{"report_id":"0e149984-d6cb-4c99-b94a-0f519b79762d","version":0,"status":"done","tags":[],"date":"2026-07-12T17:35:28Z","url":{"schema":"http","addr":"btc-orendia-v342.sbs","fqdn":"btc-orendia-v342.sbs","domain":"btc-orendia-v342.sbs","tld":"sbs"},"ip":{"addr":"172.67.183.87","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"btc-orendia-v342.sbs/","fqdn":"btc-orendia-v342.sbs","domain":"btc-orendia-v342.sbs","tld":"sbs"},"title":"BTC Orendia v34.2 Platform | Official Website","dom":{"size":1528878,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (44665)","md5":"7cb2faa4840195d9d2f1e6163c260a9d","sha1":"06b84e48509b1bfad43172cf16241ce5ff78d844","sha256":"78ec80f53c9429de4ced9829514ae462c3922c0b27d30966108c1db1acad815a","sha512":"1386c39adeec6be337dbc581a63ad792da19655e4572a7fb68f8d1e68d47e2aebd49af5867e8e6055ff4f3c2af192dac731f44f73abd955f5a07b2ecc3e3b180","ssdeep":"24576:1vBGEx/l3BS2bFH5a7LUfvyZpFJSxkbbGum2+vwcxs7F6oAkIZO:hMQl3F5GGk/oHMFt","tlshash":"0d65ae33025939260137c2d530b99b37d6a69d5ffaa70a413fecd7e62be9c90741b10a","dom_hash":"domhashd396c967df9ab4788b1d08a78fcd3dce","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"btc-orendia-v342.sbs","fqdn":"btc-orendia-v342.sbs","domain":"btc-orendia-v342.sbs","tld":"sbs"},"ip":{"addr":"172.67.183.87","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T17:35:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"btc-orendia-v342.sbs","ip":{"addr":"104.21.18.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-02","domain_rank":0,"first_seen":"2026-07-10T11:53:09.897324Z","last_seen":"2026-07-10T11:53:09.897324Z","alert_count":36,"request_count":12,"received_data":1588767,"sent_data":5790,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"libphonenumber:1.10.58","description":"libphonenumber is a JavaScript library for parsing, formatting, and validating international phone numbers.","website":"https://github.com/google/libphonenumber","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-07-05T22:41:50.352327Z","alert_count":0,"request_count":8,"received_data":667594,"sent_data":4256,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sf-seo.sbs","ip":{"addr":"104.21.13.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-09","domain_rank":0,"first_seen":"2026-06-20T07:58:11.554849Z","last_seen":"2026-07-10T11:53:10.551132Z","alert_count":0,"request_count":1,"received_data":454,"sent_data":532,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-05T22:19:28.847206Z","alert_count":0,"request_count":3,"received_data":148035,"sent_data":1737,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ipwho.is","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-01-29","domain_rank":18239,"first_seen":"2020-06-08T11:52:47Z","last_seen":"2026-07-07T01:48:26.345213Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":489,"comment":"","tags":null,"fingerprints":null},{"fqdn":"flagcdn.com","ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-05","domain_rank":30920,"first_seen":"2020-04-05T08:17:33Z","last_seen":"2026-07-10T06:13:48.09313Z","alert_count":0,"request_count":1,"received_data":1400,"sent_data":536,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ipapi.co","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-07-09T01:04:15.221232Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":466,"comment":"","tags":null,"fingerprints":null},{"fqdn":"get.geojs.io","ip":{"addr":"104.26.1.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-18","domain_rank":99948,"first_seen":"2017-03-30T18:44:25Z","last_seen":"2026-07-10T22:56:50.77206Z","alert_count":0,"request_count":1,"received_data":962,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-05T22:22:24.069932Z","alert_count":0,"request_count":1,"received_data":8265,"sent_data":532,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.vimeocdn.com","ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2010-04-21","domain_rank":24258,"first_seen":"2014-03-27T22:24:57Z","last_seen":"2026-07-06T10:30:22.937732Z","alert_count":0,"request_count":2,"received_data":14574,"sent_data":1249,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"player.vimeo.com","ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-12-15","domain_rank":132,"first_seen":"2013-09-26T03:16:08Z","last_seen":"2026-07-06T12:53:11.629275Z","alert_count":0,"request_count":2,"received_data":28976,"sent_data":1364,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"api.country.is","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2015-01-30","domain_rank":253271,"first_seen":"2016-09-23T06:54:06Z","last_seen":"2026-07-12T11:17:23.204229Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":467,"comment":"","tags":null,"fingerprints":null},{"fqdn":"f.vimeocdn.com","ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2010-04-21","domain_rank":25524,"first_seen":"2014-04-09T18:24:34Z","last_seen":"2026-07-08T18:43:09.195667Z","alert_count":0,"request_count":3,"received_data":1470272,"sent_data":1477,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"player.vimeo.com/video/1128168202?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"57f7f3aa3a3a44664be2364871960b24","sha1":"9b073ecf9f6f1718559dcd89f4d819ebd68dac9d","sha256":"11aa3ddcb239e4ee1fe72f1f7796f62c444af5f33957da1da475b10b53a47144","sha512":"e15d2f8d463cfb4671e21c78a94f0510c12e5517dde05fff074d39c49fb7d00abedac548dd1ef7531584ebe5f2bd5cebcbff647296a67687ceb9caf02030b21a","ssdeep":"","tlshash":"4b11c0214210b872459ea5970297d30d7013666ecb06c78c412a9559207c9d7b3aabbe","size":876,"data":"","first_seen":"2026-05-25T17:50:02.53288Z","last_seen":"2026-07-13T06:10:26.166195Z","times_seen":4730,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1128168202?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e4de7f13bb599c205ab57b0e8bcae59","sha1":"b35aed0a0d7f96efbab6c1eef6ef9ae027f66fe0","sha256":"1400b85e6c43c7872c688d127eff69ec8aebd382912750e6f698615e5a12851f","sha512":"a49bbedeb799f96d43f941d9346f8acf5608ccf5f7c2f1220545f92f2aedf0b9211aae73647c8f321fee727bbb75c7985fcf6683437b88d46b1ac17b3b652349","ssdeep":"","tlshash":"0cc08057541171ba05b5cfc6bd151cc9506700017411c166d52d55df6326fe746dc154","size":184,"data":"","first_seen":"2026-01-13T18:50:17.731936Z","last_seen":"2026-07-12T17:35:34.453452Z","times_seen":203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1128168202?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8fd5326b8a0843d537dc541ef5f60cc9","sha1":"69861776b39b85892758a720fe16f350ddc08090","sha256":"14420b376f2b4e6a7e8246d72f2d35a711138f480dc397e25bbde355fe7a1b39","sha512":"bba2f8e41b34d313565ddd15c22b73a7ce2277bf5e5ca25d821102aee8b3ebd269d501da96f3e27368b351f6b0d1277a861b9f54b460e86e188098919010d68e","ssdeep":"384:bvtvXCcvRuvR8kvRyvReR8vR5R0bgUNstTwNVDfufWok6FX:/szYOS3lJwNVDfYWC9","tlshash":"9f521ab35b989e3b4bc0eace0d465d05186a910fde81cefac9e68fdc159f696360f050","size":13760,"data":"","first_seen":"2026-07-12T17:35:34.454023Z","last_seen":"2026-07-12T17:35:34.454023Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1128168202?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e63984957c82aeb4edfe9c016959bad","sha1":"ab9e8bb49f8eb458e90a942e1d7e77c9ed8b1c90","sha256":"ca23e94bcdbd075324976c12a260082302e7b09dde0fd25d3b7b7709a9a7b5c6","sha512":"1764d76dc4b7800c3c146697ad3340635e58d3be972b660b4cbb5b75f7d861f65ee45837f18e5f2db4bdf81a0e4f6940a833d44b8dc796afbc7c30824581227f","ssdeep":"","tlshash":"d251ab7aa442f43a12310ce9f77b2316707636d87906a360e02e789c385dc23d627bcd","size":2656,"data":"","first_seen":"2026-05-25T17:50:02.538897Z","last_seen":"2026-07-13T06:10:26.171108Z","times_seen":4730,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1128168202?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d43b3e79081c2d1cc4669e7bf712464d","sha1":"e7a864cf22a98463d6b7bc6897dd61a568762d07","sha256":"12119301eae947625dfec4677c8575137b7c3726567fa3c2f802c31c0fc0e236","sha512":"e5a8db7ea9315bea683415d397c3c4d583ad8383d7006f67ace889def38b3465f6e212964859789f0d70170a1a6adae026fca95c10d4d47f415aac656512ea05","ssdeep":"","tlshash":"02b0223ba8a00028b83a88c0220a238038300002ac0ae300e02c200c2228f0300228c2","size":125,"data":"","first_seen":"2026-05-25T17:50:02.540973Z","last_seen":"2026-07-13T06:10:26.171653Z","times_seen":4730,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.73/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8a0ca95a4cca9aa688572a09b41f8b1","sha1":"a566a0174f4e2242feed32b95a80889b4ad2e6dd","sha256":"17ed7f95a06249806a115efb6f3fc440849c06e671ef2666b47b9a5795125d1f","sha512":"a1ccb2a9c4dde039a84a22161c6853a6ef7273ebb57ce6709c540b62760549745d25e55e1f8ab1aa4fa4fec424af650fcb9c2bdd0a8265390995fcc5d1905b43","ssdeep":"6144:6xrQb8XM5U5dAbYwlkc9IERRcRDZx12r/g5lpt:6x/85ucTcPrL7","tlshash":"af64e7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","size":327574,"data":"","first_seen":"2026-07-09T15:12:49.459817Z","last_seen":"2026-07-13T06:20:24.681302Z","times_seen":417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/19.2.16/js/utils.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ca8f21908a2aad7182bad4a10cce478","sha1":"89170581c7099479bc6659554c767298738c4ec5","sha256":"c3e86718e42d1424af1544109482ff4ba7443cfc1349106485a2853ab7040b69","sha512":"57bf31817e106ec9d330eb9f279e245b362919ba6bbaa4355939187062a4fa70cb79567bc8075b9958960fe82c48a4d937a05a2509645b7d81205a78ac0f1cc3","ssdeep":"3072:hHS30w8yAJjFs3OwPss3MwPgmAu9I2xVM8Mq8WXnWcBpUsA56kmLNTg/QKWVk/tA:hHS3qzBwfxVM8Mq88uA","tlshash":"7e44e1ebd63c9737a1d97b35968eb3cd5a8cbca3c848567826c3b54f52788e0706c205","size":257451,"data":"","first_seen":"2024-01-30T04:35:53Z","last_seen":"2026-07-12T21:36:57.212497Z","times_seen":247,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/libphonenumber-js/1.10.58/libphonenumber-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a9e30cd0effabf851fa50f75156e7a4","sha1":"1fa9a6f88f6223a35e89281567a8fd46584788bf","sha256":"e4396841a7c3b2805e113d3c72d7719158f36bb3d8938c1dbc0c5fc9394b8b57","sha512":"8ff04293b955dc61cf7dcee1d805297be2c99aa0b6cb2a5e84194b6ba40e7a91c1a597dc6f4a919bea3c03c33406a1bb586c0e859a5d3db41d84b6f74c10ce75","ssdeep":"1536:TOe0tNo455wjffgVKKyNyXGgojrxmHMN45YvqWRD6QHKQMWNRVHhK+/1hFddNzTg:TOe03o4PwjUYxYMbi/mzhKyHvDq6N1lQ","tlshash":"f004c9f77540bb7774b13b188e1ad24fab9c9c51dc98a08cdbe3d8da5d61822207db14","size":176085,"data":"","first_seen":"2026-01-31T07:10:31.87394Z","last_seen":"2026-07-12T21:36:57.182636Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc-orendia-v342.sbs/script.js","fqdn":"btc-orendia-v342.sbs","domain":"btc-orendia-v342.sbs","tld":"sbs"},"ip":{"addr":"104.21.18.