM3NDYtZVBETXBtRHpKd0h2Q19ReGo1Tl9RIiwic2lkIjoiNmFjOTBmMjIyOWFjYzE5OTg3YzEwZjhhIiwiaWF0IjoxNzkxNTYxNTA2LCJleHAiOjE3OTE1NjMzMDYsImp0aSI6InliMFNKaDVsRkRLTFl3WEQ1TEJ4dCJ9.ErQsvfr8jqb0tDSLF9XcZimO5bzKiniUaBQaGAxpQOA2OpX8_2iCAu0mEF4fe-eVo9dGhgXkHSP1GxZ5kc7iVw\u0026EIO=3\u0026transport=websocket\u0026__t=Q4XOnxP","fqdn":"vsb129.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:26.531Z","timestamp":1791561506531,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /s/?k=6ac90f2229acc19987c10f8a\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2NmVmZWVkYmU1OTgyZDZjN2JiMmM3NDYiLCJ2aWQiOiI2NmVmZWVkYmU1OTgyZDZjN2JiMmM3NDYtZVBETXBtRHpKd0h2Q19ReGo1Tl9RIiwic2lkIjoiNmFjOTBmMjIyOWFjYzE5OTg3YzEwZjhhIiwiaWF0IjoxNzkxNTYxNTA2LCJleHAiOjE3OTE1NjMzMDYsImp0aSI6InliMFNKaDVsRkRLTFl3WEQ1TEJ4dCJ9.ErQsvfr8jqb0tDSLF9XcZimO5bzKiniUaBQaGAxpQOA2OpX8_2iCAu0mEF4fe-eVo9dGhgXkHSP1GxZ5kc7iVw\u0026EIO=3\u0026transport=websocket\u0026__t=Q4XOnxP HTTP/1.1\r\nHost: vsb129.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://buyp2p-binance.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 5OpajZQcL4bMbSqPJ8pUpA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 09 Oct 2026 15:58:27 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 2lVb7DjiLz6wgEEkt9+3IL3iJ5k=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nStrict-Transport-Security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: a47e9637fc9456b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":417,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":15,"connect":15,"send":0,"wait":548,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buyp2p-binance.com/.sfs-fonts/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"buyp2p-binance.com","domain":"buyp2p-binance.com","tld":"com"},"ip":{"addr":"212.227.222.67","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:23.185Z","timestamp":1791561503185,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buyp2p-binance.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Thu, 01 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"38:0B:68:4D:F5:A3:96:56:00:3D:69:54:A1:1E:7B:BC:C9:28:1B:10","sha256":"5B:BC:31:3B:37:C2:86:09:84:6E:41:86:C0:70:79:19:DD:58:1D:96:5C:28:72:FB:46:56:82:28:84:EB:F1:FA"}}},"request":{"raw":"GET /.sfs-fonts/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: buyp2p-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://buyp2p-binance.com/.sfs/css2?family=Plus+Jakarta+Sans:ital,wght@0,400;0,500;0,600;0,700;0,800;1,400\u0026family=JetBrains+Mono:wght@400;500\u0026display=swap\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: font/woff2\r\ncontent-length: 27236\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 100\r\nx-ws-ratelimit-remaining: 91\r\nserver: sffe\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 15:58:23 GMT\r\nx-content-type-options: nosniff\r\nexpires: Sat, 09 Oct 2027 15:58:23 GMT\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncache-control: public, max-age=31536000\r\nx-cdn-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":27662,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-10-09T19:29:40.177097Z","times_seen":26848,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"buyp2p-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:23.538Z","timestamp":1791561503538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buyp2p-binance.com/\r\nOrigin: https://buyp2p-binance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 15:58:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"e0932bfcbc6f24c14db6ecf6a40c237b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a47e96251ad5569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":325187,"size_decoded":121326,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42299)","md5":"e0932bfcbc6f24c14db6ecf6a40c237b","sha1":"ca93c1dadc8581327bcf1566f1ea65125668bb0e","sha256":"f0cc6e5637c9a4770c234b6572fce7619a43ae07744c6b5b7b46bf54dd4782f4","sha512":"f542105bc75e6856f311b124d727e05eeb762d539e385316b12ea653681771807fd7642f377be1a9768b26e5c43c444731e34577fb808843d4b5cbc3a4a1078d","ssdeep":"6144:w1on1J2gFAAPvkV3ymzXLXkCQTei40OFAyN9d/y0b:wC2FAPvktTDkCQTA0O6yN9d/y0b","tlshash":"25645cd871a2743103fa59e120bb1106b33969193409c4acf61deeea3e7ad4a5277f7c","first_seen":"2026-09-25T08:45:54.043189Z","last_seen":"2026-10-09T19:45:56.006945Z","times_seen":2499,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":287,"receive":259,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buyp2p-binance.com/assets/index-TqzI4fZe.js","fqdn":"buyp2p-binance.com","domain":"buyp2p-binance.com","tld":"com"},"ip":{"addr":"212.227.222.67","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:22.858Z","timestamp":1791561502858,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buyp2p-binance.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Thu, 01 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"38:0B:68:4D:F5:A3:96:56:00:3D:69:54:A1:1E:7B:BC:C9:28:1B:10","sha256":"5B:BC:31:3B:37:C2:86:09:84:6E:41:86:C0:70:79:19:DD:58:1D:96:5C:28:72:FB:46:56:82:28:84:EB:F1:FA"}}},"request":{"raw":"GET /assets/index-TqzI4fZe.js HTTP/1.1\r\nHost: buyp2p-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buyp2p-binance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 122348\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 100\r\nx-ws-ratelimit-remaining: 97\r\nserver: IONOS Webserver\r\nx-cache: HIT\r\ndate: Fri, 09 Oct 2026 15:58:22 GMT\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\netag: \"d6b43c4ab8de5f405148dc8b50e09652181a7fb8.gz\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nx-cdn-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":315261,"size_decoded":122873,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (39017)","md5":"bbbd586c852aacc835f3b7015dfeff13","sha1":"6f83efbb4cf081b2c0839c2a33abdbc2a66e40c0","sha256":"e597d6994d46c44db8cb43e780c92141c283b5a26dd37e2979f96e8a7c0b5e5a","sha512":"84cf1df2f107a5cde0ed7f4215fd9cc4b29bdaa249cec268bf803d909af054fd429ca5cd39790300b39055ae0db49ac9a789087ac497a2e0b67609527d2ab4d1","ssdeep":"3072:81132xaHXg+KsPekHAOrK9M2w0g6i0gbWS3Em10BC+5+fQ/vfsGYqPzwscGxW82R:811yn8e1b/JYqjcGZUVxjlqw","tlshash":"98643cd8726db6766ea346a510af1107b13d2c23640d8870f534eda93b7408a61bbffd","first_seen":"2026-10-09T16:00:42.04484Z","last_seen":"2026-10-09T16:00:42.04484Z","times_seen":1,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"buyp2p-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buyp2p-binance.com/static/tron-logo.png","fqdn":"buyp2p-binance.com","domain":"buyp2p-binance.com","tld":"com"},"ip":{"addr":"212.227.222.67","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:23.160Z","timestamp":1791561503160,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buyp2p-binance.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Thu, 01 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"38:0B:68:4D:F5:A3:96:56:00:3D:69:54:A1:1E:7B:BC:C9:28:1B:10","sha256":"5B:BC:31:3B:37:C2:86:09:84:6E:41:86:C0:70:79:19:DD:58:1D:96:5C:28:72:FB:46:56:82:28:84:EB:F1:FA"}}},"request":{"raw":"GET /static/tron-logo.png HTTP/1.1\r\nHost: buyp2p-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buyp2p-binance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 103975\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 100\r\nx-ws-ratelimit-remaining: 93\r\naccept-ranges: bytes\r\nserver: IONOS Webserver\r\nexpires: Fri, 09 Oct 2026 16:28:23 GMT\r\ndate: Fri, 09 Oct 2026 15:58:23 GMT\r\netag: \"0j1-paas01001-9sk2cl1-nunmq7\"\r\nlast-modified: Sat, 03 Oct 2026 19:12:09 GMT\r\nx-cdn-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":103975,"size_decoded":104376,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"de3064d6f2b2153aacb6a854038c3a79","sha1":"841f3d1f868a3d71a01649b4307b9a1c1259e399","sha256":"79b386dbf889eb7356ab585421267aebc58e152268253865be5596ba2a2ce36b","sha512":"5c8c4b45222de6310002170dc4a51c033d9153409362fe8ca6841c26f30d467b52542703fc2f078289983a115257086fd1f96c062a7b72fb0449bd4f8607f88e","ssdeep":"3072:cTN3VFvbRgzj0eMqMGc+zfbTYkyA4FI+Tjqr0Zz:6pVFvNM0ea+sTIeqcz","tlshash":"8ea3028e4407eec2cd75d478d41d0f3a762a19f86b893bf79335d1b22db17a19a2800d","first_seen":"2023-05-31T01:01:47Z","last_seen":"2026-10-09T16:25:56.851424Z","times_seen":620,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"buyp2p-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buyp2p-binance.com/static/bnb-logo.png","fqdn":"buyp2p-binance.com","domain":"buyp2p-binance.com","tld":"com"},"ip":{"addr":"212.227.222.67","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:23.162Z","timestamp":1791561503162,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buyp2p-binance.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Thu, 01 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"38:0B:68:4D:F5:A3:96:56:00:3D:69:54:A1:1E:7B:BC:C9:28:1B:10","sha256":"5B:BC:31:3B:37:C2:86:09:84:6E:41:86:C0:70:79:19:DD:58:1D:96:5C:28:72:FB:46:56:82:28:84:EB:F1:FA"}}},"request":{"raw":"GET /static/bnb-logo.png HTTP/1.1\r\nHost: buyp2p-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buyp2p-binance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 104712\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 100\r\nx-ws-ratelimit-remaining: 92\r\naccept-ranges: bytes\r\nserver: IONOS Webserver\r\nexpires: Fri, 09 Oct 2026 16:28:23 GMT\r\ndate: Fri, 09 Oct 2026 15:58:23 GMT\r\netag: \"0j1-raas01001-bsk2cl1-r5olmb\"\r\nlast-modified: Sat, 03 Oct 2026 19:12:11 GMT\r\nx-cdn-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":104712,"size_decoded":105113,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"9faf561e1bbd427d5d739b539249357f","sha1":"fbfac48e3c8c1caa9d17b8a38281eeef0d996d43","sha256":"86d65436ed9470ff4447f0ffd6426fe2622577421866e49933d2615bdb2a1a18","sha512":"aff23cde575e2cc346d303da8f1b432981bbbdeacbc02cd64f8808add90933033b8f0121cdb48b406e24fbc47234cccbcea1ba8b90b83ebfb0165f76087e04ba","ssdeep":"1536:FdYeBHIGj69qzWK89JQJV+04SoKLSc/viVXad7CL2gKpjc4f5XdG6YJhonwT/sv:zYnW64z03Q2pKrd7CKlac0JGwDsv","tlshash":"3ca302b6a3a5ec45e9939e3cec3e2ee2d774837fca4c5dd07ad09201121463aba154dc","first_seen":"2023-05-31T01:01:46Z","last_seen":"2026-10-09T16:25:56.768259Z","times_seen":385,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"buyp2p-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buyp2p-binance.com/assets/favicon-BaHFto7j.webp","fqdn":"buyp2p-binance.com","domain":"buyp2p-binance.com","tld":"com"},"ip":{"addr":"212.227.222.67","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:23.528Z","timestamp":1791561503528,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buyp2p-binance.