{"report_id":"3a96b2fe-ed07-4be5-abc3-4cb8ffee3bc8","version":6,"status":"done","tags":[],"date":"2026-02-18T17:48:46Z","url":{"schema":"https","addr":"account-btcc.com/","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"172.67.206.231","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"account-btcc.com/login/","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"title":"1 nova mensagem","dom":{"size":1482,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (446)","md5":"b620d1374c2293f118ec2586ab7d77bb","sha1":"e290d1528241ac43df7e0a54167381803d3a7088","sha256":"c2ee1754803e4dc10e1ee4eeb75784a45529adee1138a57ed2f00a144aeeb1cb","sha512":"e0ae0357bb758a6b5c76464253ee6292933d58e7f161e313f84bb88d4f5d478819e434f1cb4c7e0545aa7f20615cf076707c1bf5045c20f7dcc77ef1d8d1540b","ssdeep":"","tlshash":"1a31e0a3e38f644d3101c06850f1f2f81f3ea459bb014f25bc35b773ab8dac614a2951","dom_hash":"domhash003fb3f0de8126b803198d4c3d676989","first_seen":"2026-02-18T14:48:13.32761Z","last_seen":"2026-02-18T18:36:57.989004Z","times_seen":6,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"account-btcc.com/","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"172.67.206.231","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-25T17:48:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-15T22:17:53.373077Z","alert_count":0,"request_count":4,"received_data":47812,"sent_data":1964,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"account-btcc.com","ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":166,"request_count":83,"received_data":3714701,"sent_data":49537,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"va.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2026-02-16T04:03:54.869077Z","alert_count":0,"request_count":5,"received_data":7520,"sent_data":2610,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-02-16T02:52:01.84846Z","alert_count":0,"request_count":23,"received_data":1211878,"sent_data":10610,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"vsa92.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3165071,"first_seen":"2020-03-11T12:20:42Z","last_seen":"2026-02-16T21:34:17.151289Z","alert_count":0,"request_count":1,"received_data":417,"sent_data":1080,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-15T22:32:42.929582Z","alert_count":0,"request_count":2,"received_data":305958,"sent_data":871,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.btcc.com","ip":{"addr":"172.66.43.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1995-06-02","domain_rank":663337,"first_seen":"2015-09-28T15:41:14Z","last_seen":"2025-11-30T03:26:31.174039Z","alert_count":0,"request_count":2,"received_data":1498,"sent_data":887,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"account-btcc.com/assets/js/sweetalert2@11.js","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aca8f94219cbf6fb606fafa6717e1c7e","sha1":"1c3de1377a7871721f497216e420a8189f0e996e","sha256":"9421d3fcb7ee663469f8f7695a7b3fbcaae74a7dfaec3fe0d44e89bb5f30887d","sha512":"80565644bcff2f4c0cef16c33c1be468bc36337590b20c916c1ab8dbcf797eb27a17e0726fa2a178509a779c1294ffb2dee530b67b41318a3d434a996a9c28c3","ssdeep":"1536:4wQ1lEMPwZm3yNKUxfcBxg1vXP1/pbPmO:ylVwwyNtxfc3gX/pD","tlshash":"7b731a516a04f037b6bb41ae64e0e2047aa99405fcb74854f41cc8904febd4f26b7bba","size":74925,"data":"","first_seen":"2025-02-17T12:56:07.002467Z","last_seen":"2026-07-29T16:52:56.702594Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/config/js/translations.js","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5694ff500476b54285b32fb5506c991","sha1":"bda6d3dea035983bf129171d66c797cbc2fcd241","sha256":"1b5445c4a313bd01f6467d050cbbbdedbf7f8e43a28229e96907c73739c09704","sha512":"8eb623b19ae01a0a2d60878e87462ad160abd1ee32bac3481bf9e3f187b8da988160627aa57f04cfd2bed5c40c087de4af76414526783ca06825cf6cf2315646","ssdeep":"6144:7XdTUYoctihdiyIxoJZQZdCfAudpUSDkyp0opisqnovUsqcbsfORBgKZdJRVAzFn:7XdmccPxI7QhUMQo8RnsNqczUihoF9aG","tlshash":"4a74d7c28acf5a524931954fa6207d64e2890b2be70285fb7c3c931c3ff2635c6765b6","size":353383,"data":"","first_seen":"2026-01-23T22:13:25.531103Z","last_seen":"2026-02-18T19:00:25.526588Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/config/js/controlPage.js","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6f98ddd91673b5d414bbf958cd8376d","sha1":"de7e3b6e2e9782908ae5974a98a3c17b514cc13e","sha256":"c8ed585fa5d4efc8759b546e8a553afb6833070f2c84080237dbcc29b6db01ad","sha512":"3fca9ce955b6e2b3a74871fe099232b33cf0c199bdc14c16d7755b2b35f0349eff0c956e2bd617c0abcb2d7a8854e45f9395cbfcbd4fd454c66e6a5191bc5f64","ssdeep":"192:+3Bk3XrQVy7qdvcGGESASNKmBxhSWmndWTNt17qHIaAUrxM3oidYgFi26YwTqpp0:nNKm8memRT2ye0K1","tlshash":"c9825c443aa977ba14740a1ee9500426c4095e426d019e8ebb3cbfcc7fe58997dfe9e0","size":18947,"data":"","first_seen":"2026-01-22T01:55:34.554158Z","last_seen":"2026-02-18T19:00:25.497434Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/exchange/index.php","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d6f9a85637f68ce7568146c744420d48","sha1":"a33016fd4e7291671a0f9291827f3cd312151c96","sha256":"db16db0eb578b45e34a36d3ea23b55bf23fc2494634c5b126f1f3b7edf0dc990","sha512":"ff1a40d2a48e412b0ddf22bee633b9dad9eb67d31be1438d8e384cbe656eb1d4bb2e0546d7109a1d0a10d6031d2c974beb89a403a7fd3a044fb140b61a11d80e","ssdeep":"","tlshash":"0c119b7a82b42c34b913e0d022a903d0b860b05bb8068c653a5ce7d82fb7c4206f1b8f","size":1018,"data":"","first_seen":"2026-02-18T17:45:32.59235Z","last_seen":"2026-02-18T17:52:15.54033Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/exchange/index.php?username=\u0026password=","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d6f9a85637f68ce7568146c744420d48","sha1":"a33016fd4e7291671a0f9291827f3cd312151c96","sha256":"db16db0eb578b45e34a36d3ea23b55bf23fc2494634c5b126f1f3b7edf0dc990","sha512":"ff1a40d2a48e412b0ddf22bee633b9dad9eb67d31be1438d8e384cbe656eb1d4bb2e0546d7109a1d0a10d6031d2c974beb89a403a7fd3a044fb140b61a11d80e","ssdeep":"","tlshash":"0c119b7a82b42c34b913e0d022a903d0b860b05bb8068c653a5ce7d82fb7c4206f1b8f","size":1018,"data":"","first_seen":"2026-02-18T17:45:32.59235Z","last_seen":"2026-02-18T17:52:15.54033Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/exchange/index.php?username=\u0026password=","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f670e7c9e08294bfadeaace7aee6f279","sha1":"39d57b06c74b81fd053249b441a174c96aa81f43","sha256":"1f8a0683ecce51b666ccd65a7593256f4aa6e63d423201678361c75e73a05e53","sha512":"8fd1deb4ca9cdfaaa9c4fc6f65193726afa7ae459bc834c33b41497a04b50ebdba60196080e65da436831c8b9406dd4639085a588774a2b19aef930b63c02dba","ssdeep":"","tlshash":"a5f0a01832b0243484fb992ee2cb07c9bb760087404489303cdca1090f70e9125f0eca","size":456,"data":"","first_seen":"2026-02-18T17:45:32.594247Z","last_seen":"2026-02-18T17:52:15.540956Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4efbdf7bf3a1b8ff342a440a4767523","sha1":"f09d00567456ad9c3e4bcc85271e16d0e1943045","sha256":"22b87fa74d116767cc95e7df30fcd930f5303db60a7f4aafba93edaa5b236c20","sha512":"34b52ef8a8a4614a3332f51fca4503c418a0602dcc39640fb6c89ca3251abfe133e20666482c7bebd3324e4e042807a72808a0750685d53e6e76878e8da2ade5","ssdeep":"","tlshash":"54f0616f1d6b7930f717916707bbd50430b3205b9646e411398dd8450f1cd58086ae79","size":482,"data":"","first_seen":"2026-