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"205663ecb5d0ecc386532c4a3f6a235e","sha1":"bfeee50a7011a1a82dd9ef18dc5e708622902086","sha256":"16f5d2a0283e3bd9bbc4a97b0b62d882936882d98b358e756b7dcc5a38672992","sha512":"73f0902398a855e80d78ac3f6a0eefb32aeb49bc36cbfbc91a901e9b8694576129daa567e60f776e259eee67a0756dbfb7c3e516dc6efd0c47c119d758614877","ssdeep":"1536:QwE1VlwGp1jPTDr7BTAIyg94k9fh/HEflGnLXmXanF:41jpfbvglcF","tlshash":"5aa3b3492af310724e33a0f967db9203f27961172944c9887e9d47141fc5fb1abb6be8","size":102425,"data":"","first_seen":"2026-05-15T06:42:28.600492Z","last_seen":"2026-07-12T17:35:34.409947Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.73/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4018db4d86b3189b9ecdd0954edc3101","sha1":"f5be48f56820ffb489f14f11e67c6deb80c13cda","sha256":"20e50d8cd1df0f453723353396cee6b267d7c39005218ffd9d058618b40d1463","sha512":"bf3b70ffe13df3220daaed54a0a92ce51ef34b0ab85e87774383fc022988a15ed8ab8f98fda3534af8afbf780f11ce968ce54dee709d22faf0ea97b7c1bd511a","ssdeep":"12288:lrlpYJWnc41mQdlSqFHJPV+1TSD/YLLAf8YuTMGZF74kNbjZ3dZ83FMK+AnPTSYo:O2c4d7FHpV+1TSD03LDtWyyK","tlshash":"b0156cc672c2f535819645a6e17b0203b33e169db80d864cf03dadcd3a9e545a2bbbf4","size":903817,"data":"","first_seen":"2026-07-09T15:12:49.456585Z","last_seen":"2026-07-13T06:20:24.68503Z","times_seen":420,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc-orendia-v342.sbs/","fqdn":"btc-orendia-v342.sbs","domain":"btc-orendia-v342.sbs","tld":"sbs"},"ip":{"addr":"104.21.18.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-07-13T06:18:11.451978Z","times_seen":180501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc-orendia-v342.sbs/assets/js/scripts.js","fqdn":"btc-orendia-v342.sbs","domain":"btc-orendia-v342.sbs","tld":"sbs"},"ip":{"addr":"104.21.18.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d24c8df73a6c0ac30032cd6fc710dd3e","sha1":"7c48a203199f91ab689c9dcebf8fdeb48d515e10","sha256":"3a23b4107d920e9e8340d2ccb9b5ef845f9fc7354aa6ce51b9c53a27ecc4e6fb","sha512":"9d4d4e4febddc7ce3d9a0a4eb4ebcc8e2dd4d271c7bff82de421168f4b3a570b3080764e7ea60a89c0ced461110693c46dd53bd9f0cd7527a7272b5cf888c0bb","ssdeep":"192:5niEmEl5j2AByoQZdgIC5V0pW7atxwGdsy9lWLReT06aJWKxkxFInIeal:57mFAMC09SLIZ","tlshash":"4022737a71f61032823350fe6bdb95197a3420433585de887b9d42086fd2f64abe37e9","size":10752,"data":"","first_seen":"2026-05-15T06:42:28.623466Z","last_seen":"2026-07-12T17:35:34.440371Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc-orendia-v342.sbs/","fqdn":"btc-orendia-v342.sbs","domain":"btc-orendia-v342.sbs","tld":"sbs"},"ip":{"addr":"104.21.18.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"22a4a32a427c4797a57c1e79baf9c120","sha1":"01311718b8ec4d7b598226c841b4370f135155b9","sha256":"2fdd852de63179c496355e4e02cc6b593d428cb5b4597154464aafb838d9952b","sha512":"5a1a8cbcd31050242032d18c251913f24c3dbd0feed8d17bb62dc4518f998394ca751951798df56227bdd872064013bc189db9ef242e3ef01915664e44fe2d8b","ssdeep":"","tlshash":"d3f0c06e815298032de1115c7f86231efa1340350759c05c6bdd92583f6d2afd40b1d6","size":547,"data":"","first_seen":"2026-06-12T05:18:48.309163Z","last_seen":"2026-07-12T17:35:34.456767Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc-orendia-v342.sbs/","fqdn":"btc-orendia-v342.sbs","domain":"btc-orendia-v342.sbs","tld":"sbs"},"ip":{"addr":"104.21.18.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab6db5dd2fc903e12bc5c1304f0b93c5","sha1":"3a1c8b4a442e1e758c5f281336b8df4fb2324e5d","sha256":"36914b2062bbd3b9741dd2e3dc39efd77d1c7acd82eaf6518fd7ff8ba04c2bfe","sha512":"0f8c621fe1cb760396b8cc4a5dabebc313e955923677fadb3f7ff837fa40c3389a17ac47f6343912c852818749190aca8157b39810c4ca6f383e4308567de165","ssdeep":"","tlshash":"aaf0a36d2272453d09e7246d725793c83d6500077146d85c3f0cd5904f99fd684d5bc8","size":468,"data":"","first_seen":"2026-06-12T05:18:48.310133Z","last_seen":"2026-07-12T17:35:34.457304Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc-orendia-v342.sbs/","fqdn":"btc-orendia-v342.sbs","domain":"btc-orendia-v342.sbs","tld":"sbs"},"ip":{"addr":"104.21.18.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a20e6ed0ff0482429ba05d28538b3052","sha1":"bcad5689b3e6cea4273c66d3bdca58fcfe06b1ec","sha256":"b9457d39cdfdc97964249e697de81f43d3ad545b1ed2db92bf3f54d9cf014652","sha512":"31fcf8a2d3b4bb35be77e8207acbc621fb40d48cd2564008824e43e7ca42f28344f9114ce8f6c948a15f92fe1b43373c2137a839b0da9c57739aea171bf3d9b3","ssdeep":"","tlshash":"0041639b3d8299734afaa278469f520dffbb055664c5c4e1c9cdc0402eb959f8233f28","size":2072,"data":"","first_seen":"2026-07-10T11:53:14.207692Z","last_seen":"2026-07-12T17:35:34.458823Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/toastr.js/2.1.4/toastr.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"288053556a8dbbba281cd771104eb77f","sha1":"fef15ece904a9e8c068183635c86779bc7e58ccb","sha256":"c8d6ca635cba876adb55c42d7f46fc96ae1afb1a64b7215cde9498a06018d6a4","sha512":"95bc07e3b97fb4f5c9606f4070536825a4cc846bd85a154cf58238dc24febad7934516a22c2ba2f2c9c883200df175a03633610aa94051dcd9a6db28e8e0a815","ssdeep":"96:OdCZR1JHduRv75dR+FIEHXX9oxNDP9mA1UZsEyHGJAcCwV02UfrI:O4BtcvvRqIQcNa74ccrI","tlshash":"beb17284b220ba8b5b731079919f140b937673b2ccce5440763aa5987e7082897a7fdd","size":5251,"data":"","first_seen":"2023-03-07T13:24:05Z","last_seen":"2026-07-12T21:36:57.176326Z","times_seen":1442,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/19.2.16/js/intlTelInput.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6eb09b87575184fbf793b6c76b0b3b5a","sha1":"8449eed53e8d70da2dc33f361fdb93275062233a","sha256":"31a653d3eef4fee8a0f663943e6da108d433da1103312e7ecca6fabea7dc7048","sha512":"b50af2b637df4d7184d2178cae587fadff4bf1d3fde94e54ee5ad90c31a8dc397143e3763910374388b5facee882bc5db06ca15f18b8049c2fbc9804a4730a5d","ssdeep":"768:LCg3rXNC+I4SAGFdGcUNm//OjJqLRIyH16v4rEIr32Cq+R:Bk3GcL//LL1TEIrGCZ","tlshash":"58e208edb3516633acad91b164bb12476ebf34005684989c787dcdc81eecec960b6b34","size":32951,"data":"","first_seen":"2024-02-27T18:01:35Z","last_seen":"2026-07-12T21:36:57.200569Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc-orendia-v342.sbs/assets/js/lazyload.min.js","fqdn":"btc-orendia-v342.sbs","domain":"btc-orendia-v342.sbs","tld":"sbs"},"ip":{"addr":"104.21.18.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf5154b6bb0c06f2815b3b2dc01ab4fd","sha1":"fd56231873de2769995b9642a119b1426a41ce5e","sha256":"1632d2af4c7a54f873e4cf415c19d8b9282db268c8fe7d92e159c7c7675e6fdf","sha512":"fa338ce0f5a646d5361bd9cffc67f313dd1a5bcdd8a9dce1f1fa189a226ebdf203a87c772429d7eb232bd693582fac1a51b3b23eae0bc40712b4bc5159026a37","ssdeep":"192:mTP85/2hHrQ7oLXC7JyE/UaiN1pDib7UMFYRfz/9oNIbJuly5c:mTPW/cs4X/WHK1pDCUMFY9/uya","tlshash":"79f1a8535907b03f793b625660dc33153028749bec0e4ce47d685de9a15ae4325b3b79","size":7462,"data":"","first_seen":"2025-02-20T08:43:01.683971Z","last_seen":"2026-07-13T05:29:18.477499Z","times_seen":4608,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-07-13T06:09:28.083115Z","times_seen":178475,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc-orendia-v342.sbs/mailcheck.min.js","fqdn":"btc-orendia-v342.sbs","domain":"btc-orendia-v342.sbs","tld":"sbs"},"ip":{"addr":"104.21.18.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c72d3aff0799af980a389646f01980b9","sha1":"8d138483842054b902e95527d2fa394f21238f43","sha256":"8290998b8667077307b8e2f27baec2c9884ddc603e933aa8b92f1d2329898dd3","sha512":"c3c1c66755a6e232d1d25c69e04c845f327ac55217e48d99678482adfe5ae01fbe507b34f54272c846c6b514e23574af9e5ef0f7e6d4e004eae40c9a090abfda","ssdeep":"96:by7AM+X9SEgGuyAMpZiKg6sTQ5Kfa9Qf4Joya2QT9Q9gnd//RlR1jGWK63ujAUm6:bBM+X0EgGb7ponQ5KfYQf4Joya2QpQyi","tlshash":"91b1c966cae72c195913e03c5e9fb40974348c170e58fc94bb5c61881f1c43ea6faadd","size":5526,"data":"","first_seen":"2026-01-31T07:10:31.879993Z","last_seen":"2026-07-12T21:36:57.259814Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"[GEOIP] Detection failed, falling back toTR","filename":"https://btc-orendia-v342.sbs/script.js","line_number":1384,"column_number":25}]},"http":[{"url":{"schema":"https","addr":"btc-orendia-v342.sbs/script.js","fqdn":"btc-orendia-v342.sbs","domain":"btc-orendia-v342.sbs","tld":"sbs"},"ip":{"addr":"104.21.18.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:58.614Z","timestamp":1783877698614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-orendia-v342.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 03:15:49 GMT","end":"Wed, 30 Sep 2026 04:13:07 GMT"},"fingerprint":{"sha1":"E9:35:67:0D:F5:15:27:86:9E:25:4D:36:CB:BB:81:91:23:BB:B0:97","sha256":"67:EA:89:FA:81:93:EA:65:EA:B8:7A:11:F1:06:4D:9B:23:E4:23:2A:C7:3A:17:C4:6C:40:D7:87:98:F9:CE:AB"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: btc-orendia-v342.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btc-orendia-v342.