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Thu, 01 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"38:0B:68:4D:F5:A3:96:56:00:3D:69:54:A1:1E:7B:BC:C9:28:1B:10","sha256":"5B:BC:31:3B:37:C2:86:09:84:6E:41:86:C0:70:79:19:DD:58:1D:96:5C:28:72:FB:46:56:82:28:84:EB:F1:FA"}}},"request":{"raw":"GET /assets/favicon-BaHFto7j.webp HTTP/1.1\r\nHost: buyp2p-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buyp2p-binance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/webp\r\ncontent-length: 57372\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 100\r\nx-ws-ratelimit-remaining: 84\r\nserver: IONOS Webserver\r\nx-cache: HIT\r\ndate: Fri, 09 Oct 2026 15:58:23 GMT\r\nx-content-type-options: nosniff\r\netag: \"af60a8eb245a057e9dd40c502d6e724f31397f82\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nx-cdn-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":57372,"size_decoded":57826,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6f088bfd75009cacda6d97b350425c5e","sha1":"32770fa07a6a820d4a227396bd43562d78bacaa5","sha256":"5aa8e28976b667601a91ce360811af69d36ed75e4e325256ffeb27691614954f","sha512":"e2df37f36b333a0cdd5f98d097e5669fa4e15e689f2c4254bdddcccdca8307744e16163e3aa9723586bffb24173644624b48c45c263fe2aaff83a037c0d2bf7f","ssdeep":"1536:HAiq5y4ShTMb5lQS43sLr1QOznai8sL2l0Psjqzrk7KVDp7nNviMo:HAG4S+zQ0Lr+8wsL2m0jqztp7BiJ","tlshash":"ad43024813a2662422bc70c7f5e008d1e92999222acc53d44cab57f456f775cfe8df6b","first_seen":"2026-10-09T16:00:42.055884Z","last_seen":"2026-10-09T16:00:42.055884Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"buyp2p-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:24.178Z","timestamp":1791561504178,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buyp2p-binance.com/\r\nOrigin: https://buyp2p-binance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 15:58:24 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"493ec326a306857e053b535118af1c2e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a47e96291bb6569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11724,"size_decoded":4410,"mime_type":"application/json","magic":"JSON text data","md5":"493ec326a306857e053b535118af1c2e","sha1":"97f86770a684f19cd83aa09b4a4bc6ec36a6bc4d","sha256":"913049c2bf5844e4c5ca76465bb8270066a409cc5c883f849ebc43bc2a7352ff","sha512":"908e18919f2f0c87e24aaf1ef30610ac22b730b33ab27e796b69ec531f6b19850b3f98b261e150e4bcdcca4f504ccce1071602460be8a5255dca2a04f69c08be","ssdeep":"192:Om265/bLHzPrquLUVid+BCzfF+npqpe9KvKGC6KEt1aZwf1E:4CbLHzxUVid+BEfF+np59t3Zwfi","tlshash":"e8323169ce504ea702d29646389f35437624819b1f54382eb78c91ac0f8ec6f62f77ce","first_seen":"2026-09-24T04:33:32.436701Z","last_seen":"2026-10-09T19:45:55.947057Z","times_seen":2537,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:24.180Z","timestamp":1791561504180,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buyp2p-binance.com/\r\nOrigin: https://buyp2p-binance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 15:58:24 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"fb40f488d34d8e500cd5193b6cbf1df5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a47e96291bb7569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10475,"size_decoded":4369,"mime_type":"application/json","magic":"JSON text data","md5":"fb40f488d34d8e500cd5193b6cbf1df5","sha1":"37afd6b5aafd32a9f0b98843b182aba8cf5ce608","sha256":"e2076eca9c47fe568e55ee6b0f1d9d11ce186576fabecdb8c27fc645b33e8fae","sha512":"22fe865ed894dea88eb72850a15dbfc321356ba6c67e2cdf325170dc19d03c1f0c427e3af6a9e6bd63bc27a024d706dd1ee6c00c02727a27df9140a77b7af2e5","ssdeep":"192:vmdjWl179zTRVUEAHq9iH+TidAg8G+9pPkKVKOetm6ksTAdYPizj1L:ak179zOHq9iH+TK58G+9pGtHLPizp","tlshash":"f422a557cb105adb02c257863e8fb5c2b63841de179425fbec4834bc03cddaa6217b86","first_seen":"2026-09-24T04:33:32.521723Z","last_seen":"2026-10-09T19:45:55.91917Z","times_seen":2537,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:24.188Z","timestamp":1791561504188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://buyp2p-binance.com/\r\nOrigin: https://buyp2p-binance.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-nph4\r\naccess-control-allow-origin: https://buyp2p-binance.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Fri, 09 Oct 2026 15:58:24 GMT\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncf-ray: a47e96292bbd569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":716,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-messenger-components.es-CXRrtReg.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:26.691Z","timestamp":1791561506691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-messenger-components.es-CXRrtReg.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MinWidget-DFrnenzP.js\r\nOrigin: https://buyp2p-binance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 15:58:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"ed6ca00f1050102e4e4ce885305432fd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a47e9638ce8e569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":215095,"size_decoded":74888,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65527), with no line terminators","md5":"ed6ca00f1050102e4e4ce885305432fd","sha1":"d6104b463664341a070f5d9f5af146097d4d5eb5","sha256":"f6dd6cee58e0ca61447eef9bcb6b752f2f088532a03505219576ef56c108fa68","sha512":"8d2eb35e39c78bf82763f82f64dd6454bb328d7e2769490aaa80e04ed1d08afb1597d08852868ba9c834fd774ae26cb88842cab4683aa06540771ac0aa02a9c8","ssdeep":"3072:ee+mto1mo5Ar6VKkOPnsM5KiYXAIoOoc5shON:ee+mto8o5Ar6kfKicoOoc2QN","tlshash":"d1245bd4f68796f8d5e6db98948ba202336e12766df4c4c0d0a4cfd922d0e78259ff18","first_seen":"2026-09-25T08:45:54.035123Z","last_seen":"2026-10-09T19:45:56.093244Z","times_seen":2243,"resource_available":true,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buyp2p-binance.com/.sfs/css2?family=Plus+Jakarta+Sans:ital,wght@0,400;0,500;0,600;0,700;0,800;1,400\u0026family=JetBrains+Mono:wght@400;500\u0026display=swap","fqdn":"buyp2p-binance.com","domain":"buyp2p-binance.com","tld":"com"},"ip":{"addr":"212.227.222.67","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:22.855Z","timestamp":1791561502855,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buyp2p-binance.