02-18T17:45:32.603259Z","last_seen":"2026-02-18T18:36:58.05452Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/config/js/statusUser.js","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4eea9a85d3b04c9da41465ed9e3021b2","sha1":"c8abf2a12d9239fa6224dc6ca7e2ad505af88049","sha256":"4d7783b74b3cad0b6e43a848c234d9abeccbf63d1200401375f30b37b5019f75","sha512":"92c5a9a259e394143d58fe22ab63a1a8e120a74781e65f260e80084241f15402f9cb8db3e5f6dd6385b9fe4572c8ee54b402fb2f1ed99eb19cce3353cba40af1","ssdeep":"","tlshash":"665144ca541a21358cb2737a6b5b9505ff0601333b024bb5bf9c56c01fb2466866ef9c","size":2954,"data":"","first_seen":"2026-01-22T01:55:34.528893Z","last_seen":"2026-02-18T19:00:25.484678Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/695de32b4cb0f81981e8b018/1jfmeja44","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3ea92402df5edb0d07c5e650ae04bb5","sha1":"cfe742897a524c86a5eab3ab38f2acc0c05d90e4","sha256":"b7013e71519618886db60d49b2e4c6e5f1a3093aaca7938efd94b02432cc6a41","sha512":"7f8723b9c71b8d50fe7db727b7e17651430d97a6ac628d7794be6c2fd4f4499a04226584c244904e7540c49cdd21a3f36cdd667b53f3b19b6e0d82eb64c78d0a","ssdeep":"","tlshash":"ad4137d26b8f1892532c20d90dbff90f34b370e6c6ec5892472804017759a6d26cee38","size":2123,"data":"","first_seen":"2026-02-18T17:45:32.50523Z","last_seen":"2026-02-18T18:36:58.035635Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/exchange/index.php","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f670e7c9e08294bfadeaace7aee6f279","sha1":"39d57b06c74b81fd053249b441a174c96aa81f43","sha256":"1f8a0683ecce51b666ccd65a7593256f4aa6e63d423201678361c75e73a05e53","sha512":"8fd1deb4ca9cdfaaa9c4fc6f65193726afa7ae459bc834c33b41497a04b50ebdba60196080e65da436831c8b9406dd4639085a588774a2b19aef930b63c02dba","ssdeep":"","tlshash":"a5f0a01832b0243484fb992ee2cb07c9bb760087404489303cdca1090f70e9125f0eca","size":456,"data":"","first_seen":"2026-02-18T17:45:32.594247Z","last_seen":"2026-02-18T17:52:15.540956Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","size":121,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-07T13:50:37.9924Z","times_seen":92886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","size":151,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-07T13:50:37.986386Z","times_seen":92916,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/exchange/index.php?username=\u0026password=","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe54c30877f6cb7794a997b18e6a3a07","sha1":"822cc8af5c1a83bf91ed60f26030d40292e55c7a","sha256":"48ae098893d9420c05e92ccd4e3315c5191cd0b18fb4ca1353e08cdeab0787e3","sha512":"a2411a5f1c184bd074d5543bf369b03f77776913f8a3b152e5641d0d1143d6903816369ce12a1fdb6eca83f58971045a2989a2401799a30da5a197b8cad95669","ssdeep":"","tlshash":"b3610d1892f1463489b7a1af7393474a2e1461037a44ca8c77add7805f93cd1d8f76ec","size":3247,"data":"","first_seen":"2026-02-18T17:45:32.595797Z","last_seen":"2026-02-18T17:52:15.54158Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/exchange/index.php?username=\u0026password=","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"97ffd686d89620272e2bad8be4b0d1b3","sha1":"b0834effc1ede1b7bd157da5703abcc1aeee58a0","sha256":"30ccec67c01fe18717a50ac32a86f6929cb1af41962213bd841dabba29cad6f5","sha512":"126b4aab39c68f13e797e3d721b3c50edb383620bb540f2c02bfdc18840e830e61b1487229d3480fb06f9c0bebc3a7eecdaeb1ba7a203c4999bb8f370d53b761","ssdeep":"","tlshash":"a2214b086d7218b4a07368ba13df52907d2c2087b4429aa47feddf451f43d91b5a33ca","size":1227,"data":"","first_seen":"2026-02-18T17:45:32.597391Z","last_seen":"2026-02-18T17:52:15.542157Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/config/js/qrcode.min.js","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","size":19927,"data":"","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-08-07T12:54:37.561124Z","times_seen":66138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/config/js/functions.js","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"75df9763a99addb648f604deee02940c","sha1":"7d16711851ecdbbde541b2de44e7bb8c00d21a33","sha256":"1b29fd3cbcab809fc140733d62bb867fd1a22f4416acb799a75e154f327d84e4","sha512":"a71328bd9fa3289bdff417e436c57a87dd8e1d75da6291ce272b07ce76f2876a3ffe7af8cfdabc362723d88103f6cb7e65dd21db5048dd9e4e71fb1bb7007655","ssdeep":"768:6xAcyT/l55Pbp6AW731TLsd6rjBI96klDwFo:6xAcw/l5Z9LGVs4PBI96uSo","tlshash":"ffa3b46421a506768473c7b6b7b26619fe194253d7028299bbbc868b4ff3c50ce43ed8","size":106873,"data":"","first_seen":"2026-02-18T17:45:32.573113Z","last_seen":"2026-02-18T17:52:15.520116Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/exchange/index.php","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe54c30877f6cb7794a997b18e6a3a07","sha1":"822cc8af5c1a83bf91ed60f26030d40292e55c7a","sha256":"48ae098893d9420c05e92ccd4e3315c5191cd0b18fb4ca1353e08cdeab0787e3","sha512":"a2411a5f1c184bd074d5543bf369b03f77776913f8a3b152e5641d0d1143d6903816369ce12a1fdb6eca83f58971045a2989a2401799a30da5a197b8cad95669","ssdeep":"","tlshash":"b3610d1892f1463489b7a1af7393474a2e1461037a44ca8c77add7805f93cd1d8f76ec","size":3247,"data":"","first_seen":"2026-02-18T17:45:32.595797Z","last_seen":"2026-02-18T17:52:15.54158Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3caf120f8a6ffa0907cb67ee74236137","sha1":"004433ba88e26f0a1532dc154d8d56fff80a30ad","sha256":"f67399e89b4d48f7232f6247c3114a42392f4f9acc5983f88f33eb59af8d1c54","sha512":"1dda98136bbff62bd6678ba2002b211458858c411152f63f953adfa86f6c6af38f4b34301a5ca27c5ed9daf487c28d0696e7812a7435e4b4e20713479e8b5e43","ssdeep":"","tlshash":"9541a3d933e4f9a6834328a1043fa026b6353836497be8c0531dd4f5bc78c45811afb2","size":2306,"data":"","first_seen":"2026-02-18T09:54:55.754126Z","last_seen":"2026-02-19T02:19:26.89901Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2db7120711b243479906d92103a92b5a","sha1":"2aabb27600631801b44f12fe3b75b4e8f2e5166e","sha256":"cf58bd8379a510ab4ab4f48b061f7ba9219e0b9056d885503dc2c97757d85d05","sha512":"dde667091369cf9fe7122a609b7213a8e45244d119eb579e5a73d1079da80ffd1c92c2f35baa9e27de41342eff73db81b1f7ab822b49e7655f5fa20341d348f9","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCOGN//h6LiJq:SzP2DkSLi8","tlshash":"50822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","size":18392,"data":"","first_seen":"2026-02-18T09:54:55.821819Z","last_seen":"2026-02-19T02:17:55.702126Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"16da80b3ffe54311216593e613e4a685","sha1":"e245dc04a81bcba7d4634a74f1cb22c81166e3dc","sha256":"ee57d23376ab3f56e9ddde0904514dbfaaccad43f47a5d73a2d65e4dfbba3f75","sha512":"6f5fb5dc16e934f2c7a1de63eb82e15baff762720afc3210a648f127d5898c64130677dc831d36036cab4b4e1e52783b53f4892d8462a35ba66752f9352c9c5e","ssdeep":"96:zNC9Hqt7pEma7hY/rcKtJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYrLRIvgx43nVY","tlshash":"28b1859af247b456c156225150ef3b1df33a281ca61ccdc4b66565f218784cba077f39","size":5261,"data":"","first_seen":"2026-02-18T09:54:55.789539Z","last_seen":"2026-02-19T02:17:55.609231Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bb7aac0cac89a90304af1c72eb4f50d","sha1":"729f6f8ca5787d89743b0ed7eb27fd76406bf985","sha256":"f5c06455e539dcd889f7f05d709b5adc76c444099fe57f431365af2fc57e803b","sha512":"ed26bf873a3c5b2e48d8b3c955240a46d8f7d7f3c635ab138179b999dbadc77802285879cb1a833f703059