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 12 Jul 2026 17:34:58 GMT\r\netag: \"19019-655990f945300-gzip\"\r\nlast-modified: Thu, 02 Jul 2026 04:15:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nserver-timing: cfExtPri\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eJQt%2FSMBFdTBl6w2fpeU2n92onMBIEn0I%2BlUjT2jrE6mVHVjnxyrb34ueZFIY5xgVibqhJVuT9D%2BDu7C8OYgOd3YJW7MFVPt6oAUDti6CK5E9WEN5%2BLfnZAQPx6UYCVyM7%2BpYRnKow%3D%3D\"}]}\r\ncf-ray: a1a1cd405aac8be6-OSL\r\ncontent-length: 25039\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102425,"size_decoded":25825,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"205663ecb5d0ecc386532c4a3f6a235e","sha1":"bfeee50a7011a1a82dd9ef18dc5e708622902086","sha256":"16f5d2a0283e3bd9bbc4a97b0b62d882936882d98b358e756b7dcc5a38672992","sha512":"73f0902398a855e80d78ac3f6a0eefb32aeb49bc36cbfbc91a901e9b8694576129daa567e60f776e259eee67a0756dbfb7c3e516dc6efd0c47c119d758614877","ssdeep":"1536:QwE1VlwGp1jPTDr7BTAIyg94k9fh/HEflGnLXmXanF:41jpfbvglcF","tlshash":"5aa3b3492af310724e33a0f967db9203f27961172944c9887e9d47141fc5fb1abb6be8","first_seen":"2026-05-15T06:42:28.600492Z","last_seen":"2026-07-12T17:35:34.409947Z","times_seen":15,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-orendia-v342.sbs/errorMessages.json","fqdn":"btc-orendia-v342.sbs","domain":"btc-orendia-v342.sbs","tld":"sbs"},"ip":{"addr":"104.21.18.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:59.109Z","timestamp":1783877699109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-orendia-v342.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 03:15:49 GMT","end":"Wed, 30 Sep 2026 04:13:07 GMT"},"fingerprint":{"sha1":"E9:35:67:0D:F5:15:27:86:9E:25:4D:36:CB:BB:81:91:23:BB:B0:97","sha256":"67:EA:89:FA:81:93:EA:65:EA:B8:7A:11:F1:06:4D:9B:23:E4:23:2A:C7:3A:17:C4:6C:40:D7:87:98:F9:CE:AB"}}},"request":{"raw":"GET /errorMessages.json HTTP/1.1\r\nHost: btc-orendia-v342.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://btc-orendia-v342.sbs/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Sun, 12 Jul 2026 17:34:59 GMT\r\netag: W/\"41fe-655990f945300\"\r\nlast-modified: Thu, 02 Jul 2026 04:15:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8f9jQpmm5hVe7Wu4hhiPSYhCy6wc%2BmSj7YVbjmwbniT0lEFjb%2FlGpotv6fapSytmQzoOeng5xJ0ZbyG0tHtA8MPEvwrZYtAcs83w9LqQPh%2BvqaaMs2is8%2F9c1DlT4ZkHy5EKl72ltg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1a1cd437ae88be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16894,"size_decoded":4940,"mime_type":"application/json","magic":"Unicode text, UTF-8 text","md5":"bf8a592f8b1906e2246ec06baaef79b1","sha1":"bca979c96a8d7eb9b780be9400f6ae3977ac42c3","sha256":"d8018ddb829aa691c0f787051bc02867085a90f8f81c124724b8a8bae62e20a2","sha512":"48370eed6b9bb7756c5f4f36f430bb7786576761517a968a5a281e7a7ce0f6c2bc8f014900bde06c96ba60368d0b8feb140afd7ea7f5bf0aae784ae5204bbb10","ssdeep":"384:0ASGuzmclbqrRXNHIkwhhO1uW7n+mCvUuW5uWf5kdYRECjCvUWLvMOJfdko3nwwF:0ASGuzmcRqrTIX7O1uW7n+EuW5uWf5kL","tlshash":"7a721222c5520dc70f8221e538c9690762c460fb1f186905bb1c9a5d9fcfeefe8b656e","first_seen":"2026-01-31T07:10:31.87075Z","last_seen":"2026-07-12T21:36:57.234206Z","times_seen":34,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/toastr.js/2.1.4/toastr.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:58.608Z","timestamp":1783877698608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/toastr.js/2.1.4/toastr.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btc-orendia-v342.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 17:34:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1763\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:17:02 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 1691\r\nexpires: Fri, 02 Jul 2027 17:34:58 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6bB7G%2FE4Wly8cXisw4G781%2FdFEs%2FV34PYHSmLAHCmD%2Buw5vWHygVlQukRvupwgiq5q3Y2l7E799NTqovx%2BpGDIl1Lo%2BcIfjSicvgaaaCd8hsvHeZPIBsY1wX3RAOz%2BgzwUYLb1rB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a1a1cd404a52568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5251,"size_decoded":2801,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5215)","md5":"288053556a8dbbba281cd771104eb77f","sha1":"fef15ece904a9e8c068183635c86779bc7e58ccb","sha256":"c8d6ca635cba876adb55c42d7f46fc96ae1afb1a64b7215cde9498a06018d6a4","sha512":"95bc07e3b97fb4f5c9606f4070536825a4cc846bd85a154cf58238dc24febad7934516a22c2ba2f2c9c883200df175a03633610aa94051dcd9a6db28e8e0a815","ssdeep":"96:OdCZR1JHduRv75dR+FIEHXX9oxNDP9mA1UZsEyHGJAcCwV02UfrI:O4BtcvvRqIQcNa74ccrI","tlshash":"beb17284b220ba8b5b731079919f140b937673b2ccce5440763aa5987e7082897a7fdd","first_seen":"2023-03-07T13:24:05Z","last_seen":"2026-07-12T21:36:57.176326Z","times_seen":1442,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sf-seo.sbs/api/track/event","fqdn":"sf-seo.sbs","domain":"sf-seo.sbs","tld":"sbs"},"ip":{"addr":"104.21.13.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:58.983Z","timestamp":1783877698983,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"POST /api/track/event HTTP/1.1\r\nHost: sf-seo.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 121\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://btc-orendia-v342.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btc-orendia-v342.sbs/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":121,"data":"{\"siteId\":1234,\"templateId\":103,\"token\":\"66c6898fb3844ef7aff4d6c56877d3161f0655d833de584fa934aba3490996e4\",\"type\":\"view\"}"}},"response":{"raw":"HTTP/3 502 \r\nretry-after: 60\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 12 Jul 2026 17:34:59 GMT\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a1a1cd435b105697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6378\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T06:17:49.943222Z","times_seen":17206107,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:59.080Z","timestamp":1783877699080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://btc-orendia-v342.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 09 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 315977\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-13T06:18:01.798857Z","times_seen":233088,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":29,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:59.083Z","timestamp":1783877699083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://btc-orendia-v342.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 09 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 315977\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-13T06:18:01.798857Z","times_seen":233088,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":20,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:58.560Z","timestamp":1783877698560,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btc-orendia-v342.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 12 Jul 2026 17:34:58 GMT\r\ndate: Sun, 12 Jul 2026 17:34:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":1405,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7575ffd6532e96f3830de7bc9efc8544","sha1":"348ab893b08a4854b7715fcabf3843a26e15ed9e","sha256":"a10e7cf1445dc2d00971db17adcd20ec035a11211c982265f321e6658501b15b","sha512":"1fa9e882de10d071f440582aa2594802d406d9e2c484e1e6971e6b8ac3f02f81aedbe6e09689412296c7bf0d461bafbf223b09bd00227d84e6c003c23aa8adc6","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlx:vXuM0pR","tlshash":"e0f17792002ba400ab971dc223cf7f3aaece50896085d1b95ffd0dc59ceed66436876d","first_seen":"2025-09-11T07:42:16.456799Z","last_seen":"2026-07-13T05:53:42.511167Z","times_seen":8642,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":35,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:58.568Z","timestamp":1783877698568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://btc-orendia-v342.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btc-orendia-v342.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 17:34:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Tue, 29 Aug 2023 04:36:11 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 221\r\nexpires: Fri, 02 Jul 2027 17:34:58 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tFZPIv0r%2BT8X0gtO4KaFsd0HnALRxa0ZJX1T9P0w8f1z2Yj7no2fiya06FfvkPYJgb701q54yzgQpC5Lalowth4Fd7%2FgAjlc2nukTMhZN%2FP54TGp5mzU04cxNDPEpHi1pDG8W5Qo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a1a1cd402a2f568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87533,"size_decoded":28431,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-07-13T06:09:28.083115Z","times_seen":178475,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":3,"connect":12,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc-orendia-v342.sbs/mailcheck.min.js","fqdn":"btc-orendia-v342.sbs","domain":"btc-orendia-v342.sbs","tld":"sbs"},"ip":{"addr":"104.21.18.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:58.613Z","timestamp":1783877698613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-orendia-v342.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 03:15:49 GMT","end":"Wed, 30 Sep 2026 04:13:07 GMT"},"fingerprint":{"sha1":"E9:35:67:0D:F5:15:27:86:9E:25:4D:36:CB:BB:81:91:23:BB:B0:97","sha256":"67:EA:89:FA:81:93:EA:65:EA:B8:7A:11:F1:06:4D:9B:23:E4:23:2A:C7:3A:17:C4:6C:40:D7:87:98:F9:CE:AB"}}},"request":{"raw":"GET /mailcheck.min.js HTTP/1.1\r\nHost: btc-orendia-v342.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btc-orendia-v342.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 12 Jul 2026 17:34:58 GMT\r\netag: \"1596-655990f945300-gzip\"\r\nlast-modified: Thu, 02 Jul 2026 04:15:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nserver-timing: cfExtPri\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vfxhFJzE0TCP3O0%2F00osDwywytpGapTZd0SHLwsNKFAAeYP3%2BCYTLuz13IaIl0yi1e7to%2FjzTK1Hxc0ZbzC6eWSEGG6CEBSYtk4JER7tcs9s10NEdJ7bdLdSgwYr5gGNejfuda6uIw%3D%3D\"}]}\r\ncf-ray: a1a1cd405aab8be6-OSL\r\ncontent-length: 1736\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5526,"size_decoded":2516,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"c72d3aff0799af980a389646f01980b9","sha1":"8d138483842054b902e95527d2fa394f21238f43","sha256":"8290998b8667077307b8e2f27baec2c9884ddc603e933aa8b92f1d2329898dd3","sha512":"c3c1c66755a6e232d1d25c69e04c845f327ac55217e48d99678482adfe5ae01fbe507b34f54272c846c6b514e23574af9e5ef0f7e6d4e004eae40c9a090abfda","ssdeep":"96:by7AM+X9SEgGuyAMpZiKg6sTQ5Kfa9Qf4Joya2QT9Q9gnd//RlR1jGWK63ujAUm6:bBM+X0EgGb7ponQ5KfYQf4Joya2QpQyi","tlshash":"91b1c966cae72c195913e03c5e9fb40974348c170e58fc94bb5c61881f1c43ea6faadd","first_seen":"2026-01-31T07:10:31.879993Z","last_seen":"2026-07-12T21:36:57.259814Z","times_seen":37,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2071150718-3099e6b28cbd34044ee5dc7d331f3bc2998fe6121f427018a5f6ff7780315afa-d?mw=80\u0026q=85","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1128168202?