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Thu, 01 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"38:0B:68:4D:F5:A3:96:56:00:3D:69:54:A1:1E:7B:BC:C9:28:1B:10","sha256":"5B:BC:31:3B:37:C2:86:09:84:6E:41:86:C0:70:79:19:DD:58:1D:96:5C:28:72:FB:46:56:82:28:84:EB:F1:FA"}}},"request":{"raw":"GET /.sfs/css2?family=Plus+Jakarta+Sans:ital,wght@0,400;0,500;0,600;0,700;0,800;1,400\u0026family=JetBrains+Mono:wght@400;500\u0026display=swap HTTP/1.1\r\nHost: buyp2p-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buyp2p-binance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 100\r\nx-ws-ratelimit-remaining: 98\r\nserver: ESF\r\nx-frame-options: SAMEORIGIN\r\ndate: Fri, 09 Oct 2026 15:58:22 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 09 Oct 2026 15:58:22 GMT\r\nvary: accept-encoding, Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: private, max-age=86400\r\nx-cdn-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14740,"size_decoded":1290,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0433effd0c35f602d222aeb8a60f8e94","sha1":"e20bb0eb797818cbf484e25d3ffba00d144ee3df","sha256":"785331691127533bb1c9257a86fb83c734a94c610cfe5585d93c128bfb101607","sha512":"46988d1cd5eb33a8f7d2064537edb3ea9b025e9da0d510c0266f43de7beb22e503079fddbbbd371ab6bbea7dc82232fa749b024fcd628cd9b927a0305d10e4c8","ssdeep":"192:u1+Ue3Zhgsg197e3qygzNOunOhOVeOKHFya2SHmhaVvHjIasoHcPazdH5+aaM:AKQmCBnKzDdbNnd","tlshash":"d162df90082f6200e6871cdab3cf3e366d9e6182705594b89bff1414adbec2a6371b5d","first_seen":"2026-10-09T16:00:42.071795Z","last_seen":"2026-10-09T16:00:42.071795Z","times_seen":1,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"buyp2p-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buyp2p-binance.com/.sfs-fonts/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"buyp2p-binance.com","domain":"buyp2p-binance.com","tld":"com"},"ip":{"addr":"212.227.222.67","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:23.193Z","timestamp":1791561503193,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buyp2p-binance.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Thu, 01 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"38:0B:68:4D:F5:A3:96:56:00:3D:69:54:A1:1E:7B:BC:C9:28:1B:10","sha256":"5B:BC:31:3B:37:C2:86:09:84:6E:41:86:C0:70:79:19:DD:58:1D:96:5C:28:72:FB:46:56:82:28:84:EB:F1:FA"}}},"request":{"raw":"GET /.sfs-fonts/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: buyp2p-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://buyp2p-binance.com/.sfs/css2?family=Plus+Jakarta+Sans:ital,wght@0,400;0,500;0,600;0,700;0,800;1,400\u0026family=JetBrains+Mono:wght@400;500\u0026display=swap\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: font/woff2\r\ncontent-length: 27236\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 100\r\nx-ws-ratelimit-remaining: 87\r\nserver: sffe\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 15:58:23 GMT\r\nx-content-type-options: nosniff\r\nexpires: Sat, 09 Oct 2027 15:58:23 GMT\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncache-control: public, max-age=31536000\r\nx-cdn-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":27662,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-10-09T19:29:40.177097Z","times_seen":26848,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"buyp2p-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/css/message-preview.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:27.187Z","timestamp":1791561507187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/css/message-preview.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 15:58:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"95fa576ff32490baa52652a17f62e04c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1237398\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncf-ray: a47e963be88d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39935,"size_decoded":9748,"mime_type":"text/css","magic":"ASCII text, with very long lines (39935), with no line terminators","md5":"95fa576ff32490baa52652a17f62e04c","sha1":"16359dfeaee9eac6142541fb857ef49c790f9196","sha256":"103867cb284cc821fa8e3a9fcb38f938eeea660e8efdef3950f5324428cebca7","sha512":"d3e19999896c457ab78b0c8df6b748b3fe7c2ffb0dd09dafa6569fe2f6d8a4d363c2a8747b6cbe143fd1b88fc73954998d86305682d3b85c9e719b7f56969057","ssdeep":"384:gwaRBMbrYbv+esY2jcWlnrCxN82TNSixi7riPftTQUifm7kUdwddCri43V64gpjJ:gwaKUAgMUifm7kUdwddCri43V+SffQ","tlshash":"920374a2b59720ccb197c33290d1fabc642b9670d753c6a6f5137bb98ac25d63612f0c","first_seen":"2026-09-14T08:43:43.753483Z","last_seen":"2026-10-09T19:08:30.532387Z","times_seen":2638,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/css/branding-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:27.189Z","timestamp":1791561507189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/css/branding-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 15:58:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"e0255582e599007d621a42129d7d27f5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1237399\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncf-ray: a47e963be89076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18387,"size_decoded":4688,"mime_type":"text/css","magic":"ASCII text, with very long lines (18387), with no line terminators","md5":"e0255582e599007d621a42129d7d27f5","sha1":"7558586a6dfc7f897c6115afd54699f13e657fdc","sha256":"d85c5684bc2ca8b6dfac3e8c95320e22afadf8adb1a923b11a52465c49a00b0e","sha512":"7213efe6431739a3539e9d9c386cf2b623ee42381078447ed1083324268f49aec93e5eebdb7a4c16717e79be0e6b06594a7a801435a054535f243a2143a4519a","ssdeep":"384:KBMbrYbv+esY2jFWlnrCxN82TNSixi7rXt:UUAXt","tlshash":"2d82da93b9e314dce657c632c0e1f67ca83f4a20c757c5a3a9437bb98681ad73641a4c","first_seen":"2026-09-14T08:43:43.711999Z","last_seen":"2026-10-09T19:18:24.577465Z","times_seen":2288,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buyp2p-binance.com/assets/index-COsR-cQc.css","fqdn":"buyp2p-binance.com","domain":"buyp2p-binance.com","tld":"com"},"ip":{"addr":"212.227.222.67","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:22.860Z","timestamp":1791561502860,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buyp2p-binance.