762c346066090a9a740bfe881f56d6d95f2dca7f30","ssdeep":"1536:Q/drlyiQh7fh7RqgwkMTyDUV6HeAIDgI9IKQ/d2ffWifiIzQFBSob5/ove:Q/drlyogMVc6FIKV+ZLBSob5l","tlshash":"59546c7a87606deeea94d02d86db374af58c3c0453ed1266b66482cb27f543a33487dc","size":302554,"data":"","first_seen":"2023-04-05T07:49:38Z","last_seen":"2026-08-07T14:25:25.195564Z","times_seen":51385,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets/js/general.js","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"968bd279ea28a3f0c551767db373de38","sha1":"695e83c3c510438d00496a31b5127762c8b9b589","sha256":"f3901dd10c3400d65452e3b4c2d956f050855b9d02b4f923c65564d1b6e7ea7d","sha512":"ac5f0f5100daa1adf56bfa5ed279d3efd4b7d4b6cd04b1751f4f11c7f790297d55982ecdc91491355ab8cf72f836e6862e2b89b790544e8088bf266b00e72bcb","ssdeep":"","tlshash":"71f0e94e025593368a7243a25e518df9dc901363998254223dbdd3884fb5322af74f85","size":581,"data":"","first_seen":"2026-01-22T01:55:34.550071Z","last_seen":"2026-02-18T19:00:25.479703Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/config/js/translator.js","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02c634985671b3da733868fa2ca59516","sha1":"4dfd6aaf1a168016f7c80bfa40d435fde7f02f16","sha256":"59d440630bdfbf66565f706d66e889dbe96b3ac5af39ceef21d945339a361b6f","sha512":"ac569359d75e85e0d540008eb16fb1ebfe9847f69461e78aba49098b303929b63fa81920451f4748acb442cefe12e295852c0ebcb74080ec6af506f6fefa3755","ssdeep":"","tlshash":"9061cf4825636201a131737d6e869909f61b080b21353f9d7f4dd9916ff243493bafa8","size":3427,"data":"","first_seen":"2026-01-22T01:55:34.550931Z","last_seen":"2026-02-18T19:00:25.499682Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/exchange/index.php","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"97ffd686d89620272e2bad8be4b0d1b3","sha1":"b0834effc1ede1b7bd157da5703abcc1aeee58a0","sha256":"30ccec67c01fe18717a50ac32a86f6929cb1af41962213bd841dabba29cad6f5","sha512":"126b4aab39c68f13e797e3d721b3c50edb383620bb540f2c02bfdc18840e830e61b1487229d3480fb06f9c0bebc3a7eecdaeb1ba7a203c4999bb8f370d53b761","ssdeep":"","tlshash":"a2214b086d7218b4a07368ba13df52907d2c2087b4429aa47feddf451f43d91b5a33ca","size":1227,"data":"","first_seen":"2026-02-18T17:45:32.597391Z","last_seen":"2026-02-18T17:52:15.542157Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac72d89379507f6b06d84ccfd2d39b67","sha1":"e7014927ac023a3ad7bae95299f87833de9f227b","sha256":"2571059c4df4796fbb1bb18ec53903812b113e2cb88873e0d8bc800a95e33075","sha512":"da5b5c4d5383a12f65c75fe8574f9dc1472f652b2920cde5ab3092cb330d741f283aeb6db722dfc1dff8e302b3ed7f385cc4992b06eb53f8b39cf33a3fce569d","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fOicErQYIMPdLMz9o115:kyWFW1W+fM4fikBLMz9215","tlshash":"b334c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","size":240941,"data":"","first_seen":"2026-02-18T09:54:55.781762Z","last_seen":"2026-02-19T02:19:26.971381Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","size":5504,"data":"","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-07T14:25:25.188162Z","times_seen":41985,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32bb78eaac9071d3dff248a90ed2442c","sha1":"703ef8547ac5f72c14dce7a5556fad1c4b286ab3","sha256":"b0bbcca7f0bb2100a57d659d36fe28c95d520c13ef4724b56fb0ad84ce2dcdae","sha512":"7e21bb6d7980f421ba2f6f6c4bde41126daddcb0250a2c56168b6c34bb620c67cf954153a3c78fc1df096a40bd803da5dee59fae6bb975d92fe80bb5ee138df2","ssdeep":"1536:BigMTWFu196wufn32jGDdgaOFUWbaGlDluK1MFYGdZPkx3u4V5pfYMrlSf:4nmuTilGhmkx3u4V5pPrlSf","tlshash":"1da3096ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","size":106023,"data":"","first_seen":"2026-02-18T09:54:55.823034Z","last_seen":"2026-02-19T02:17:55.619098Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/exchange/index.php","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1af9b83ba05a8b8094c8f11ae7769904","sha1":"5f1916f50cecc2a902546b11b5dbe5c2f329ce1e","sha256":"023900bd2b228fd071e9bc3d535fd833284509b73696751b9e74317ca837cae5","sha512":"91a417662528606e72e71c7a7cd3a0bbdfec32362714151f8df3c00012df18249837f7140aacc38d02d8e4bbd077a3d81baf7e2c6a66a9556eee0778ec487de5","ssdeep":"","tlshash":"d07175bb40b21b3455274f7253cf61022066a00b3985c8c4bf6f4b550f8dd766a7477e","size":3490,"data":"","first_seen":"2026-02-18T17:45:32.598934Z","last_seen":"2026-02-18T17:52:15.543474Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/exchange/index.php","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"900829edc0b7d00b265ebb1c03aea940","sha1":"75a4c2d3ddb291c210550221b9d42f572c1900c7","sha256":"262fde97fd0a355f5d8c7aac9f85fa57a437b4b55af28d5a435e38a6bc44531c","sha512":"963e269dc8288123311c30e0554274f89f615bc57d7563503394780914976f1cead24b2e50d0a2c13e24f7a666214925c8c49472829d9608b36a1b6348c0e254","ssdeep":"","tlshash":"6d01686c27f70233539ad4ad83fb074a7731605fa2508a5d3a3e91924fd9984f9a22c8","size":789,"data":"","first_seen":"2026-02-18T17:45:32.606489Z","last_seen":"2026-02-18T17:52:15.544098Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecc9e5cf090bf5602a01763e2895acad","sha1":"1d07eaeecb0a31f0d95363694e803282518f81a3","sha256":"1cb6c04d780fb838f64fe8bad72bbc16ff24e2466f9ba3123471321f8342cc0a","sha512":"9ace38dcdfd09222ce1f2536d8e4acc781b0055d6ae35486922b86baa540befc98bd9a5bc67bb00b0ef09b9da16ec97b1fe3b2b676b1403cde8eb2c13981870b","ssdeep":"192:0CFny7CpmxwbZlR1cwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mChZlRNr40v0GF/LvV4hwsR","tlshash":"073295b7e0a1107ea316871c506fa610f61f6c8ab2161da6b67ab46f900ddcfc065f7c","size":10938,"data":"","first_seen":"2025-11-28T06:07:28.918411Z","last_seen":"2026-06-15T21:26:04.407385Z","times_seen":26443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets/js/themeclient.js","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f60b11d2e0f782c247767d342e60f122","sha1":"342135508969158d783cf61cf01479f10a9f50d0","sha256":"f6b1cfa9742d31bcc38119a13cd4079487a43471c83dc0b918f3bc40f8466767","sha512":"16dee14c5a840a869941ccf9ee53f7e19cbec313a5615b5164e78ee1d4d444ed3f871083869e2d315c5c266cb7a5f2da3a7616348078151e6a189079415a1cfc","ssdeep":"","tlshash":"38417d5a3053121ac47737fe96834c4cf72b79b765916708bd0d86041fb25924972fed","size":2186,"data":"","first_seen":"2026-01-22T01:55:34.551882Z","last_seen":"2026-02-18T19:00:25.50934Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets/js/flowbite_new.min.js","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce04bdc941d9977ca8f769ccc45adc30","sha1":"6ec7b31b452bc211d7a11c7a3fd6a753edcf24c2","sha256":"ec6607782dfabb7c603c3e18f6b1a0c378aea42f51b6d920746d8daaf9296d29","sha512":"7997ddd8069ac8f126d7f95b28757d2e5442f1c70339520816916d1eb5410bbbb169a6deffbac22688b443d4f72b51f5a00c0cac18b5e6e056f986101cf110be","ssdeep":"1536:hCY/R2t4HK9iB1EohMYokrvs1mNo48PhmCFp//n1p3bfw2T6EFKDrp06X1mlcEIr:hTGb1qBohHpjI30yJF","tlshash":"9fd3f889b790793306db90f0413b160b633ba469d486845c7629d8ee197cc8e71b7fbe","size":134181,"data":"","first_seen":"2025-12-02T01:11:34.748249Z","last_seen":"2026-07-30T22:15:01.330921Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","size":82913,"data":"","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-07T14:15:53.946879Z","times_seen":66388,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/exchange/index.php?username=\u0026password=","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