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-07-12T17:34:59.102Z","timestamp":1783877699102,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 12 Jun 2026 08:20:06 GMT","end":"Mon, 28 Dec 2026 07:20:06 GMT"},"fingerprint":{"sha1":"9D:ED:76:FD:60:04:EF:FE:92:4B:1F:3B:1D:DE:3C:0E:77:9E:BD:98","sha256":"AD:B2:D2:F7:0E:85:41:A3:BE:F2:5B:0D:16:F5:63:31:78:76:24:17:2E:F2:B7:E0:B7:84:A9:2D:AA:4D:5C:2B"}}},"request":{"raw":"GET /video/2071150718-3099e6b28cbd34044ee5dc7d331f3bc2998fe6121f427018a5f6ff7780315afa-d?mw=80\u0026q=85 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"64ce8dde2bcf87d59fa093ad2b9cf81e\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 2023916\r\ndate: Sun, 12 Jul 2026 17:34:59 GMT\r\nx-served-by: cache-dfw-kdfw8210122-DFW, cache-bma-essb1270066-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 3840, 0\r\nx-timer: S1783877699.316708,VS0,VE1\r\nvary: Accept\r\ncontent-length: 1009\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1009,"size_decoded":1587,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"64ce8dde2bcf87d59fa093ad2b9cf81e","sha1":"8a8d278a319049c8262c265cc5e4e9ddf68726fe","sha256":"1d727968add84bb57bb0d9f68f35d569fdf060b8c37bab90c463577aacdda3dc","sha512":"fa4fe5ae24d7d6a2ec7c83283308a2753c34b8cac60d039de38003c88070ba49a236fc1b22bf0e097abcd7e83fd0d38fa1a6d36d34a66609d7865bf70b32a892","ssdeep":"","tlshash":"21115436b37d0da1d84c23b83c3ea3029326eb6a2b2548c5d8762b457c4daf75d11a27","first_seen":"2026-06-30T04:17:22.95282Z","last_seen":"2026-07-12T17:35:34.42196Z","times_seen":15,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":12,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/19.2.16/js/utils.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:59.287Z","timestamp":1783877699287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/19.2.16/js/utils.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btc-orendia-v342.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 17:34:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 48653\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Wed, 31 Jan 2024 15:05:28 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 503421\r\nexpires: Fri, 02 Jul 2027 17:34:59 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8GvCqFriFxfoEJfikLQayvf4mAC1zlhZinjIbuBsf2Bv5Txre1qCpxp9TuuCN7%2B1TuuMqyEmX84F4eGO1sY%2BJ7YCzHycS1IrSl8yoivwpkTJ3ui2Y0Sx2AOsNVcHJu%2F%2FZ8RsoJdy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a1a1cd448e0a568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":257451,"size_decoded":49688,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1454)","md5":"9ca8f21908a2aad7182bad4a10cce478","sha1":"89170581c7099479bc6659554c767298738c4ec5","sha256":"c3e86718e42d1424af1544109482ff4ba7443cfc1349106485a2853ab7040b69","sha512":"57bf31817e106ec9d330eb9f279e245b362919ba6bbaa4355939187062a4fa70cb79567bc8075b9958960fe82c48a4d937a05a2509645b7d81205a78ac0f1cc3","ssdeep":"3072:hHS30w8yAJjFs3OwPss3MwPgmAu9I2xVM8Mq8WXnWcBpUsA56kmLNTg/QKWVk/tA:hHS3qzBwfxVM8Mq88uA","tlshash":"7e44e1ebd63c9737a1d97b35968eb3cd5a8cbca3c848567826c3b54f52788e0706c205","first_seen":"2024-01-30T04:35:53Z","last_seen":"2026-07-12T21:36:57.212497Z","times_seen":247,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipwho.is/?fields=country_code,success","fqdn":"ipwho.is","domain":"ipwho.is","tld":"is"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:35:01.825Z","timestamp":1783877701825,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?fields=country_code,success HTTP/1.1\r\nHost: ipwho.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://btc-orendia-v342.sbs/\r\nOrigin: https://btc-orendia-v342.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T06:17:49.943222Z","times_seen":17206107,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc-orendia-v342.sbs/styles.css","fqdn":"btc-orendia-v342.sbs","domain":"btc-orendia-v342.sbs","tld":"sbs"},"ip":{"addr":"104.21.18.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:58.565Z","timestamp":1783877698565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-orendia-v342.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 03:15:49 GMT","end":"Wed, 30 Sep 2026 04:13:07 GMT"},"fingerprint":{"sha1":"E9:35:67:0D:F5:15:27:86:9E:25:4D:36:CB:BB:81:91:23:BB:B0:97","sha256":"67:EA:89:FA:81:93:EA:65:EA:B8:7A:11:F1:06:4D:9B:23:E4:23:2A:C7:3A:17:C4:6C:40:D7:87:98:F9:CE:AB"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: btc-orendia-v342.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btc-orendia-v342.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 12 Jul 2026 17:34:58 GMT\r\netag: \"117a-655990f945300-gzip\"\r\nlast-modified: Thu, 02 Jul 2026 04:15:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nserver-timing: cfExtPri\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vMgJvehG4fahi%2FDarQmIOE3JWQ%2FLuKYMdyKcjN1OOsOB33JLuqujTH%2FDxshWprjRvNCMq238ccoqPTDywSuN9hweaQcviH3pj6rQGGL9OVPAu3EtHOK4e2bSxyYe%2FB7gxE9GDbiR3w%3D%3D\"}]}\r\ncf-ray: a1a1cd400aa28be6-OSL\r\ncontent-length: 1518\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4474,"size_decoded":2293,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"9bce87d8c0f33f157fd257c8de4fd98f","sha1":"97d8976985c18b7fd6d120ee4783ef08377d909e","sha256":"38ab4fe043838f44160fad58121938aabb496ccc8611ef92bb3c10150d5d2738","sha512":"0e089551aa4ba49166d4f70ebaa1fe6d477dda9d7adeacad8be91addeee9a1a7e01f6f17d1e780d3dc1652e0201f69a1cf1e98760f2515724c5b41eed6c608fb","ssdeep":"96:aQt7dMl+7bNiXkiCdf+O7x0wRLD9Kx1AF/FHCCt7D:lslcNiSZ0wRLDUwF/FhZ","tlshash":"b29112dd5e918c07a4a3520e7de28b16abf7049058098976c7fc72bc17c57a48373bd8","first_seen":"2026-05-15T06:42:28.62759Z","last_seen":"2026-07-12T17:35:34.425448Z","times_seen":15,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/libphonenumber-js/1.10.58/libphonenumber-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:58.573Z","timestamp":1783877698573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/libphonenumber-js/1.10.58/libphonenumber-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://btc-orendia-v342.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btc-orendia-v342.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 17:34:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 35539\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Mon, 11 Mar 2024 23:01:31 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 193345\r\nexpires: Fri, 02 Jul 2027 17:34:58 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BXKciNAdKO41Iy37LyISatS4vPu%2FGHwz%2Fg1QDG4t9QmY3kDyW4XqI8ROKA1aS%2F7fFRi6jjEbTmTO4t3gT%2BlqKqVXqDy2LWWBtuarY4Wbw4qoJnnz%2F%2By4ZB6v6F0pw6ivCZK2VN1N\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a1a1cd402a32568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176085,"size_decoded":36578,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5a9e30cd0effabf851fa50f75156e7a4","sha1":"1fa9a6f88f6223a35e89281567a8fd46584788bf","sha256":"e4396841a7c3b2805e113d3c72d7719158f36bb3d8938c1dbc0c5fc9394b8b57","sha512":"8ff04293b955dc61cf7dcee1d805297be2c99aa0b6cb2a5e84194b6ba40e7a91c1a597dc6f4a919bea3c03c33406a1bb586c0e859a5d3db41d84b6f74c10ce75","ssdeep":"1536:TOe0tNo455wjffgVKKyNyXGgojrxmHMN45YvqWRD6QHKQMWNRVHhK+/1hFddNzTg:TOe03o4PwjUYxYMbi/mzhKyHvDq6N1lQ","tlshash":"f004c9f77540bb7774b13b188e1ad24fab9c9c51dc98a08cdbe3d8da5d61822207db14","first_seen":"2026-01-31T07:10:31.87394Z","last_seen":"2026-07-12T21:36:57.182636Z","times_seen":32,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:59.078Z","timestamp":1783877699078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://btc-orendia-v342.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 09 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 315977\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-13T06:18:01.798857Z","times_seen":233088,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":37,"send":0,"wait":17,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/gb.svg","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:59.111Z","timestamp":1783877699111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 01:26:53 GMT","end":"Sat, 29 Aug 2026 02:26:16 GMT"},"fingerprint":{"sha1":"D2:6E:B0:B6:96:56:08:49:68:3B:CB:E0:E3:66:23:60:CD:73:2B:8D","sha256":"F5:81:41:B3:1E:2C:6F:26:A5:EF:89:3C:3C:84:66:48:2D:2F:E3:EA:E4:EF:C2:ED:58:8E:15:45:FB:B1:55:93"}}},"request":{"raw":"GET /gb.svg HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btc-orendia-v342.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:34:59 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6864014e-229\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npriority: u=5,i\r\nage: 308085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cxpgtKh5%2BMc8a0qR9JcvcYuI1Ty%2FsFpI12%2BGfXp95Sv8JXyweD0jzWnKOkJIZPbwAnuUmB6L7SdR6EZq88Omo7B9UfzO8WDfBfJ%2FDqPWQso2K%2BMQ8Bo%2BS9h%2FR0J0JA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1cd439c2256ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":553,"size_decoded":1115,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0487cd502c5e2dbdee5be26ffa835c9","sha1":"e6c2ff948790e5d9aafd3530e49171628248cf0f","sha256":"42f04826dd7a76e4ecdc9a55fb4a774a26e03a425ca1363628bb1c6f6ea1a87e","sha512":"6df8ddf15b8886dcf672dc1dc7eb7dc54385738425651a76d588c2c7e1253e8af588ded8ad1e1c7fc8e728ca9f46e55d18be4e8e422600ef20e08aa9f7421ae1","ssdeep":"","tlshash":"49f02b1d22286926e22b4354dfbc74b4013f24de2388100cb8443378c51973f79b7aec","first_seen":"2023-07-18T00:24:02Z","last_seen":"2026-07-13T00:45:43.296179Z","times_seen":995,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":2,"connect":16,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:59.346Z","timestamp":1783877699346,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://btc-orendia-v342.sbs/\r\nOrigin: https://btc-orendia-v342.