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Thu, 01 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"38:0B:68:4D:F5:A3:96:56:00:3D:69:54:A1:1E:7B:BC:C9:28:1B:10","sha256":"5B:BC:31:3B:37:C2:86:09:84:6E:41:86:C0:70:79:19:DD:58:1D:96:5C:28:72:FB:46:56:82:28:84:EB:F1:FA"}}},"request":{"raw":"GET /assets/index-COsR-cQc.css HTTP/1.1\r\nHost: buyp2p-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buyp2p-binance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 6472\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 100\r\nx-ws-ratelimit-remaining: 96\r\nserver: IONOS Webserver\r\nx-cache: HIT\r\ndate: Fri, 09 Oct 2026 15:58:22 GMT\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\netag: \"13c50417b5a3adead109bf5f83f9dc3ce6bd89d6.gz\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nx-cdn-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23241,"size_decoded":6988,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (23240)","md5":"444215be9695921f34fbb7365fb7d824","sha1":"223733a5b2e1665ff7ecc2bcadbc945ac7b2e85a","sha256":"1a17b9f5c6fa982e51f94886ee070feb46eadd903bb1c232fea2244930c0d5b7","sha512":"9da2dfe9607fba19555e439d89d2ffac95b1ba7890be33e37c2b7cc32f5d9832319123aef8b9daaa6c07aa2c8669c981d056fa4b1602f4094860a67a6a61ab04","ssdeep":"384:IkaMES64HLNy+v/nToBZ3CaURrgpPp5ZIeS1R0rs/dZZWH:oS64HLNy+v/nToBZ3CaURMxZIe0TdZs","tlshash":"93a28360b32adc7fec7358e6e75cb45ca2097182cd3455d8eb023213a6cb7f64d4a629","first_seen":"2026-10-09T16:00:42.080745Z","last_seen":"2026-10-09T16:00:42.080745Z","times_seen":1,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"buyp2p-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/66efeedbe5982d6c7bb2c746/default","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:23.057Z","timestamp":1791561503057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /66efeedbe5982d6c7bb2c746/default HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buyp2p-binance.com/\r\nOrigin: https://buyp2p-binance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-type: application/x-javascript\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-6ab62d2918b\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Fri, 09 Oct 2026 15:58:23 GMT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncf-ray: a47e96223a67569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1157,"size_decoded":1187,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"d3b77946bf85c0ae524336667aff73a6","sha1":"bbb346c27f3474d3ef0bd2082d5599a68568d1a0","sha256":"a90d03677f8f714dd0e58c66e29f21b5ddb6dddc65e5a9deb56cc028e1772bb6","sha512":"c9df2e98793e29046973617030ba049313862767904462cf9458733fb2b640f87647d8fceb3645c45d1fffa8fc971ba21e036a10dd7e470e460073caad910853","ssdeep":"","tlshash":"862144f5be1a663baa31409a2a9eea0934b2019b04081cc5460de8c5365077a161bde9","first_seen":"2026-10-09T16:00:42.084947Z","last_seen":"2026-10-09T16:00:42.084947Z","times_seen":1,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buyp2p-binance.com/static/flash-usdt-logo.png","fqdn":"buyp2p-binance.com","domain":"buyp2p-binance.com","tld":"com"},"ip":{"addr":"212.227.222.67","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:23.157Z","timestamp":1791561503157,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buyp2p-binance.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Thu, 01 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"38:0B:68:4D:F5:A3:96:56:00:3D:69:54:A1:1E:7B:BC:C9:28:1B:10","sha256":"5B:BC:31:3B:37:C2:86:09:84:6E:41:86:C0:70:79:19:DD:58:1D:96:5C:28:72:FB:46:56:82:28:84:EB:F1:FA"}}},"request":{"raw":"GET /static/flash-usdt-logo.png HTTP/1.1\r\nHost: buyp2p-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buyp2p-binance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 57372\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 100\r\nx-ws-ratelimit-remaining: 94\r\naccept-ranges: bytes\r\nserver: IONOS Webserver\r\nexpires: Fri, 09 Oct 2026 16:28:23 GMT\r\ndate: Fri, 09 Oct 2026 15:58:23 GMT\r\netag: \"0j1-vflr01001-b3k2cl1-7dkiq8\"\r\nlast-modified: Sat, 03 Oct 2026 18:58:51 GMT\r\nx-cdn-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":57372,"size_decoded":57772,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"6f088bfd75009cacda6d97b350425c5e","sha1":"32770fa07a6a820d4a227396bd43562d78bacaa5","sha256":"5aa8e28976b667601a91ce360811af69d36ed75e4e325256ffeb27691614954f","sha512":"e2df37f36b333a0cdd5f98d097e5669fa4e15e689f2c4254bdddcccdca8307744e16163e3aa9723586bffb24173644624b48c45c263fe2aaff83a037c0d2bf7f","ssdeep":"1536:HAiq5y4ShTMb5lQS43sLr1QOznai8sL2l0Psjqzrk7KVDp7nNviMo:HAG4S+zQ0Lr+8wsL2m0jqztp7BiJ","tlshash":"ad43024813a2662422bc70c7f5e008d1e92999222acc53d44cab57f456f775cfe8df6b","first_seen":"2026-10-09T16:00:42.055884Z","last_seen":"2026-10-09T16:00:42.055884Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"buyp2p-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buyp2p-binance.com/.sfs-fonts/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"buyp2p-binance.com","domain":"buyp2p-binance.com","tld":"com"},"ip":{"addr":"212.227.222.67","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:23.187Z","timestamp":1791561503187,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buyp2p-binance.