1af9b83ba05a8b8094c8f11ae7769904","sha1":"5f1916f50cecc2a902546b11b5dbe5c2f329ce1e","sha256":"023900bd2b228fd071e9bc3d535fd833284509b73696751b9e74317ca837cae5","sha512":"91a417662528606e72e71c7a7cd3a0bbdfec32362714151f8df3c00012df18249837f7140aacc38d02d8e4bbd077a3d81baf7e2c6a66a9556eee0778ec487de5","ssdeep":"","tlshash":"d07175bb40b21b3455274f7253cf61022066a00b3985c8c4bf6f4b550f8dd766a7477e","size":3490,"data":"","first_seen":"2026-02-18T17:45:32.598934Z","last_seen":"2026-02-18T17:52:15.543474Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/exchange/index.php?username=\u0026password=","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"900829edc0b7d00b265ebb1c03aea940","sha1":"75a4c2d3ddb291c210550221b9d42f572c1900c7","sha256":"262fde97fd0a355f5d8c7aac9f85fa57a437b4b55af28d5a435e38a6bc44531c","sha512":"963e269dc8288123311c30e0554274f89f615bc57d7563503394780914976f1cead24b2e50d0a2c13e24f7a666214925c8c49472829d9608b36a1b6348c0e254","ssdeep":"","tlshash":"6d01686c27f70233539ad4ad83fb074a7731605fa2508a5d3a3e91924fd9984f9a22c8","size":789,"data":"","first_seen":"2026-02-18T17:45:32.606489Z","last_seen":"2026-02-18T17:52:15.544098Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/exchange/index.php?username=\u0026password=","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"10a8e1af91fe5998c7025e9fd6ac7830","sha1":"24ccfc1f3a792ee7e1364a095da9c423830d0742","sha256":"e19517ec47fd16790bea83f16ca68b146f3d4ba9ed2be0831c2b5fd9cd1f0ab3","sha512":"79251394d5e856e659071cbb69c8b52161a8aca712292861864fa8dee9d5a534bc61ee2325e661a9b29484d2180c9e52aac4037419a5571f15778a5710a0b342","ssdeep":"","tlshash":"2711cb1922b31e72386b6285bfb7ab493e23010b75c0dd847f6d0a042fc1d46b4e0be1","size":1013,"data":"","first_seen":"2026-02-18T17:45:32.608316Z","last_seen":"2026-02-18T17:52:15.546674Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","size":1000,"data":"","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-07T14:15:53.948604Z","times_seen":49582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-chunk-2d0aef27.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b00225fd03c07e8d607099869140cd7","sha1":"302f23bfcd6045cad5017d9d97eed74a1e1ea199","sha256":"bb6e98f7da80a04797b6ec965370831385751ac35dd4e762afdf10ff02a02143","sha512":"2354995cd29ff820e2d08971678dbdeccbba3e701168ed19891a7fd99b4b87fe9448a6cdff05762af3a676713614750eba13ad49d50f904280aaaf13f2ac0ca6","ssdeep":"192:0H9Ma5RIU9HkKRU0Ve20lqXvtsTBkpfCNmeAhbKqxK4ILZvUZaUZSsgM:K5b9HkS316xAFKpLZEh","tlshash":"9132a3c6e8c7b9564227160451efe128f73f2a94771adc18f0a895f34a948c3507bfba","size":11888,"data":"","first_seen":"2026-02-18T09:54:55.785941Z","last_seen":"2026-02-19T02:17:55.696897Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/exchange/index.php","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"10a8e1af91fe5998c7025e9fd6ac7830","sha1":"24ccfc1f3a792ee7e1364a095da9c423830d0742","sha256":"e19517ec47fd16790bea83f16ca68b146f3d4ba9ed2be0831c2b5fd9cd1f0ab3","sha512":"79251394d5e856e659071cbb69c8b52161a8aca712292861864fa8dee9d5a534bc61ee2325e661a9b29484d2180c9e52aac4037419a5571f15778a5710a0b342","ssdeep":"","tlshash":"2711cb1922b31e72386b6285bfb7ab493e23010b75c0dd847f6d0a042fc1d46b4e0be1","size":1013,"data":"","first_seen":"2026-02-18T17:45:32.608316Z","last_seen":"2026-02-18T17:52:15.546674Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44b9fc99078bcfe4490fb15034bc1e15","sha1":"ce24732180436c239c9f7b652793636862abc0cc","sha256":"b3b902e256ff96b3cfb1ce9f97156c7c2ed18a316f2db4328df5ecbffdebe765","sha512":"6dd243ad3d514c4c174dfccc05d61de84ef7225c808b06be721ac89087cff49b3f643654a6739273bf437f20208ff2b0031552ac2f1a9c81b549cb6fad720ed8","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZm+odXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4sJ5Ar6kOx/","tlshash":"ea644bc8f183b0b606e6a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","size":324110,"data":"","first_seen":"2025-12-29T13:02:03.642071Z","last_seen":"2026-06-13T18:18:43.524898Z","times_seen":16307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09a6b2a4fc1400ec37c1115e6aa1670f","sha1":"d703fbc76276de75b56fad5c189fb663146d116b","sha256":"59147272a66366aa00b1f3771a23f360ee90c3bcac88ad31f59d29562b2d3c28","sha512":"2af2fecb20cad761430bd295a3e8846ad7404f20c9610dc8e20010e4d941b9067a192e700a964b92fccd2289ae4a10eb0e2ae81db8323b49bc3c0543dfe0e457","ssdeep":"768:Vlxfu8+HYUmI+rTRWf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK43:xfurowf20UJWfO+Et7GZrC90k","tlshash":"a533c8c9b2d6f4258763632130af3006f27a4964a81dd155f334d9f6b9ece48a227f2d","size":53530,"data":"","first_seen":"2025-11-13T12:40:48.539817Z","last_seen":"2026-06-15T21:26:04.427415Z","times_seen":34009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09eb16f53b45faa5c349645e82f9b4aa","sha1":"e3265071a8833ca14ae93c1c49cc196518b7a4ba","sha256":"5ef2c831d152b3a35157daf51676f0daee8bfa0dbf51978449647ac530457d3a","sha512":"6965366a9af259e44abb20d7bdb5aaf8d0f15f8540e65e88cabc3c2536a67c02ad2e79ca7a2eb64e01a6f0f2ec1e1f0801d7c77c7e5e3a0aa7cbabee991a9d8c","ssdeep":"384:UJw/U5YK8Hx9KJvThWazJbUZDkM0kWEYPk6F+UtKM5eH:6+9KJvThWazJbUZDkM0kWEYPk6F+92eH","tlshash":"2452c6a7b2a4782d42379712308f3205f33b7d45b215da19f36edcea4aa84c16056f3e","size":14213,"data":"","first_seen":"2026-02-18T09:54:55.771679Z","last_seen":"2026-02-19T02:17:55.608687Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e66e69481c12150afbebfb62e9e2bd6a","sha1":"424eff745298602ba2162c057a9606bd89d2735a","sha256":"a3be8894cb222071fa92702c246f97192518839aeed6ce91a1b22d0ea967634f","sha512":"21a42bff852a475d1a3f0a5434553c13dc1737d66949fb98aafbc09bb90d8ec137ca1963afb8a87d28990241104ec0f6b86c172840b0b28c16c0050bcb2fd200","ssdeep":"","tlshash":"6a1147ab47ba73358c73208f97cb51087a109053350699753bfd91061f599182ba2b9c","size":918,"data":"","first_seen":"2026-01-22T01:55:34.574507Z","last_seen":"2026-02-18T19:00:25.528139Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Shantell+Sans:ital,wght@0,300..800;1,300..800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:21.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Shantell+Sans:ital,wght@0,300..800;1,300..800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 18 Feb 2026 17:48:21 GMT\r\ndate: Wed, 18 Feb 2026 17:48:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4518,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ad47c0598875b8455e8e8b93fe652111","sha1":"8450caf652032000a7f764654b603557d3b216b2","sha256":"8b922276a8253d45eba19cacf16b5706f2d5d1e3b8e3a82bbe9355407fd36631","sha512":"ca20624e9801532c267f4592b07a511ee6319c73f96587b330f7cb7b21390f1a6e703603c6f94c69fdef3cd2cf625b0288dda52686ceab0c1f5f62cd6fe622c3","ssdeep":"96:6YgdaaKYgdatFZO7Ygda6YgdapJc+uHYgdaxN3OdaQqz8KOdaQq2SFZO7OdaQq7g:PPa/PMEPPPJBPJ184gXpd0xF+A","tlshash":"159130d4812a5020ea4f5cc933cf7e71aead65a0a444857abffe1888dcd9c265378f0d","first_seen":"2025-10-17T17:47:44.179549Z","last_seen":"2026-07-12T20:18:26.305359Z","times_seen":39,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":131,"dns":1,"connect":10,"send":0,"wait":20,"receive":0,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/85ff0aa3e7887004.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/85ff0aa3e7887004.