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T06:17:49.943222Z","times_seen":17206107,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1128168202/outro?on_site=0\u0026type=videos","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://player.vimeo.com/video/1128168202?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-07-12T17:34:59.632Z","timestamp":1783877699632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 12:14:02 GMT","end":"Sun, 04 Oct 2026 13:14:00 GMT"},"fingerprint":{"sha1":"02:E7:0D:04:46:55:06:0A:EE:48:48:F0:26:63:DB:71:1C:D2:28:E6","sha256":"62:1E:1B:FE:4C:84:CF:B0:18:67:DC:92:AF:30:AB:93:97:CA:7A:B7:0B:75:4F:13:6F:83:69:AB:3F:98:14:21"}}},"request":{"raw":"GET /video/1128168202/outro?on_site=0\u0026type=videos HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/video/1128168202?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1\r\nCookie: __cf_bm=0_c_eAlRBEF7naHmO6lhiHzIA05Tn56I5d7RvLLo4wA-1783877698.8121324-1.0.1.1-ERH957qTuuSGp_qij0pbJmpOurlyeZ8tFJ31ILGrzIZYvigwCft6rFa3_rP_K7mx1_znt9Ki0oCGnsc_JBvpAYyQu_sfY.W3zC.1W9hg9sfkWowO1VZs41FqbDHUdWnD\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 17:34:59 GMT\r\ncontent-type: application/json\r\ncf-ray: a1a1cd46b8a55684-OSL\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://player.vimeo.com/video/1128168202?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, x-requested-with\r\naccess-control-allow-methods: GET, POST, PUT, OPTIONS\r\naccess-control-max-age: 86400\r\ncontent-security-policy: default-src 'self'; script-src 'self' https://f.vimeocdn.com; style-src 'self' https://f.vimeocdn.com; img-src 'self' https://f.vimeocdn.com https://i.vimeocdn.com; report-uri /_csp\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-6b88cf7fb-bnlpn\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-6b88cf7fb-bnlpn\r\nx-link-match: 108\r\nx-player-backend: g\r\nx-served-by: cache-iad-khef600058-IAD, cache-bma-essb1270035-BMA\r\nx-timer: S1783877700.649847,VS0,VE166\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":730,"size_decoded":1769,"mime_type":"application/json","magic":"JSON text data","md5":"7e6ecccb8b6e489f74730d7c0060d1fd","sha1":"21037760d0013001b8bb1ab52bf6e1f3da2d11a9","sha256":"c4fc5d889184024295d197064644e18662253a426e0f6e22a169eb15b0a099ac","sha512":"e53aea37b346a9de57120505934d9a7fbef03525299a254dc4b895490615df81907621af6616ff716b32a02ed5f30510dbca978592179b291ba932ef4d86ba27","ssdeep":"","tlshash":"2601c0b712d418f6b382a3da5eccb01b5313617a9dc168a959175c0c4aed0d739482a1","first_seen":"2026-07-12T17:35:34.42951Z","last_seen":"2026-07-12T17:35:34.42951Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.country.is/","fqdn":"api.country.is","domain":"country.is","tld":"is"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:35:04.487Z","timestamp":1783877704487,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: api.country.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://btc-orendia-v342.sbs/\r\nOrigin: https://btc-orendia-v342.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T06:17:49.943222Z","times_seen":17206107,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc-orendia-v342.sbs/assets/js/lazyload.min.js","fqdn":"btc-orendia-v342.sbs","domain":"btc-orendia-v342.sbs","tld":"sbs"},"ip":{"addr":"104.21.18.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:58.575Z","timestamp":1783877698575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-orendia-v342.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 03:15:49 GMT","end":"Wed, 30 Sep 2026 04:13:07 GMT"},"fingerprint":{"sha1":"E9:35:67:0D:F5:15:27:86:9E:25:4D:36:CB:BB:81:91:23:BB:B0:97","sha256":"67:EA:89:FA:81:93:EA:65:EA:B8:7A:11:F1:06:4D:9B:23:E4:23:2A:C7:3A:17:C4:6C:40:D7:87:98:F9:CE:AB"}}},"request":{"raw":"GET /assets/js/lazyload.min.js HTTP/1.1\r\nHost: btc-orendia-v342.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btc-orendia-v342.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 12 Jul 2026 17:34:58 GMT\r\netag: \"1d26-655990f945300-gzip\"\r\nlast-modified: Thu, 02 Jul 2026 04:15:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nserver-timing: cfExtPri\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PpdrjBk4QbG8B8voziQttKGaSq8dzsdzRywx%2BTYx0uq1gGRgioxzGkXGMnUpreaL%2Fo82wq26eeeLyIZal6wvA2ShT3NPL9%2BRJX%2FwuyoGkaIDkpMoO0wxmg8%2F5W%2FtMjhiysFCJ0kFdw%3D%3D\"}]}\r\ncf-ray: a1a1cd401aa48be6-OSL\r\ncontent-length: 2816\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7462,"size_decoded":3602,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7462), with no line terminators","md5":"bf5154b6bb0c06f2815b3b2dc01ab4fd","sha1":"fd56231873de2769995b9642a119b1426a41ce5e","sha256":"1632d2af4c7a54f873e4cf415c19d8b9282db268c8fe7d92e159c7c7675e6fdf","sha512":"fa338ce0f5a646d5361bd9cffc67f313dd1a5bcdd8a9dce1f1fa189a226ebdf203a87c772429d7eb232bd693582fac1a51b3b23eae0bc40712b4bc5159026a37","ssdeep":"192:mTP85/2hHrQ7oLXC7JyE/UaiN1pDib7UMFYRfz/9oNIbJuly5c:mTPW/cs4X/WHK1pDCUMFY9/uya","tlshash":"79f1a8535907b03f793b625660dc33153028749bec0e4ce47d685de9a15ae4325b3b79","first_seen":"2025-02-20T08:43:01.683971Z","last_seen":"2026-07-13T05:29:18.477499Z","times_seen":4608,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-orendia-v342.sbs/assets/img/no-flag.svg","fqdn":"btc-orendia-v342.sbs","domain":"btc-orendia-v342.sbs","tld":"sbs"},"ip":{"addr":"104.21.18.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:58.599Z","timestamp":1783877698599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-orendia-v342.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 03:15:49 GMT","end":"Wed, 30 Sep 2026 04:13:07 GMT"},"fingerprint":{"sha1":"E9:35:67:0D:F5:15:27:86:9E:25:4D:36:CB:BB:81:91:23:BB:B0:97","sha256":"67:EA:89:FA:81:93:EA:65:EA:B8:7A:11:F1:06:4D:9B:23:E4:23:2A:C7:3A:17:C4:6C:40:D7:87:98:F9:CE:AB"}}},"request":{"raw":"GET /assets/img/no-flag.svg HTTP/1.1\r\nHost: btc-orendia-v342.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btc-orendia-v342.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-type: image/svg+xml\r\ndate: Sun, 12 Jul 2026 17:34:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ezvodriFLYSuSP029d%2B7J0KITT%2BJVvTKwCntLu4OhTYcE5VQbpcioCGo2ZhHThmmpUlYFK90eS7rkrSokI9ij3lZHt3%2FbH%2B2g038dfu6pXmeg8m6Jisz2tNAGlMzwC1JLEutMROh8w%3D%3D\"}]}\r\nlast-modified: Thu, 02 Jul 2026 04:15:40 GMT\r\nserver: cloudflare\r\nvia: 1.1 Caddy\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"f6-655990f945300\"\r\ncf-ray: a1a1cd403aaa8be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":246,"size_decoded":888,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6413ef7c019b6d39fa7e3264f91b3a09","sha1":"524478394c6f54115ef4d1aa4f55540e39f3c7d3","sha256":"0eb4026020ef856204b8b41e78b3334f88899057004c739285a2c2df119277ec","sha512":"0e9f88ce86b3021929583715b8999faa6b0cd52abb94f9a9becb9d25f014456169e19e971cd7e64ecf4db8602b389dfb1237f5b4dce265feec12ba62ab0e07c6","ssdeep":"","tlshash":"bdd0a71de1095938652903d1dbfc7430447774da564d1c8df440223ba10daebacb7eed","first_seen":"2026-02-13T03:24:00.145026Z","last_seen":"2026-07-12T17:35:34.432786Z","times_seen":218,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-orendia-v342.sbs/assets/img/responsive/black/hero-320.png","fqdn":"btc-orendia-v342.sbs","domain":"btc-orendia-v342.sbs","tld":"sbs"},"ip":{"addr":"104.21.18.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:58.957Z","timestamp":1783877698957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-orendia-v342.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 03:15:49 GMT","end":"Wed, 30 Sep 2026 04:13:07 GMT"},"fingerprint":{"sha1":"E9:35:67:0D:F5:15:27:86:9E:25:4D:36:CB:BB:81:91:23:BB:B0:97","sha256":"67:EA:89:FA:81:93:EA:65:EA:B8:7A:11:F1:06:4D:9B:23:E4:23:2A:C7:3A:17:C4:6C:40:D7:87:98:F9:CE:AB"}}},"request":{"raw":"GET /assets/img/responsive/black/hero-320.png HTTP/1.1\r\nHost: btc-orendia-v342.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btc-orendia-v342.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-type: image/png\r\ndate: Sun, 12 Jul 2026 17:34:59 GMT\r\netag: \"8589-655990f945300\"\r\nlast-modified: Thu, 02 Jul 2026 04:15:40 GMT\r\nserver: cloudflare\r\nvia: 1.1 Caddy\r\nserver-timing: cfExtPri\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xsBBGEdvJrKjGmhZRxDo3w6q1Md5FW4qHdWNlaac5h6XS6HBclEqljriDsuPJKoDx9n2In5WTnukoGuEJwYBNUF%2Bcd6LbGC7ihhQdv7KD7SZfyb%2FOsjQWOylLDCu3pdGJOo9c2jknw%3D%3D\"}]}\r\ncf-ray: a1a1cd427ad28be6-OSL\r\ncontent-length: 34185\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34185,"size_decoded":34903,"mime_type":"image/png","magic":"PNG image data, 320 x 423, 8-bit colormap, non-interlaced","md5":"f0684c24b1b391b9b626103181919794","sha1":"92bed1771bfaec59a861e3690d8d95287826bfca","sha256":"c124c696bef2e26c7c1e3ce93704cf8f3895b83aeb9994b955590888206ff9d9","sha512":"c34bcf3e8772f6106a2fa613e2f2f40357e93d4d5f347a2e1d1d1c1a7c71c3f98c0cf2f984998a1636cb722e92448fa914ee2826671e9208fd3f5bcdcc8e4c6a","ssdeep":"768:D0mE6kqfFaGESEzPjh+ZGyXnnbxPC79L2lg1yNn:DxEdkFaGEPjYZBbA79L2l9n","tlshash":"b7e2f1e42ad1db583c4a35da9fd232d8b0a0f0eab16d6ad8965dc134923ef1545d0f23","first_seen":"2026-05-15T06:42:28.602332Z","last_seen":"2026-07-12T17:35:34.433654Z","times_seen":15,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":117,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.73/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1128168202?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-07-12T17:34:59.090Z","timestamp":1783877699090,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 12 Jun 2026 08:20:06 GMT","end":"Mon, 28 Dec 2026 07:20:06 GMT"},"fingerprint":{"sha1":"9D:ED:76:FD:60:04:EF:FE:92:4B:1F:3B:1D:DE:3C:0E:77:9E:BD:98","sha256":"AD:B2:D2:F7:0E:85:41:A3:BE:F2:5B:0D:16:F5:63:31:78:76:24:17:2E:F2:B7:E0:B7:84:A9:2D:AA:4D:5C:2B"}}},"request":{"raw":"GET /p/4.46.73/js/player.