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Thu, 01 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"38:0B:68:4D:F5:A3:96:56:00:3D:69:54:A1:1E:7B:BC:C9:28:1B:10","sha256":"5B:BC:31:3B:37:C2:86:09:84:6E:41:86:C0:70:79:19:DD:58:1D:96:5C:28:72:FB:46:56:82:28:84:EB:F1:FA"}}},"request":{"raw":"GET /.sfs-fonts/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: buyp2p-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://buyp2p-binance.com/.sfs/css2?family=Plus+Jakarta+Sans:ital,wght@0,400;0,500;0,600;0,700;0,800;1,400\u0026family=JetBrains+Mono:wght@400;500\u0026display=swap\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: font/woff2\r\ncontent-length: 27236\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 100\r\nx-ws-ratelimit-remaining: 90\r\nserver: sffe\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 15:58:23 GMT\r\nx-content-type-options: nosniff\r\nexpires: Sat, 09 Oct 2027 15:58:23 GMT\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncache-control: public, max-age=31536000\r\nx-cdn-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":27662,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-10-09T19:29:40.177097Z","times_seen":26848,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"buyp2p-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buyp2p-binance.com/.sfs-fonts/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"buyp2p-binance.com","domain":"buyp2p-binance.com","tld":"com"},"ip":{"addr":"212.227.222.67","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:23.191Z","timestamp":1791561503191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buyp2p-binance.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Thu, 01 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"38:0B:68:4D:F5:A3:96:56:00:3D:69:54:A1:1E:7B:BC:C9:28:1B:10","sha256":"5B:BC:31:3B:37:C2:86:09:84:6E:41:86:C0:70:79:19:DD:58:1D:96:5C:28:72:FB:46:56:82:28:84:EB:F1:FA"}}},"request":{"raw":"GET /.sfs-fonts/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: buyp2p-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://buyp2p-binance.com/.sfs/css2?family=Plus+Jakarta+Sans:ital,wght@0,400;0,500;0,600;0,700;0,800;1,400\u0026family=JetBrains+Mono:wght@400;500\u0026display=swap\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: font/woff2\r\ncontent-length: 27236\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 100\r\nx-ws-ratelimit-remaining: 88\r\nserver: sffe\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 15:58:23 GMT\r\nx-content-type-options: nosniff\r\nexpires: Sat, 09 Oct 2027 15:58:23 GMT\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncache-control: public, max-age=31536000\r\nx-cdn-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":27662,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-10-09T19:29:40.177097Z","times_seen":26848,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"buyp2p-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buyp2p-binance.com/static/flash-promo.mp4","fqdn":"buyp2p-binance.com","domain":"buyp2p-binance.com","tld":"com"},"ip":{"addr":"212.227.222.67","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:23.226Z","timestamp":1791561503226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buyp2p-binance.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Thu, 01 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"38:0B:68:4D:F5:A3:96:56:00:3D:69:54:A1:1E:7B:BC:C9:28:1B:10","sha256":"5B:BC:31:3B:37:C2:86:09:84:6E:41:86:C0:70:79:19:DD:58:1D:96:5C:28:72:FB:46:56:82:28:84:EB:F1:FA"}}},"request":{"raw":"GET /static/flash-promo.mp4 HTTP/1.1\r\nHost: buyp2p-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://buyp2p-binance.com/\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ncontent-type: video/mp4\r\ncontent-length: 2743040\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 100\r\nx-ws-ratelimit-remaining: 85\r\naccept-ranges: bytes\r\nserver: IONOS Webserver\r\nexpires: Fri, 09 Oct 2026 16:28:23 GMT\r\ndate: Fri, 09 Oct 2026 15:58:23 GMT\r\netag: \"0j1-7k5s01001-4ik2cl1-fd4gpj\"\r\ncontent-range: bytes 0-2743039/2743040\r\nlast-modified: Sat, 03 Oct 2026 19:06:44 GMT\r\nx-cdn-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":2743040,"size_decoded":2743482,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"0bdf283af4a138f0ef7315115fbb5802","sha1":"82e78dd9f60adcca5b6288636addb0ce7c22ff26","sha256":"37fc77091f31a6dd32f877a87d7a7aaca6490e7b00762938bb2a88a31496b007","sha512":"fea85e165ac7d2c2ae29e31b174d81c4f3989d850bcaefd6901d31b122d2530c3af5cba1acd4da352ef7e2b12e0edbecd96fe94248c6b974efdd80ed0b6bf30a","ssdeep":"12288:56c4+T21bRhX33fxJwP2WIf58pDH9ZDDgIK43MmBoRJME3RiDad0zLT5p:5BFm9hvnkS6pDH9FBwgxHzxp","tlshash":"b725d0c6b7d0446dde394eb080da031a7b7cc6a46e0f37db1d989a399c87b287c17196","first_seen":"2026-10-09T16:00:42.088133Z","last_seen":"2026-10-09T16:00:42.088133Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"buyp2p-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buyp2p-binance.com/assets/favicon-BaHFto7j.webp","fqdn":"buyp2p-binance.com","domain":"buyp2p-binance.com","tld":"com"},"ip":{"addr":"212.227.222.67","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:23.529Z","timestamp":1791561503529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buyp2p-binance.