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:26:32 GMT\r\netag: \"28b6-649b84218de00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 1637\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XP3UUuiMOSXJnd8e%2FpPi4o3StXNVwuX4oqH668v4XGifnmkz%2FT2ImIS1k%2BB3Pntk0ifh6WyZ%2Bu5Scl%2BX6sa3zs6A744Yyhj4qwxdFMDyrSc%3D\"}]}\r\ncf-ray: 9cff5adddc35a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10422,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"de8346f141c241ca9ddfb154c776dc54","sha1":"6ea71f56986f0716226a12f10861e0fe3e2e5ffd","sha256":"a306a5f2f8b5aa6c821a5cc78f3f35643d24992af99f335af47f5db9611d76c8","sha512":"0892ff1823ebc2227ea25172bc0c8ed9d97f0f00bd4ef5d1bdc16f203636fac934bf25515778d6e48b70a6e75f26caa3fdd5bf2ac21c687f410607a88852a42f","ssdeep":"96:m6LA6L636wRnvRCuR1RNRXmM/6q6oB6O65sdu1wz//TZnmFrmEbX+BH1BLS1NpJ1:n4MIftqN/PCbTo1eWQ1o6HGhFZ5U878W","tlshash":"0b22e31dc0256b453273927f7bc02bcaf1139013da52967bbadc5c189fe26789183f6a","first_seen":"2026-02-18T17:45:32.507483Z","last_seen":"2026-02-18T17:52:15.52118Z","times_seen":3,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/f5cc843ca5834b18.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/f5cc843ca5834b18.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:28:10 GMT\r\netag: \"10c9-649b847f03a80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 1066\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MAQSaWnrt6QhMA%2F8BRsr3ScuiPWdxPIrkjrwgdbzMgsjySsLt6CldprfPAxMkDWE8xIEv%2FJTpK0hbCLq6fflYnAFR6mTjHFjmO3TdbyZzEA%3D\"}]}\r\ncf-ray: 9cff5addfc3fa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4297,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e673bf24e379a1362ab4118d01c0f939","sha1":"98a8da85db5053aa0f50beaa3333e71bcd462857","sha256":"e2625216119e2c226ebaf46e364f0b51d0bee5055000aa1f84df8f269124d8fc","sha512":"33b365ddf3b369771f73863f57fa784b9cc69bbee0a54651b886e5fe5e341f64c997614af1548d5342a37b823bfac9e13163b3f7bfbdb201639c3c65eaef16a1","ssdeep":"96:wm9/mFif0685VFOCrHHyRF4LF5IeHSb79cqKqknW:wm9zfL8PFljS8LF5IeHSf9cq7knW","tlshash":"e291eb30c11200465633ba7c6fd04b64e1d09253ab138c5a7afaa0760ff51bcb2e6ebd","first_seen":"2026-02-18T17:45:32.509921Z","last_seen":"2026-02-18T17:52:15.521689Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:24.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://account-btcc.com/\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-rw3m\r\naccess-control-allow-origin: https://account-btcc.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Wed, 18 Feb 2026 17:48:24 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9cff5aebdba7eff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T14:07:12.2636Z","times_seen":17762617,"resource_available":true,"data":null}},"time_used":378,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/59d32ad8b6dcfb5e.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/59d32ad8b6dcfb5e.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:26:16 GMT\r\netag: \"5fec-649b84124ba00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 3315\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jHIHuSxp1jlqDh5oN0NJ4Wmt6uox3B4CVl72qwCljgxtJlRxGDjPD0prg2pzoJIHqpJZ87XYbeWyk97gUtbjPPm0thCu2WtILx9rAZiwj64%3D\"}]}\r\ncf-ray: 9cff5addec3da106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24556,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"09921eb0fed6853eb6d2830896746a61","sha1":"2f2e7a9a819b3d5edb4718458f115ea0c42bd839","sha256":"dc92fe2d71ff00b949dfd78d3f4645bf225a34c566516b02a66dd9c3367fb1c7","sha512":"66ee42d8313cecc5f7a576136c8241257c1a69ce1113e9818abd9f114b22a652fbb919ab27870fd0c8f9ce5011bf66c21d4899271a2ac0882eea2d4633602992","ssdeep":"192:BoiE5vZe5UOLnEwxjLSsoBb3RcVXdAAn+UUP3egbXHjH0na3/mMHuHucCPPVz654:x4vCWnNVn","tlshash":"77b2ec14466163d96e335e3d73ec92a8e5918083cae90d2079ff886c4ff176d1ca2ab5","first_seen":"2026-02-18T17:45:32.526081Z","last_seen":"2026-02-18T17:52:15.516317Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/languages/pt_br.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:24.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/699589c13ea/languages/pt_br.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://account-btcc.com/\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:48:24 GMT\r\ncontent-type: application/json\r\nlast-modified: Wed, 18 Feb 2026 09:44:19 GMT\r\netag: W/\"a750d6156582f11ddf27b22c3a10781f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 194\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9cff5aebfbaeeff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12553,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"981e59c2e7a19ebad439840d582e74f9","sha1":"daee17fbd3243fa93a4fdcb94960284aeb6d926e","sha256":"6f1945fe43d4e9a9592bd7769722ab20a2c32c84001bf44e06c87ec2c9acc1a8","sha512":"c6291a6fe083e15ce8e32dd105d14ea0da75f54fe427a84c5d3119cf070cef96e00927fd174b0c73d5101b11871e5afdf026fb73cbf5381786c97eed48fe902b","ssdeep":"192:BGYrApDt0mHE06aevlicG27efQMjkjtPeme7UgmJUe9R7BOuGMVeF/MY8X1vTM3:CpjjV27RMIjtPVyUpd95GMk/MjhT8","tlshash":"5c427169cd600eb701969341798b3913226042470f94786bfb5c96ae0fced9fa1f7b8d","first_seen":"2025-06-19T03:45:29.403417Z","last_seen":"2026-05-10T21:03:35.921979Z","times_seen":231,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/config/api.php","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:38.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"POST /login/config/api.php HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://account-btcc.com/login/\r\nContent-Type: application/json\r\nContent-Length: 70\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=0; twk_idm_key=bsOZuIxzo1QITdLaxAQhz; twk_uuid_695de32b4cb0f81981e8b018=%7B%22uuid%22%3A%221.2BjHvJJDktnVGP6fgTrZeufmitOf80sgCSIKaKFAi87UzUatvXfidQyVOAkgLIKWIcmDHg1ShEAbLxDtQ3DKl4DWBZS9aQ2JfriZzwlRaGyiNB0Rik7TSOutrqU%22%2C%22version%22%3A3%2C%22domain%22%3A%22account-btcc.com%22%2C%22ts%22%3A1771436906998%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:38 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1zIszS6I9oI%2FqJRkQEDSaMOKpLBwIS6a9s2MzswQxTAHkukI6Ui%2FfEPM4K5eDa78SUhXUbcoOTcisLr1a81SGXnmOMfTTjJ53fU%2FDGXgl%2Fw%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5b4359eca106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7baef91fcce9e1b125fe3a445fdf9221","sha1":"fd9c5484fe484495db0aa817f884f05c5e7e4ddf","sha256":"43aaac3c9aaeabf3e31662b368e3842bed14833b7858a645f8a07d66552ad6d9","sha512":"ed3cc6e17fe5ecdcb957f917efa4ad903e120c2e9ecccb64e709502fde29702fad378886a14513de0d59671d93a5cecc7a2811289c3fad354586e24c766c33a7","ssdeep":"","tlshash":"41b0128143205e1c0fda0904fc20f22055f12f6390541095054dd3df31401444332174","first_seen":"2026-01-22T01:55:34.503438Z","last_seen":"2026-02-18T19:00:25.49018Z","times_seen":20,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/config/api.php","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:39.