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 12 Jul 2026 17:34:59 GMT\r\nage: 271324\r\nx-served-by: cache-iad-kcgs7200083-IAD, cache-bma-essb1270041-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 9, 42647\r\nx-timer: S1783877699.132187,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 221947\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":903817,"size_decoded":222523,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65146)","md5":"4018db4d86b3189b9ecdd0954edc3101","sha1":"f5be48f56820ffb489f14f11e67c6deb80c13cda","sha256":"20e50d8cd1df0f453723353396cee6b267d7c39005218ffd9d058618b40d1463","sha512":"bf3b70ffe13df3220daaed54a0a92ce51ef34b0ab85e87774383fc022988a15ed8ab8f98fda3534af8afbf780f11ce968ce54dee709d22faf0ea97b7c1bd511a","ssdeep":"12288:lrlpYJWnc41mQdlSqFHJPV+1TSD/YLLAf8YuTMGZF74kNbjZ3dZ83FMK+AnPTSYo:O2c4d7FHpV+1TSD03LDtWyyK","tlshash":"b0156cc672c2f535819645a6e17b0203b33e169db80d864cf03dadcd3a9e545a2bbbf4","first_seen":"2026-07-09T15:12:49.456585Z","last_seen":"2026-07-13T06:20:24.68503Z","times_seen":420,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":9,"receive":22,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.73/css/player.css","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://player.vimeo.com/video/1128168202?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-07-12T17:34:59.095Z","timestamp":1783877699095,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 12 Jun 2026 08:20:06 GMT","end":"Mon, 28 Dec 2026 07:20:06 GMT"},"fingerprint":{"sha1":"9D:ED:76:FD:60:04:EF:FE:92:4B:1F:3B:1D:DE:3C:0E:77:9E:BD:98","sha256":"AD:B2:D2:F7:0E:85:41:A3:BE:F2:5B:0D:16:F5:63:31:78:76:24:17:2E:F2:B7:E0:B7:84:A9:2D:AA:4D:5C:2B"}}},"request":{"raw":"GET /p/4.46.73/css/player.css HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 12 Jul 2026 17:34:59 GMT\r\nage: 271324\r\nx-served-by: cache-iad-kcgs7200156-IAD, cache-bma-essb1270066-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 9, 44618\r\nx-timer: S1783877699.134574,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 24321\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":237168,"size_decoded":24882,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65490)","md5":"358634694e7fe238cd42987bdaea3c45","sha1":"63ee1271e65f05df5d14f546fd5418df13251e41","sha256":"e5c3384087ea07e05e94e5fa6d7e5cd02c6311665cb912e33bb68e8ffa16f1a4","sha512":"a57640db993f17d67d8ed28fcf23cf5f9b3f7279be0d879cac0fb195acaa224e2e4104df69c429a8559572a0690d09a48148f47e77217b90b441c36dea75d84e","ssdeep":"1536:Dd1fPBcFdFgF7FW8RT8RX8X98z98pl98pgv5BencLCZspnq6kUuLdvHIhRGWdHHy:Jv5BOwnq6kUu5DlxczQ","tlshash":"8434a1d526f6552b605e6ee2f4c21848fdbc43dc97226f8af00e79cd85ca1a60dfd206","first_seen":"2026-07-09T15:02:14.775483Z","last_seen":"2026-07-13T06:20:24.685608Z","times_seen":597,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":10,"receive":3,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2071150718-3099e6b28cbd34044ee5dc7d331f3bc2998fe6121f427018a5f6ff7780315afa-d?mw=800\u0026mh=450","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1128168202?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-07-12T17:34:59.442Z","timestamp":1783877699442,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 12 Jun 2026 08:20:06 GMT","end":"Mon, 28 Dec 2026 07:20:06 GMT"},"fingerprint":{"sha1":"9D:ED:76:FD:60:04:EF:FE:92:4B:1F:3B:1D:DE:3C:0E:77:9E:BD:98","sha256":"AD:B2:D2:F7:0E:85:41:A3:BE:F2:5B:0D:16:F5:63:31:78:76:24:17:2E:F2:B7:E0:B7:84:A9:2D:AA:4D:5C:2B"}}},"request":{"raw":"GET /video/2071150718-3099e6b28cbd34044ee5dc7d331f3bc2998fe6121f427018a5f6ff7780315afa-d?mw=800\u0026mh=450 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"c6892be2aa312b60e22682b2928346d9\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 1287261\r\ndate: Sun, 12 Jul 2026 17:34:59 GMT\r\nx-served-by: cache-dfw-ktki8620055-DFW, cache-bma-essb1270066-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 723, 0\r\nx-timer: S1783877699.445828,VS0,VE1\r\nvary: Accept\r\ncontent-length: 12409\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":12409,"size_decoded":12987,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"c6892be2aa312b60e22682b2928346d9","sha1":"38d58a7c29eac44eba0e47a06cdd02e36dc30294","sha256":"29c28207b2d4eb5351e22ac3912d912d5b45374d163a5dc94d4c1c924cf6ca24","sha512":"8ccaf673ab3af107fa521446c07b8df615e0f476f3b4b2a6cddce2d58b9e5f1a75ca333212ffaf124450166e7f5d6edb4e7a71b4be93fd925f201e25e9e31255","ssdeep":"192:+ZfnutSUY9PvQCf5URo4WdbjxbgZkJ2PoHTfoqrTANpSYYc98TGsN+BGY84OHs/:4utyFVfmRo/d5QkZsqXYYcH2+BGD4T/","tlshash":"5242be6aa87c748ee41989fcef621106a44c531aaed1437241a67fc02cd4e38fee14ce","first_seen":"2026-06-21T05:43:50.162037Z","last_seen":"2026-07-12T17:35:34.435371Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get.geojs.io/v1/ip/country.json","fqdn":"get.geojs.io","domain":"geojs.io","tld":"io"},"ip":{"addr":"104.26.1.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:35:04.324Z","timestamp":1783877704324,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geojs.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 09:05:21 GMT","end":"Sun, 13 Sep 2026 10:05:19 GMT"},"fingerprint":{"sha1":"B3:F2:DC:EC:52:71:F9:79:D2:00:8E:C8:AA:A1:86:8A:C1:E3:43:88","sha256":"11:6A:66:F9:3D:73:5D:D0:5E:A8:3D:AE:47:BE:47:E4:A4:52:BA:81:19:C0:F1:09:0A:1E:E0:7D:58:D9:26:39"}}},"request":{"raw":"GET /v1/ip/country.json HTTP/1.1\r\nHost: get.geojs.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://btc-orendia-v342.sbs/\r\nOrigin: https://btc-orendia-v342.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:35:04 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: max-age=0, must-revalidate\r\nlast-modified: Sun, 12 Jul 2026 17:35:04 GMT\r\nx-request-id: 024f059965db553fb690e3dc52035816-ASH\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ngeojs-backend: ash-01\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gzOsBkVG0%2BzacsTp2VSOzviNNlBUJyxoIKPi%2FUWHt8%2Bik8CkqLZRQHmbrOf59HRrs7KMYT6GlyJu5LGyDO1XVLmEGaj3QjF9RjVBC2KUlvIMjGJw4uC5jjIY%2BgR5Zw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a1a1cd64294e5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73,"size_decoded":954,"mime_type":"application/json","magic":"JSON text data","md5":"46a6a0cb45e9fe8a937c1d379f58d2c5","sha1":"055617a08af5aa9a2aba05aa432407288c559367","sha256":"b09f253b6d83ab759c733d9bc894d8ab857dc68b5f1d96f91dbdb764ef816f37","sha512":"9331a0d3aec182cd05fa258fd0bdacca9d1a6d8a1d329d54b2f921435932c0f8d91b1bad9e7e82b118d21f754cecdc340b159d2b1d62a530349d6991b1a5dca5","ssdeep":"","tlshash":"32a0019e24a28b589860d2a5248a61a59586e64292aa6d0692c83b69da402dc6401271","first_seen":"2026-06-07T21:04:41.962532Z","last_seen":"2026-07-13T02:02:47.923456Z","times_seen":153,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":4,"connect":2,"send":0,"wait":124,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc-orendia-v342.sbs/","fqdn":"btc-orendia-v342.sbs","domain":"btc-orendia-v342.sbs","tld":"sbs"},"ip":{"addr":"104.21.18.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T17:34:57.828Z","timestamp":1783877697828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-orendia-v342.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 03:15:49 GMT","end":"Wed, 30 Sep 2026 04:13:07 GMT"},"fingerprint":{"sha1":"E9:35:67:0D:F5:15:27:86:9E:25:4D:36:CB:BB:81:91:23:BB:B0:97","sha256":"67:EA:89:FA:81:93:EA:65:EA:B8:7A:11:F1:06:4D:9B:23:E4:23:2A:C7:3A:17:C4:6C:40:D7:87:98:F9:CE:AB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: btc-orendia-v342.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=0,i\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 12 Jul 2026 17:34:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 02 Jul 2026 04:15:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xPfu1t4npl0iW2Ft8APzjFfg9B01%2BEnVAdQzLMgXd9xYvALQOycVh8%2FULuG2ygaltnDeVtwC223Wc0OU6OExfzPucrt5EmzNmXX92CFr4E5A1axTAMDJNlRYuPFAaTAKGYqKakVUkg%3D%3D\"}]}\r\ncf-ray: a1a1cd3c1a1d8be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"libphonenumber:1.10.58","description":"libphonenumber is a JavaScript library for parsing, formatting, and validating international phone numbers.","website":"https://github.com/google/libphonenumber","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}],"data":{"size":1298573,"size_decoded":887204,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2633)","md5":"95ada59fad1e227dd61360bb776c01da","sha1":"867557ded2b5b3087793354e3b6e2ce7d7db7fe7","sha256":"b8991a32de09215e90dd4ce957bee8791999f0b859a6385bef3bdff4b7251123","sha512":"4aaf7ec1c400d9185e63f96cb69653c0a170432de56bcaf0e9d71bed856aa9ffc6dc5f6ab6ce6ff529a75091963e03d0f3509eac20de655daf994781bc448e5a","ssdeep":"24576:MFBGEx/l3BS2bFH5a7LUfvyZpFJSxkbbGum2+vwcxsx:gMQl3F5GGk/oHk","tlshash":"4d2512336bf57d6e024c41bb32f6bf1069645d8b8a01d0dab3ec15c11fd9c98592ae8b","first_seen":"2026-07-10T11:53:14.19535Z","last_seen":"2026-07-12T17:35:34.439042Z","times_seen":2,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":86,"connect":16,"send":0,"wait":152,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-orendia-v342.sbs/assets/js/scripts.js","fqdn":"btc-orendia-v342.sbs","domain":"btc-orendia-v342.sbs","tld":"sbs"},"ip":{"addr":"104.21.18.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:58.577Z","timestamp":1783877698577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-orendia-v342.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 03:15:49 GMT","end":"Wed, 30 Sep 2026 04:13:07 GMT"},"fingerprint":{"sha1":"E9:35:67:0D:F5:15:27:86:9E:25:4D:36:CB:BB:81:91:23:BB:B0:97","sha256":"67:EA:89:FA:81:93:EA:65:EA:B8:7A:11:F1:06:4D:9B:23:E4:23:2A:C7:3A:17:C4:6C:40:D7:87:98:F9:CE:AB"}}},"request":{"raw":"GET /assets/js/scripts.js HTTP/1.1\r\nHost: btc-orendia-v342.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btc-orendia-v342.