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Thu, 01 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"38:0B:68:4D:F5:A3:96:56:00:3D:69:54:A1:1E:7B:BC:C9:28:1B:10","sha256":"5B:BC:31:3B:37:C2:86:09:84:6E:41:86:C0:70:79:19:DD:58:1D:96:5C:28:72:FB:46:56:82:28:84:EB:F1:FA"}}},"request":{"raw":"GET /assets/favicon-BaHFto7j.webp HTTP/1.1\r\nHost: buyp2p-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buyp2p-binance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/webp\r\ncontent-length: 57372\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 100\r\nx-ws-ratelimit-remaining: 83\r\nserver: IONOS Webserver\r\nx-cache: HIT\r\ndate: Fri, 09 Oct 2026 15:58:23 GMT\r\nx-content-type-options: nosniff\r\netag: \"af60a8eb245a057e9dd40c502d6e724f31397f82\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nx-cdn-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":57372,"size_decoded":57826,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6f088bfd75009cacda6d97b350425c5e","sha1":"32770fa07a6a820d4a227396bd43562d78bacaa5","sha256":"5aa8e28976b667601a91ce360811af69d36ed75e4e325256ffeb27691614954f","sha512":"e2df37f36b333a0cdd5f98d097e5669fa4e15e689f2c4254bdddcccdca8307744e16163e3aa9723586bffb24173644624b48c45c263fe2aaff83a037c0d2bf7f","ssdeep":"1536:HAiq5y4ShTMb5lQS43sLr1QOznai8sL2l0Psjqzrk7KVDp7nNviMo:HAG4S+zQ0Lr+8wsL2m0jqztp7BiJ","tlshash":"ad43024813a2662422bc70c7f5e008d1e92999222acc53d44cab57f456f775cfe8df6b","first_seen":"2026-10-09T16:00:42.055884Z","last_seen":"2026-10-09T16:00:42.055884Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"buyp2p-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:24.184Z","timestamp":1791561504184,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://buyp2p-binance.com/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 178\r\nOrigin: https://buyp2p-binance.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":178,"data":"{\"p\":\"66efeedbe5982d6c7bb2c746\",\"w\":\"default\",\"platform\":\"desktop\",\"tzo\":0,\"url\":\"https://buyp2p-binance.com/\",\"vss\":\"\",\"consent\":false,\"wss\":\"min\",\"uik\":\"ZsBSJDZGbIY3f3CNipqcX\"}"}},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-pw5n\r\naccess-control-allow-origin: https://buyp2p-binance.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Fri, 09 Oct 2026 15:58:26 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a47e962a1beb569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1053,"size_decoded":1427,"mime_type":"application/json","magic":"JSON text data","md5":"62dd2c4ece0100bffddc25a1833d545d","sha1":"8183094eafde465395efab9a15a174c713dc1b01","sha256":"f842fd7c4f3c16ce811f5fcfbf71a211be37b0e45990905baf2e8f3fe34f28e7","sha512":"4fb546b22c11ae2f96999317f39f9f8d2ee4621846fe885a4c23d9a54bfcfb7a7c2ec67e45bb28d54edb5b3ddcbcb629d903120757bc9f7e49fb3244c117804a","ssdeep":"","tlshash":"dd11a8011d4e6f3e67633e5a4da42ed906ccdfc17dc08199e1d39d8926d91bd9b034b2","first_seen":"2026-10-09T16:00:42.091276Z","last_seen":"2026-10-09T16:00:42.091276Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buyp2p-binance.com/","fqdn":"buyp2p-binance.com","domain":"buyp2p-binance.com","tld":"com"},"ip":{"addr":"212.227.222.67","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T15:58:19.021Z","timestamp":1791561499021,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buyp2p-binance.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Thu, 01 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"38:0B:68:4D:F5:A3:96:56:00:3D:69:54:A1:1E:7B:BC:C9:28:1B:10","sha256":"5B:BC:31:3B:37:C2:86:09:84:6E:41:86:C0:70:79:19:DD:58:1D:96:5C:28:72:FB:46:56:82:28:84:EB:F1:FA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: buyp2p-binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 3755\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 100\r\nx-ws-ratelimit-remaining: 99\r\nserver: IONOS Webserver\r\ndate: Fri, 09 Oct 2026 15:58:22 GMT\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\netag: \"0534f09ff7cbc94d6549360487d0161ff886a7f1.gz\"\r\ncache-control: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-cdn-cache-status: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10812,"size_decoded":4231,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"8032dd96a74746ae16899936c63f5aec","sha1":"001effabbc6f81dfb585e5b2232e1268e9215ea9","sha256":"3aa1ad7bd02a12469c6b040053ef06f94aea7bbbcee615d12d214de043b15f60","sha512":"b5c9b3d361ea955d719bcd8d504b53d8e76b5be0bfceff68e6760bced63e7e4b8b7da0095e42d8c3539faf78104c8c689354a89309a521ad3368fcfe6f0085c1","ssdeep":"192:xN72rWEWJXjvBNJZEefJB0si6iAGI8D0YPZ9ef53cyYqOihf3mFDzQvyWaZMAWmm:xiWDeQs84+WtrG","tlshash":"fa228553eb718c131056623630f6330aa6a5814bca58aca9769c052e1fddeee46f335f","first_seen":"2026-10-09T16:00:42.094979Z","last_seen":"2026-10-09T16:00:42.094979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3570,"timings":{"blocked":-1,"dns":69,"connect":17,"send":0,"wait":33,"receive":0,"ssl":3450},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"buyp2p-binance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-iframe-styles--AKXn-6M.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:26.692Z","timestamp":1791561506692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-iframe-styles--AKXn-6M.