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"POST /login/config/api.php HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://account-btcc.com/login/\r\nContent-Type: application/json\r\nContent-Length: 70\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=0; twk_idm_key=bsOZuIxzo1QITdLaxAQhz; twk_uuid_695de32b4cb0f81981e8b018=%7B%22uuid%22%3A%221.2BjHvJJDktnVGP6fgTrZeufmitOf80sgCSIKaKFAi87UzUatvXfidQyVOAkgLIKWIcmDHg1ShEAbLxDtQ3DKl4DWBZS9aQ2JfriZzwlRaGyiNB0Rik7TSOutrqU%22%2C%22version%22%3A3%2C%22domain%22%3A%22account-btcc.com%22%2C%22ts%22%3A1771436906998%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:39 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yZLi1m1HNNuXyMth1Lprf2cn02LFUVcMcw5kSdVVkG%2BG8fwEIse03VV8s4zsOrxV8QjvFWfncfXYHchmu79ttMr%2FEmMmQuzIVM9mfEKHCws%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5b4cbc00a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7baef91fcce9e1b125fe3a445fdf9221","sha1":"fd9c5484fe484495db0aa817f884f05c5e7e4ddf","sha256":"43aaac3c9aaeabf3e31662b368e3842bed14833b7858a645f8a07d66552ad6d9","sha512":"ed3cc6e17fe5ecdcb957f917efa4ad903e120c2e9ecccb64e709502fde29702fad378886a14513de0d59671d93a5cecc7a2811289c3fad354586e24c766c33a7","ssdeep":"","tlshash":"41b0128143205e1c0fda0904fc20f22055f12f6390541095054dd3df31401444332174","first_seen":"2026-01-22T01:55:34.503438Z","last_seen":"2026-02-18T19:00:25.49018Z","times_seen":20,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Google+Sans+Code:ital,wght@0,300..800;1,300..800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:21.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Google+Sans+Code:ital,wght@0,300..800;1,300..800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 18 Feb 2026 17:48:21 GMT\r\ndate: Wed, 18 Feb 2026 17:48:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13251,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"f25edb6eca0deee6b1566cf03e245031","sha1":"9239d65aa1341036ee9b7da9d41efa69db5f284a","sha256":"35d05c2599f5fce54829e65c420892eccde843d9b08156afb93e8c36a9396ccb","sha512":"90fa493996f72615d2086fee67a75ba9ca33d8a0090719e896f6bcc538bda63985a1e59f8c79f50e36ea2d29338182cb9e2955fc55ff7e28e4bb45a6b888dc84","ssdeep":"192:SPePTcPxPJqAP2PKbqGIwVaPz6PacFPsPsqPXRDhr3q9BvbqGIwVb/0c6bjrI:SmgZEAe+qYab6ScFklaLqYYcb","tlshash":"a65225a101176415a6c798d323ce7d68ee0e2254b540d274bffd4f8feccac6962a03ad","first_seen":"2025-11-17T10:06:26.829578Z","last_seen":"2026-04-06T07:41:49.257195Z","times_seen":26,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":161,"dns":1,"connect":22,"send":0,"wait":20,"receive":0,"ssl":142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/icons/icon-rocket.svg","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /icons/icon-rocket.svg HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/assets-btcc/css/b412d95c3e3e8d5e.css\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yl8SHGR8s5t0yVhJhX52d5dfyPmycqcSaJ83%2BajrfgpFIWIlrhnrE400efOgllcxqfqZt5viPrq0WcvILk1ICXmeADWAqbivQj%2BFl42T%2B70%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5adefc75a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":278,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"881e5373cbdcf03f6f1dcdf9fd9fb8da","sha1":"720162957b0a4c13183cee7cf511b2db9ffacb97","sha256":"36e4830d82a16f632076f3803700cb0088281dd333e02232dbb83792ec4dec85","sha512":"dcdf654a42675fbb9050a1c2b06dc7b5ae24f4da0274dafbcdafe2a09294f8647e26490cf190246f914c484623fc7b12e3eb9e09c9feee2c48ed070375f8cbf6","ssdeep":"","tlshash":"bbd02bae5043a38b5922156039c516c6364c22faa43a85e82dc6d48b529857ecd9ab8c","first_seen":"2026-02-18T17:45:32.544442Z","last_seen":"2026-02-18T17:48:54.252529Z","times_seen":2,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:24.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/699589c13ea/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://account-btcc.com/\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:48:24 GMT\r\ncontent-type: application/json\r\nlast-modified: Wed, 18 Feb 2026 09:44:19 GMT\r\netag: W/\"4662c7c182dfe30065936bfa05f8c773\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 195\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9cff5aebbba0eff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11595,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4662c7c182dfe30065936bfa05f8c773","sha1":"d1f155c335c31be5947ef8ebf82be1eee2782fc2","sha256":"2d2d85dfc80ec4f42d12bea574d59879d269b5c06557cf888367fbfa9036fe47","sha512":"abd2530371ef02602814b0bed360225c0530615c5db002d61511bca5e8cda0d8da2bd288631ee02da5fbf952b31bd4380284dcd56838277b52654f7d13dc6229","ssdeep":"192:wmr65/bLHzPrquLUVid+BCzfF+npqpe9svKGC6KEt1aZwf1E:fCbLHzxUVid+BEfF+np59L3Zwfi","tlshash":"ed323169ce504ea702d29646399f35437624829b1f54342eb78c91ac0f8ec6fa1f77ce","first_seen":"2025-06-18T04:11:24.033166Z","last_seen":"2026-06-15T21:26:04.41843Z","times_seen":49917,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/fonts/btcc_Medium.ttf","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/fonts/btcc_Medium.ttf HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/assets-btcc/css/b412d95c3e3e8d5e.css\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906767; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:33:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V0xSY1X8aSF0UFznssTtEwrBv37suLo6VlNrIcIUYEtNBigu6BLZLe0MQvzbV%2B0oOy8s%2BrzZMVBwxRTW48UtU8Eq20%2B9QQ8quK%2FNv8lHI2c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\netag: W/\"6740-649b85a88f880\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\nage: 198\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9cff5afc5b4ea106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26432,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"FFTM\", 33 names, Macintosh","md5":"9e272cb1411082a35e61f11849b15ffe","sha1":"d9c5b9704e0e2d4b987ad31ad0e932d75918d24e","sha256":"47101f24a040f20bdcc342ff5ed5563132a978bfd73cec252897d4fd2e1a26a3","sha512":"7ebeabeca467e332777383629adf7f6c6150eddda07b9f7864bdaa7585cb27121123bdcf6e8a44257fa12257c437c74c5b1f51070f1f8a9b4d45c964b2657618","ssdeep":"384:H8hvwk6YorlrgZFIIBvIphml30M4QBQ8Bjoc41Dz/e/D4SoV+pf:H8dwkBulrgZFxF0hml30EBKX/4K+pf","tlshash":"1fc20932b3955723d5232b38df66d3309332f4227fab130a72444916bc879e89e76769","first_seen":"2025-09-29T15:51:45.332403Z","last_seen":"2026-07-21T10:14:39.639931Z","times_seen":8,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728=","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:28.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728= HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:48:28 GMT\r\ncontent-type: font/woff\r\ncontent-length: 93868\r\nlast-modified: Wed, 23 Apr 2025 10:39:13 GMT\r\netag: \"07d578c95ece55d04d46b095fa8ab50a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 196\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9cff5b04d833eff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93868,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 93868, version 1.0","md5":"07d578c95ece55d04d46b095fa8ab50a","sha1":"2d7b26de9cdc4b40d467186de2073e3dd7804ae6","sha256":"4326543bece14c56ef8ba2534fdb356452cb0650bcded3521cb8b09a9b03bd12","sha512":"89124c4f86613c63f43940a6f1914c1eee5ed90129e6aaa2c16ce446fa10581d389f7c77a579da2270125bce585efa07bf4b3e0880d283795dba42ddd9c7b0cc","ssdeep":"1536:daI2Ltj6D4Han3AHZy92Nzi2tcw52LHqH:2N6E6nOM2Nzi2t55gK","tlshash":"b393e7171706ef8fd42589bb684280734de2e901672ee243398b4d15961eaf44ef87bf","first_seen":"2025-04-29T12:23:34.02726Z","last_seen":"2026-08-07T14:25:25.177872Z","times_seen":35690,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets/js/sweetalert2@11.js","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:21.