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 12 Jul 2026 17:34:58 GMT\r\netag: \"2a00-655990f945300-gzip\"\r\nlast-modified: Thu, 02 Jul 2026 04:15:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nserver-timing: cfExtPri\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aSnyzgA8dCkbeMAUPJdVySG3Ze1oNpamtvn2AxsPRnK%2B4GKySBh1m9Ijv9V%2BuSFmZbvdA2ESjR8MrI596pDcNW77s8q0XKE2rAn0JI8yshSWpB%2Bi10efZNhYtujlM2ft%2BYET1MpF%2BA%3D%3D\"}]}\r\ncf-ray: a1a1cd402aa68be6-OSL\r\ncontent-length: 2906\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10752,"size_decoded":3690,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"d24c8df73a6c0ac30032cd6fc710dd3e","sha1":"7c48a203199f91ab689c9dcebf8fdeb48d515e10","sha256":"3a23b4107d920e9e8340d2ccb9b5ef845f9fc7354aa6ce51b9c53a27ecc4e6fb","sha512":"9d4d4e4febddc7ce3d9a0a4eb4ebcc8e2dd4d271c7bff82de421168f4b3a570b3080764e7ea60a89c0ced461110693c46dd53bd9f0cd7527a7272b5cf888c0bb","ssdeep":"192:5niEmEl5j2AByoQZdgIC5V0pW7atxwGdsy9lWLReT06aJWKxkxFInIeal:57mFAMC09SLIZ","tlshash":"4022737a71f61032823350fe6bdb95197a3420433585de887b9d42086fd2f64abe37e9","first_seen":"2026-05-15T06:42:28.623466Z","last_seen":"2026-07-12T17:35:34.440371Z","times_seen":15,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.73/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1128168202?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-07-12T17:34:59.092Z","timestamp":1783877699092,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 12 Jun 2026 08:20:06 GMT","end":"Mon, 28 Dec 2026 07:20:06 GMT"},"fingerprint":{"sha1":"9D:ED:76:FD:60:04:EF:FE:92:4B:1F:3B:1D:DE:3C:0E:77:9E:BD:98","sha256":"AD:B2:D2:F7:0E:85:41:A3:BE:F2:5B:0D:16:F5:63:31:78:76:24:17:2E:F2:B7:E0:B7:84:A9:2D:AA:4D:5C:2B"}}},"request":{"raw":"GET /p/4.46.73/js/vendor.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://player.vimeo.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 12 Jul 2026 17:34:59 GMT\r\nage: 271324\r\nx-served-by: cache-iad-kcgs7200110-IAD, cache-bma-essb1270041-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 10, 42823\r\nx-timer: S1783877699.146459,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 95495\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":327574,"size_decoded":96071,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65114)","md5":"c8a0ca95a4cca9aa688572a09b41f8b1","sha1":"a566a0174f4e2242feed32b95a80889b4ad2e6dd","sha256":"17ed7f95a06249806a115efb6f3fc440849c06e671ef2666b47b9a5795125d1f","sha512":"a1ccb2a9c4dde039a84a22161c6853a6ef7273ebb57ce6709c540b62760549745d25e55e1f8ab1aa4fa4fec424af650fcb9c2bdd0a8265390995fcc5d1905b43","ssdeep":"6144:6xrQb8XM5U5dAbYwlkc9IERRcRDZx12r/g5lpt:6x/85ucTcPrL7","tlshash":"af64e7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","first_seen":"2026-07-09T15:12:49.459817Z","last_seen":"2026-07-13T06:20:24.681302Z","times_seen":417,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":20,"receive":2,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc-orendia-v342.sbs/assets/img/favicon.ico","fqdn":"btc-orendia-v342.sbs","domain":"btc-orendia-v342.sbs","tld":"sbs"},"ip":{"addr":"104.21.18.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:59.343Z","timestamp":1783877699343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-orendia-v342.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 03:15:49 GMT","end":"Wed, 30 Sep 2026 04:13:07 GMT"},"fingerprint":{"sha1":"E9:35:67:0D:F5:15:27:86:9E:25:4D:36:CB:BB:81:91:23:BB:B0:97","sha256":"67:EA:89:FA:81:93:EA:65:EA:B8:7A:11:F1:06:4D:9B:23:E4:23:2A:C7:3A:17:C4:6C:40:D7:87:98:F9:CE:AB"}}},"request":{"raw":"GET /assets/img/favicon.ico HTTP/1.1\r\nHost: btc-orendia-v342.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btc-orendia-v342.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Sun, 12 Jul 2026 17:34:59 GMT\r\netag: W/\"25be-655990f8510c0\"\r\nlast-modified: Thu, 02 Jul 2026 04:15:39 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q5JpbbRHINCZK3LFV467hXlBelmy9Tq5df9LPEvVjeu0GSbemtsSd%2FaMnLKVnnBswChqpweqiiEWfHwd3k%2FHGJa60vRYicQHuamvatn2Xui%2Fv6nhuPeGlgUS3fQnDPj0%2FVYwWbnLBQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1a1cd458b258be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9662,"size_decoded":4505,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"3dca006a2c71490ef6e6a88ff0626ec0","sha1":"ae68833f5fb5a258d9566339e130ee8bebf8b84e","sha256":"b8be7997a963c27104288d84302bafce411aecafeb372ac1a2069728e610192d","sha512":"ea97701a4546bf81fb11a8da6ada337e5a8fb1474ad10724791dd8beb2f9173e6b36f1d934af509a811dea864741a4c9feca8bcfd81050014ee460cba5b0ba46","ssdeep":"96:9fr3+i2Ctge/U+ZVkKNo3Q7ldsawUNcYlvS:Zr3+VCt/VS3QBPU","tlshash":"b3124c013313d442d1582d79ee29c9f9827dec066fb566877ddb3f2fb1705c68490549","first_seen":"2026-05-15T06:42:28.621452Z","last_seen":"2026-07-12T17:35:34.442221Z","times_seen":15,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/19.2.16/css/intlTelInput.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:58.570Z","timestamp":1783877698570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/19.2.16/css/intlTelInput.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://btc-orendia-v342.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btc-orendia-v342.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 17:34:58 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 2194\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Wed, 31 Jan 2024 15:05:28 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 503672\r\nexpires: Fri, 02 Jul 2027 17:34:58 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EL4WvowqSvM%2BcvyjuGHrq%2FdyMs%2BQX28uy80fKEq85pj9aIzt9eZbLRxkHVDRY9cILrJ5WXKlGqhPUNOB8SDbLzol%2Bik1SW0cNgzreVT8kKG2xePK%2FxmorIlIYBWovaiAy6yHslZT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a1a1cd402a33568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25449,"size_decoded":3216,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d263f9a01690266912791265e4d5b79e","sha1":"9b6aa29b4ac9c141c41c529b9a2f32d4da1b429a","sha256":"8a0a9e2acfa9985df9605a42298a1a5a61ecf03ec550b028192c0073360e8585","sha512":"d5fcef0cfe5eaa16dcd63f07efb91feed069cfe951943faf4ceb97cff039f3f1dc054c87e016897a8fb14b2844d0ca3557c2514a7020e6c989864668f771193b","ssdeep":"384:ZvzcFjFmUkTy/imOgs2J9ZE+xfmYqFD1+vSE8k2eOYcyMR:ZLcFjFmUkTyFCFZ","tlshash":"72b272674bb27914f92be1f1385006b2373b5c03b81e5b3e66e63dbd66810e0a4f3695","first_seen":"2024-01-30T04:35:53Z","last_seen":"2026-07-12T21:36:57.217985Z","times_seen":208,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/toastr.js/2.1.4/toastr.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:58.605Z","timestamp":1783877698605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/toastr.js/2.1.4/toastr.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btc-orendia-v342.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 17:34:58 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 2673\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:17:02 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 14410\r\nexpires: Fri, 02 Jul 2027 17:34:58 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m5oaRRafzrWORQdSmPEfjX63JFMEeZKT4tfVY0fPljDJObC7VzNiWmew7jxpJP9QFs4sLiGyrsjQncHVu82CwVvGEnpeo464RQvpI4tuKGXgz0hWI5KygYKv%2Fe32oVpIEjODwrM7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a1a1cd404a4f568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7575,"size_decoded":3686,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (821)","md5":"6dd68d17e33a0641e9d576fd0e7b2827","sha1":"717f24cc7bd8e272c8c9bc96a877eab392ad7bf8","sha256":"1dedd01012a82ff9cc5e556ca0ced2d82da48c542a4b92fe9a003e17c2e91be5","sha512":"a1ef0ea588c168358fb7656648547ea9839d9d38de57d40f2c951ea99ca9ac3110bd02c9f42e4f085725c7036ebdbfc642042781d097cca48596db870f7782c4","ssdeep":"96:qa7hh4QdQXqrB4KkKX66thIiobmQTWQ78GhJZCjtC8TWP+zLmlDDxTWKG8CzyoSr:N2qrBb66t5zY8sywttMGqVM3","tlshash":"54f166259bd22608bdc5406db51926072b2aa003d6ddecb96ddfa16cefc7bd0dc71344","first_seen":"2023-04-05T06:29:37Z","last_seen":"2026-07-12T21:36:57.190334Z","times_seen":268,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/19.2.16/img/flags.png?1","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:59.325Z","timestamp":1783877699325,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/19.2.16/img/flags.png?1 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/intl-tel-input/19.2.16/css/intlTelInput.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 17:34:59 GMT\r\ncontent-type: image/png; charset=utf-8\r\ncontent-length: 67119\r\nserver: cloudflare\r\npriority: u=6,i\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Wed, 31 Jan 2024 15:05:28 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: REVALIDATED\r\nexpires: Fri, 02 Jul 2027 17:34:59 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FAEdhfmAH%2FEVoFr0dMClFI12flEvEtX5hR0nKjJ8Oi6fkHWNwKoA0kOAylc9Gb4cy050cRg6cJ6dOiDi3EWMp7ei8Rbv77OsGlam5j65m1NBnxYwKw1c4dEoS3QWq8eCyMlIjjdg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a1a1cd44ce39568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67114,"size_decoded":68129,"mime_type":"image/png; charset=utf-8","magic":"PNG image data, 5762 x 15, 8-bit/color RGBA, non-interlaced","md5":"8ec9f8e2915d6bf684abf7629a1b3df0","sha1":"00e80b4f1321a71de50ade6eaea01eb1713c5ce3","sha256":"3af394920236bdcab19b5514b8f67e06b194e29017368d6a9d83d598947f203b","sha512":"d9cf2e5994d7124034803846e681a100fb3a30cac691daff5f49babee0e67b2c19a82b74f9c3e9e5cf1ec8220e69b600609f0d252e21c3df65e96fe1ed45ce3a","ssdeep":"1536:x4cH1n/aGr0WPLH2aunZVsLnkxJuB7TOfr0CMcakwK+q7:x71n/uWPLH+VsjSsB7ifr0NcakwLq7","tlshash":"056301c822d96718411ca2b7c28f3f079e0f1a3e896dd5aa8aa3b16ecdf551c550c51f","first_seen":"2023-08-03T08:00:52Z","last_seen":"2026-07-13T04:22:00.237808Z","times_seen":430,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc-orendia-v342.sbs/assets/css/tailwind.min.css","fqdn":"btc-orendia-v342.sbs","domain":"btc-orendia-v342.sbs","tld":"sbs"},"ip":{"addr":"104.21.18.