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MinWidget-DFrnenzP.js\r\nOrigin: https://buyp2p-binance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 15:58:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"a5911fd0628b3cf5cec05686e05ab9d9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a47e9638ce90569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9008,"size_decoded":3909,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4572)","md5":"a5911fd0628b3cf5cec05686e05ab9d9","sha1":"8425eca2130d070fa14f6c4f10a598114b55e059","sha256":"1201d8d289332d47312fab8f697cef54c6d442ba048130d8a5da9072b3573105","sha512":"fa28703ea9d3cc47a30ccf066ce8b7af7e372c145148df990a6caa89ab727c79acf72b293d13b0cd36a2f7b73bcbd18b25e3705eace8d6ea7df2aa1d2cb33f9c","ssdeep":"192:VJLb83BvkHM9NiEJqisgZLvk+5/+qsqXf8utWAEIU5UyWkS7D/7df26G2Ld8AAH:vb8xwMTqils7UWAEIU5jWkS7DzdNG2LY","tlshash":"e302c522f3df3065b2148a4855f7fbb83e2d61216f518df129a4bb391b84ac62021f7d","first_seen":"2026-09-14T08:43:43.604039Z","last_seen":"2026-10-09T19:45:56.021349Z","times_seen":2762,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/css/min-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:27.184Z","timestamp":1791561507184,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/css/min-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 15:58:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"fca40181c727cc29b69045ec5589f638\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1237399\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncf-ray: a47e963be88976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23816,"size_decoded":6020,"mime_type":"text/css","magic":"ASCII text, with very long lines (23816), with no line terminators","md5":"fca40181c727cc29b69045ec5589f638","sha1":"83aaec5320016a15845195eb1d3fbb8982b66fa3","sha256":"a8c70c82d9bd2a2ef3e4edbe3cdb060bdcca80a3351307d066eee3df4be8a8d0","sha512":"32f6a558154dede9ec9cad1177d1142b7c949d431d8a3e9ed7cfc31ac62bb8ffe2cc501c18a86a26523bba0b0d61f6ea1238e8fec3ab5cf531531a5b6990140e","ssdeep":"384:gZBMbrYbv+esY2jcWlnrCxN82TNSixi7rOPJh3L:giUAEh3L","tlshash":"a2b21da3b5d714dce657c236c0d5f67ca82b4a60c753c6a3b9037bb886c1ad73641a4c","first_seen":"2026-09-14T08:43:43.747289Z","last_seen":"2026-10-09T19:08:30.48512Z","times_seen":2676,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-message-format-DKJXm_pH.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:26.695Z","timestamp":1791561506695,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-message-format-DKJXm_pH.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MessagePreview-KbNQqIX-.js\r\nOrigin: https://buyp2p-binance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 15:58:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"3b65489e3df378341353ddc879819d4a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a47e9638de98569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4539,"size_decoded":2597,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2159)","md5":"3b65489e3df378341353ddc879819d4a","sha1":"a8547609851fc4f6e9adfc85d3672c84cac94aee","sha256":"ca93c85d600a921de5746273d9bc0e73bed8be60db0232371c2f95cd9dab1a0e","sha512":"e23cec57ff2cdafbc120676028fb4afe24112f66ec86a3263c9994032a595897715885d4018fdc81afaf0d5cb8c3e7b3babf9f64e909dd6c772500dfee984472","ssdeep":"96:vEE1QwTybFyqrWvTArxxmCeac6tBXKvC2CaLsCawwD7CZfdME2IIo:vr1QwatWvTArxxm2c6tBXKvKu9LZiE6o","tlshash":"d591d682f190a04243b03a1079da4921f07bea4badd59b15d659b813ba36b0b58f7bdc","first_seen":"2026-09-14T08:43:43.633565Z","last_seen":"2026-10-09T19:45:56.077311Z","times_seen":2722,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MessagePreview-KbNQqIX-.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:26.528Z","timestamp":1791561506528,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-MessagePreview-KbNQqIX-.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-main.js\r\nOrigin: https://buyp2p-binance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 15:58:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"ec0736224b16cd4c3c1504f06b8b79fe\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a47e9637ce52569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11206,"size_decoded":5023,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6129)","md5":"ec0736224b16cd4c3c1504f06b8b79fe","sha1":"b05896bd4f8df58b5606dee7965f4d13de1100a1","sha256":"4c02dab373a3b0ba5a24f333cf4a83538c9a9c756cc776d52acb000e4b831043","sha512":"d50f077c11522ab690f78cfde45f9cb91014dd4ecbfa0ecbf830c414f8aaea93e0d538de4d6a2b89bf85c4d0d5e85fd328a42afb18701e01dc379a6fa122bcb2","ssdeep":"192:8cfBABqWkgk3rOQeOF0N30SbX3kXSKC4qUuKQfvrYXL8vNRywfCfxVYEx5uhbQ30:8YBtxya0NNbXuC4qUufsXAv7ywfjGwxd","tlshash":"25323b1ab2a8683c933786cab1cb6625731c1f305612d4e3f06d5f9f1365da810d6f2b","first_seen":"2026-09-25T08:45:54.033119Z","last_seen":"2026-10-09T19:45:56.03543Z","times_seen":2224,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-BrandingWidget-MJiLQkQP.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buyp2p-binance.com/","date":"2026-10-09T15:58:26.532Z","timestamp":1791561506532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-BrandingWidget-MJiLQkQP.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-main.js\r\nOrigin: https://buyp2p-binance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 15:58:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"09a8a4df0fbc87c70a3579eb083e45cb\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a47e9637ce53569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3526,"size_decoded":2158,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3525)","md5":"09a8a4df0fbc87c70a3579eb083e45cb","sha1":"eaadb2ae4b49e5ce917ddeaf7fc859c6bbfb8dd9","sha256":"e51ee752f7c29f39ca4f4a911150c3345f92808c4fd3ae18a0b58d7a3d473f4d","sha512":"f08ae1af034284ca5f5c0a6d3474f1e10289281a915f5955648bb1a51edae305c44dca5a6ac9f43efac504837d44ec8d919f00aaf17f980a62f57939ddc40177","ssdeep":"","tlshash":"a671e70ff0eab4e5f335510440eb663e947e1b0887758df5823baca22354dc290b7a76","first_seen":"2026-09-25T08:45:54.071971Z","last_seen":"2026-10-09T19:45:56.064427Z","times_seen":2256,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}