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:58.564Z","timestamp":1783877698564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-orendia-v342.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 03:15:49 GMT","end":"Wed, 30 Sep 2026 04:13:07 GMT"},"fingerprint":{"sha1":"E9:35:67:0D:F5:15:27:86:9E:25:4D:36:CB:BB:81:91:23:BB:B0:97","sha256":"67:EA:89:FA:81:93:EA:65:EA:B8:7A:11:F1:06:4D:9B:23:E4:23:2A:C7:3A:17:C4:6C:40:D7:87:98:F9:CE:AB"}}},"request":{"raw":"GET /assets/css/tailwind.min.css HTTP/1.1\r\nHost: btc-orendia-v342.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btc-orendia-v342.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 12 Jul 2026 17:34:58 GMT\r\netag: \"13821-655990f8510c0-gzip\"\r\nlast-modified: Thu, 02 Jul 2026 04:15:39 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nserver-timing: cfExtPri\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PV4m6cmxhGmOEGBUn88Y2I1XSvCOmNWdwhaV0TAwFDpaFkK0Zr26j37Kv%2BrhA6jOtKGFLNfbsGrvwCk09DQkwp%2FLwvtk91%2FswBU24%2F23eyzhifwMQkgnYA0AtYkLPYtQniT5YXr9WA%3D%3D\"}]}\r\ncf-ray: a1a1cd400aa18be6-OSL\r\ncontent-length: 11849\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79905,"size_decoded":12626,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"7944754ec2ad494b30768c3f56d41374","sha1":"8b21ed4d563f0c7ddbd9631405d0fa9ed4509fec","sha256":"19fd6ca5ad21c79b863beeb3da11c25302d3969654508c20ca00100d8c4f087a","sha512":"03bdf42295e4eb807e236e3d7c6879d82fec474d59dfb0636f50313c5819fe7818e6c25d7d0049f874a6a52fb388b9e287bedbde13c1f1260dc78b3126ff4250","ssdeep":"1536:ILFsSOfphgPXZ73G1S0wlxcU9edPV1ebPevl2lehqaW7eWGKe9xLvubfRv4QDUsp:mlxcPP8CLWGDLvuFd","tlshash":"c473ed54b1ba95b57c33667d5beea10c7329b003da08ded6bacd21118f883f86dd1b18","first_seen":"2026-05-15T06:42:28.582124Z","last_seen":"2026-07-12T17:35:34.447854Z","times_seen":15,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1128168202?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:58.797Z","timestamp":1783877698797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 12:14:02 GMT","end":"Sun, 04 Oct 2026 13:14:00 GMT"},"fingerprint":{"sha1":"02:E7:0D:04:46:55:06:0A:EE:48:48:F0:26:63:DB:71:1C:D2:28:E6","sha256":"62:1E:1B:FE:4C:84:CF:B0:18:67:DC:92:AF:30:AB:93:97:CA:7A:B7:0B:75:4F:13:6F:83:69:AB:3F:98:14:21"}}},"request":{"raw":"GET /video/1128168202?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1 HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://btc-orendia-v342.sbs/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:34:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: a1a1cd4199b42678-OSL\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=0_c_eAlRBEF7naHmO6lhiHzIA05Tn56I5d7RvLLo4wA-1783877698.8121324-1.0.1.1-ERH957qTuuSGp_qij0pbJmpOurlyeZ8tFJ31ILGrzIZYvigwCft6rFa3_rP_K7mx1_znt9Ki0oCGnsc_JBvpAYyQu_sfY.W3zC.1W9hg9sfkWowO1VZs41FqbDHUdWnD; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Sun, 12 Jul 2026 18:04:59 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nlink: \u003chttps://lensflare.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://arclight.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://i.vimeocdn.com\u003e; rel=preconnect; crossorigin, \u003chttps://f.vimeocdn.com\u003e; rel=preconnect; crossorigin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer, Accept-Encoding\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' resource: https://vimeo.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://browser-intake-datadoghq.com https://src.litix.io https://www.gstatic.com https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.video https://embedder-sdk.wirewax.tv https://*.vimeo.work; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://edge-player5.wirewax.com https://edge-player5.wirewax.video; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm.vhx.com/v2/fairplay/cert https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://browser-intake-datadoghq.com https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.paychex.com https://*.hivestreaming.com https://vimeo.magisto.com https://stage.vimeo.magisto.com https://stage-proxy.vimeo.magisto.com https://interactive.create.vimeo.com https://*.wirewax.com https://*.wirewax.video https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com https://player-telemetry.vimeo.com https://lensflare.vimeo.com https://arclight.vimeo.com https://orion.bendingspoons.com https://pico.bendingspoons.com https://*.vimeo.work; font-src data: https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://branding.cdn.magisto.com https://d2by6sxflmuwyq.cloudfront.net https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://duysrfiajusdh.cloudfront.net https://d263mgllkjh2k2.cloudfront.net https://storage.googleapis.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://studio-media.wirewax.video https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://maps.googleapis.com android-webview-video-poster: https://*.vimeo.work; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://captions.vimeo.com https://captions-eu.vimeo.com; frame-src 'self' https://*; worker-src blob:; report-uri /_csp\r\ncross-origin-resource-policy: cross-origin\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-6b88cf7fb-66nbt\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-6b88cf7fb-66nbt\r\nx-link-match: 105\r\nx-player-backend: g\r\nx-served-by: cache-iad-khef600066-IAD, cache-bma-essb1270044-BMA\r\nx-timer: S1783877699.827115,VS0,VE180\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":22109,"size_decoded":11450,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13765)","md5":"3f02a80795c86671ff28bae16d5498f7","sha1":"925a266dc4302e8539d8c5863b31734fb43cc98a","sha256":"99a54dab94bdb44756e0b3756ac144be138034d4ef7dbdee83878ec7687cf4c1","sha512":"5682c6157af4f6f96143d88947afe9f32dd755be273df450b33017ec55631407e61202b30f82cfab0a2acb0acf231be0076b9d3362875bb4f8843a8b83bd6162","ssdeep":"384:PHjdeGjrvtvXCcvRuvR8kvRyvReR8vR5R0bgUNstTwNVDfufWok6F5WSPqOdM/+m:LnszYOS3lJwNVDfYWCTWSCOdehHFgfEl","tlshash":"13a22b735650ad3b47d59ace0e57ab083476510bee41cad8f4ae8edc2b9ea93350f0d0","first_seen":"2026-07-12T17:35:34.449915Z","last_seen":"2026-07-12T17:35:34.449915Z","times_seen":1,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":207,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc-orendia-v342.sbs/assets/img/favicon.ico","fqdn":"btc-orendia-v342.sbs","domain":"btc-orendia-v342.sbs","tld":"sbs"},"ip":{"addr":"104.21.18.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:59.341Z","timestamp":1783877699341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-orendia-v342.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 03:15:49 GMT","end":"Wed, 30 Sep 2026 04:13:07 GMT"},"fingerprint":{"sha1":"E9:35:67:0D:F5:15:27:86:9E:25:4D:36:CB:BB:81:91:23:BB:B0:97","sha256":"67:EA:89:FA:81:93:EA:65:EA:B8:7A:11:F1:06:4D:9B:23:E4:23:2A:C7:3A:17:C4:6C:40:D7:87:98:F9:CE:AB"}}},"request":{"raw":"GET /assets/img/favicon.ico HTTP/1.1\r\nHost: btc-orendia-v342.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btc-orendia-v342.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Sun, 12 Jul 2026 17:34:59 GMT\r\netag: W/\"25be-655990f8510c0\"\r\nlast-modified: Thu, 02 Jul 2026 04:15:39 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yjb%2BIGxIsuRb4i9qRxyJs8Q%2BrwhlmS%2Fc1%2F9esNp6PFz7Y9d19N%2F5cV70m2lr3hQLzakVo48qFZsrkbNDtEH5q%2FCcPru%2BvhsFRUeRMLCFyv5MWvRyhn1SX0GOsbrUlI0bc5dIJ5gd4A%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1a1cd458b268be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9662,"size_decoded":4518,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"3dca006a2c71490ef6e6a88ff0626ec0","sha1":"ae68833f5fb5a258d9566339e130ee8bebf8b84e","sha256":"b8be7997a963c27104288d84302bafce411aecafeb372ac1a2069728e610192d","sha512":"ea97701a4546bf81fb11a8da6ada337e5a8fb1474ad10724791dd8beb2f9173e6b36f1d934af509a811dea864741a4c9feca8bcfd81050014ee460cba5b0ba46","ssdeep":"96:9fr3+i2Ctge/U+ZVkKNo3Q7ldsawUNcYlvS:Zr3+VCt/VS3QBPU","tlshash":"b3124c013313d442d1582d79ee29c9f9827dec066fb566877ddb3f2fb1705c68490549","first_seen":"2026-05-15T06:42:28.621452Z","last_seen":"2026-07-12T17:35:34.442221Z","times_seen":15,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"btc-orendia-v342.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/19.2.16/js/intlTelInput.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btc-orendia-v342.sbs/","date":"2026-07-12T17:34:58.611Z","timestamp":1783877698611,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/19.2.16/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://btc-orendia-v342.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://btc-orendia-v342.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 17:34:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 9521\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Wed, 31 Jan 2024 15:05:28 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 14212\r\nexpires: Fri, 02 Jul 2027 17:34:58 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ghb%2FXT0p%2BbYSkZkZPtIGklyUPps7NVXNzHxirS9Kf1vVqltluZSA5%2Bow%2FtN1xrb0kce6tCP%2BGRhdJn%2FVPReWbTTez1r8VrEiOT%2BAjuG%2B3oqNQd8EIql%2FNjWgKJJ9RkLI75BK65aT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a1a1cd405a54568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32951,"size_decoded":10564,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27816)","md5":"6eb09b87575184fbf793b6c76b0b3b5a","sha1":"8449eed53e8d70da2dc33f361fdb93275062233a","sha256":"31a653d3eef4fee8a0f663943e6da108d433da1103312e7ecca6fabea7dc7048","sha512":"b50af2b637df4d7184d2178cae587fadff4bf1d3fde94e54ee5ad90c31a8dc397143e3763910374388b5facee882bc5db06ca15f18b8049c2fbc9804a4730a5d","ssdeep":"768:LCg3rXNC+I4SAGFdGcUNm//OjJqLRIyH16v4rEIr32Cq+R:Bk3GcL//LL1TEIrGCZ","tlshash":"58e208edb3516633acad91b164bb12476ebf34005684989c787dcdc81eecec960b6b34","first_seen":"2024-02-27T18:01:35Z","last_seen":"2026-07-12T21:36:57.200569Z","times_seen":83,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}