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets/js/sweetalert2@11.js HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:21 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 04 Apr 2025 20:12:14 GMT\r\netag: \"124ad-631f980930380-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 19936\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\nage: 198\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ut2pMoy%2FXPG1B5YHS0MiyMureUgQ5gDph0sLbzmxJa2yST%2BlbSF9cgh7iiVZDSuYURxTNswSVNv9JzUk821n2u9KnIGTOC9BjFjOq0dfD%2FA%3D\"}]}\r\ncf-ray: 9cff5ad9eb46a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74925,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (48298)","md5":"aca8f94219cbf6fb606fafa6717e1c7e","sha1":"1c3de1377a7871721f497216e420a8189f0e996e","sha256":"9421d3fcb7ee663469f8f7695a7b3fbcaae74a7dfaec3fe0d44e89bb5f30887d","sha512":"80565644bcff2f4c0cef16c33c1be468bc36337590b20c916c1ab8dbcf797eb27a17e0726fa2a178509a779c1294ffb2dee530b67b41318a3d434a996a9c28c3","ssdeep":"1536:4wQ1lEMPwZm3yNKUxfcBxg1vXP1/pbPmO:ylVwwyNtxfc3gX/pD","tlshash":"7b731a516a04f037b6bb41ae64e0e2047aa99405fcb74854f41cc8904febd4f26b7bba","first_seen":"2025-02-17T12:56:07.002467Z","last_seen":"2026-07-29T16:52:56.702594Z","times_seen":355,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/85ff0aa3e7887004.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/85ff0aa3e7887004.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php?username=\u0026password=\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906667; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:26:32 GMT\r\netag: \"28b6-649b84218de00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 1637\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 199\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gx1vAvxOomkaUocio7ncxIAo11D%2BraZ35MK5P8lgXCmsHLVu50r1CDKaXbg04P9dKAG91Cyl8IH4gkkYA%2F%2BAbTCmcLJWDiFilWqwYxRXRHw%3D\"}]}\r\ncf-ray: 9cff5afafa8ba106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10422,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"de8346f141c241ca9ddfb154c776dc54","sha1":"6ea71f56986f0716226a12f10861e0fe3e2e5ffd","sha256":"a306a5f2f8b5aa6c821a5cc78f3f35643d24992af99f335af47f5db9611d76c8","sha512":"0892ff1823ebc2227ea25172bc0c8ed9d97f0f00bd4ef5d1bdc16f203636fac934bf25515778d6e48b70a6e75f26caa3fdd5bf2ac21c687f410607a88852a42f","ssdeep":"96:m6LA6L636wRnvRCuR1RNRXmM/6q6oB6O65sdu1wz//TZnmFrmEbX+BH1BLS1NpJ1:n4MIftqN/PCbTo1eWQ1o6HGhFZ5U878W","tlshash":"0b22e31dc0256b453273927f7bc02bcaf1139013da52967bbadc5c189fe26789183f6a","first_seen":"2026-02-18T17:45:32.507483Z","last_seen":"2026-02-18T17:52:15.52118Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/images/meta_mask.png","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/images/meta_mask.png HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/assets-btcc/css/40b9eb064ea4beaf.css\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906767; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:24:14 GMT\r\netag: \"c14-649b839df2780\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 3092\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 198\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oyuf2ZwbA3%2BxthzpUMx1nMDUnohrJSStDsNmLf9Zx7F8cYxFsbe9sVK7LuR6SYPrpexgZpIBT165JqYAGVpFqCD1TBf1WbuVDdBNd6D0Nxk%3D\"}]}\r\ncf-ray: 9cff5afc5b48a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3092,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"3954748147aef343808291324c10a69e","sha1":"a3105ec6ecb0f25219506c25a741a3d258d812e4","sha256":"be4c65253afe857648f7abcc354e94069c9c7b35e2a1e75c14dff891468dac4d","sha512":"279ad90c32ed85434f6b55fd4b8d44b540671934b8f886a049d108c989a3fa3f96aef6809c8141cf716567d5e7711c7a0a2b275be1dce07b17c6e9f8a0ee2c1e","ssdeep":"","tlshash":"60515cefe5e42c5bf40d891ef9a84442f608a3ce48ddc02d480eca91e9be02cd32061d","first_seen":"2025-06-23T21:53:12.0267Z","last_seen":"2026-02-18T17:52:15.517424Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/log-performance/v3","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:27.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"OPTIONS /log-performance/v3 HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://account-btcc.com/\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-jtrv\r\naccess-control-allow-origin: https://account-btcc.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Wed, 18 Feb 2026 17:48:27 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9cff5b006913dbb0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T14:07:12.2636Z","times_seen":17762617,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets/css/flowbite_new.min.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:21.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets/css/flowbite_new.min.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:21 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 14 Jan 2026 13:43:02 GMT\r\netag: \"5876b-648594975a580-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 41293\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 198\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r09F%2FHKJfTdEU%2BH5qL%2BYKXHxijiPAdaKSSo%2FHGhJDTnT5683xAOu9CuTygVxTg0Kxw1VcV%2BB4JIQuvywTZU5A87PYnZKUEP%2Fvcb4lk5pDU8%3D\"}]}\r\ncf-ray: 9cff5ad9eb3fa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":362347,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (305)","md5":"6724f0617f15b4d4815d6f0555759a83","sha1":"862b11e37fab396954aebb2c7d91bc99bf7ca1b3","sha256":"a5de937535404a2f45b39b1f57237dde38e711e3434bc32988ea223f94c7ef57","sha512":"2db5ae1272f28d7ac3ab35859882de8c5315dd771ef857cec532682c83f57707df57c18edb9cd75ca895cac9c8df1afae221a304e8214650067974a9286962f6","ssdeep":"1536:75GSd5TYrFo0UABmBWBIB2KVmAcrG/aG1t3+BuY9IOFkRWFcd76Ri:75GSQrFlAcrG/aG19+BuY9IOFkRWDi","tlshash":"ca74eb15e5b2d2f72d23727d23df940d3779b043dc199fa9be8ca2109f882fa5892644","first_seen":"2026-01-22T01:55:34.553086Z","last_seen":"2026-02-18T19:00:25.473567Z","times_seen":19,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/exchange/index.php","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:21.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /login/exchange/index.php HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WSaO97k4GKsO0hC2NCpGsaN%2FWiQ%2Bw3ZinxpZNvrydDPze4rCqUOKLNp0vnB1GPEG%2FwBPnUDJg%2B9Muk0ER4bAlMo%2Fz4DXde5s9Ytrj7JSQIQ%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9cff5adc0bb2a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":137786,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1835), with CRLF line terminators","md5":"2f4d6e89c97b7d15eda9de8dbd923b34","sha1":"4657ba758d7deea975a2a432bc8e9a431a3cf099","sha256":"9661e2355a4f359bcde8170c359ef4e04642830f39e7d2683db6c35c30de0670","sha512":"f358e388ecec0bac023b78c859b59e048ef8c08e1f2514141277915d6d1bbfb3bf5caa61243d3129f06009280ac2911c684baa4ab1e52a7382aaf8ebee377c27","ssdeep":"1536:eRwpFH2q1AgiIMDZXy7yQwok+kj3ZClZ/tFHNw0ohoo8R:VxPZ","tlshash":"6ed373e663c46d7cf03387a9e32673b9b52b21e76b059244797d0ab16f2448cc87b9c4","first_seen":"2026-02-18T17:45:32.496735Z","last_seen":"2026-02-18T17:52:15.465139Z","times_seen":3,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/fonts/btcc_Regular.ttf","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/fonts/btcc_Regular.ttf HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/assets-btcc/css/b412d95c3e3e8d5e.css\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:33:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rLKXakKjgIP93v2hr2I%2FlqF%2FoZ7t7KPZm3h8864sfavis5fAG78v6in7LEEEhqANXsTbS9YRx0xVYMK3wdhcO9MwTsPIuDXsGIjZEDJh2EA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\netag: W/\"6604-649b859765000\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\nage: 193\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9cff5adf0c7da106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26116,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"FFTM\", 27 names, Macintosh","md5":"36051e9e2f86c8e42c6f68f773a54ea8","sha1":"d9ad636c34762552b53614d95c47884f3da23862","sha256":"adc3c54ae95ed84938490a074324c7701751106a13c77329b70ccb51f009079e","sha512":"1f35a2e3d47573db622ea8f83db7d6fc3a7e30cdad5b6088c0ba3a5927efe199c132ac7ad0e6f81efe750fd6af4d9012e147fe50a5d9cc98e8eb814775df9d46","ssdeep":"384:eO4EbXqjL06b1DWV/BnzxaG1g4QBAwAu+Z2nbDO3CH3wurZAq:ezED3KDWVZcQgBlisbDwCH3drZAq","tlshash":"79c21955b3656b03c52367b9dfa2e3309b31f4717f2b570e32804e15ec96880de627a6","first_seen":"2025-09-29T15:51:45.354011Z","last_seen":"2026-07-21T10:14:39.457297Z","times_seen":8,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"vsa92.tawk.to/s/?k=6995fb6a0901635b696cab66\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2OTVkZTMyYjRjYjBmODE5ODFlOGIwMTgiLCJ2aWQiOiI2OTVkZTMyYjRjYjBmODE5ODFlOGIwMTgtS3RHOE0wZzF1dVhRckpfbmJlM1laIiwic2lkIjoiNjk5NWZiNmEwOTAxNjM1YjY5NmNhYjY2IiwiaWF0IjoxNzcxNDM2OTA2LCJleHAiOjE3NzE0Mzg3MDYsImp0aSI6IkZrQkNFc01MU2VsTWRIREtIbGlqZiJ9.Bs9XTrLqwMvXrqBlQzrsGJztKuTwK5Mg6up1cD0r7QMikuTyYwTyTX9uMtc9UFCRXK0G-jJNbHysuUAvcspSow\u0026EIO=3\u0026transport=websocket\u0026__t=PnntXeB","fqdn":"vsa92.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:27.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /s/?k=6995fb6a0901635b696cab66\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2OTVkZTMyYjRjYjBmODE5ODFlOGIwMTgiLCJ2aWQiOiI2OTVkZTMyYjRjYjBmODE5ODFlOGIwMTgtS3RHOE0wZzF1dVhRckpfbmJlM1laIiwic2lkIjoiNjk5NWZiNmEwOTAxNjM1YjY5NmNhYjY2IiwiaWF0IjoxNzcxNDM2OTA2LCJleHAiOjE3NzE0Mzg3MDYsImp0aSI6IkZrQkNFc01MU2VsTWRIREtIbGlqZiJ9.Bs9XTrLqwMvXrqBlQzrsGJztKuTwK5Mg6up1cD0r7QMikuTyYwTyTX9uMtc9UFCRXK0G-jJNbHysuUAvcspSow\u0026EIO=3\u0026transport=websocket\u0026__t=PnntXeB HTTP/1.1\r\nHost: vsa92.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://account-btcc.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: TRfp82O/c0j8deqvbk412g==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 18 Feb 2026 17:48:27 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: P+BAU/qxT91bRnsK3aPCCsdjR6k=\r\nsec-websocket-extensions: permessage-deflate\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: 9cff5afdcc79f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T14:07:12.2636Z","times_seen":17762617,"resource_available":true,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":44,"connect":52,"send":0,"wait":392,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/assets/png/1f44b.png?v=2.2.7","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:28.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /emojione/assets/png/1f44b.png?v=2.2.7 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 1311\r\ncf-ray: 9cff5b06afb8dfec-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"51f-Lhpf/5pVjttXKKAzYbc9FjP7pB4\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230143-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 507733\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xFMQVdv5OwuvyJ%2Bc0ujAwzV3%2BbWE3LkE0fkF%2BY3U1ERj%2FAlQOlZAOWYl%2Fs10sN2wuOVzoUGYWl4R3CNeFPcCUl15VC9Hw9vxZIapzd%2FMlNQDwTvbLmwGQ58OI4lAJ%2Bw7HUA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1311,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"c146761c3af8335c09eff9b1cdecbe08","sha1":"2e1a5fff9a558edb5728a03361b73d1633fba41e","sha256":"d84e890fa93c018d8b78e3bff3f6252036aa7ead6e48b292c0b92b1cb5127371","sha512":"b99a6fcfe0c4f4884fec84ec4e9951fc23b246302d4eac2996f4b6df3e063543b640a99e083494633f946fd85a3b217e18356e6b46d6584dcbccd88215638950","ssdeep":"","tlshash":"f221c59314628da28e23c525ac24c5e0b2fb40fcd78f8ae24903feb552b530c99d478b","first_seen":"2023-05-15T15:27:55Z","last_seen":"2026-08-07T14:15:53.887135Z","times_seen":21114,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-18T17:48:21.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /login/ HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rW5SBOYGylCU6J4vo1oSQ74DUHqzMnPh2ZHebx2K8p1jtPEd%2FSPpjZSLUo3XXKA9VmnnVcGkztNUThoU%2BXX9FzDzGC0OT2YBnrv5iV%2BzKkY%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cff5ad7bbeff375-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3128,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"a3d3d7d68c264e84841d3249f0ddc695","sha1":"1cf022dcca5c4f2c548ab09d81e94a13a0e8b358","sha256":"c63af8ab44415a99d3dab611d1f395485f26e253614e2cbf0359a15d20f83a35","sha512":"414c29fcfe5bc54493b4049c4773595edbef81147552a0322b2365fb70ad71dad93ea3b77f040573926d89b4226f1ffd6fe982bd6cb9452736517aaa963a875f","ssdeep":"","tlshash":"60511e1b2d45c6320033658baab9d20dfd59a157b240caba3bfc54172f31ed84993ebc","first_seen":"2026-02-18T17:45:32.571532Z","last_seen":"2026-02-18T17:52:15.512733Z","times_seen":3,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/exchange/index.php?username=\u0026password=","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:26.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /login/exchange/index.php?username=\u0026password= HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906366; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nnlGLnv4zpN%2FoFGlOXg1sK70nqz%2BKiK4EHC50i%2B69sO%2BJNTKvtGyFb9Dl6BrXzvUfgzWHIgAzJodRkUVYsf6SLfTV4tlEtB%2FewkEXC3%2BR74%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9cff5af92a16a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137786,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1835), with CRLF line terminators","md5":"2f4d6e89c97b7d15eda9de8dbd923b34","sha1":"4657ba758d7deea975a2a432bc8e9a431a3cf099","sha256":"9661e2355a4f359bcde8170c359ef4e04642830f39e7d2683db6c35c30de0670","sha512":"f358e388ecec0bac023b78c859b59e048ef8c08e1f2514141277915d6d1bbfb3bf5caa61243d3129f06009280ac2911c684baa4ab1e52a7382aaf8ebee377c27","ssdeep":"1536:eRwpFH2q1AgiIMDZXy7yQwok+kj3ZClZ/tFHNw0ohoo8R:VxPZ","tlshash":"6ed373e663c46d7cf03387a9e32673b9b52b21e76b059244797d0ab16f2448cc87b9c4","first_seen":"2026-02-18T17:45:32.496735Z","last_seen":"2026-02-18T17:52:15.465139Z","times_seen":3,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":253,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/a15b68b9c2c83b8c.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/a15b68b9c2c83b8c.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php?username=\u0026password=\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906667; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:27:30 GMT\r\netag: \"79e-649b8458de080-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 601\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 199\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8m4w6Hh0zRYEkZFv%2F9kkbRCZAFupjfFNn2whDc5z%2FnJvEYBoOipnI7NCUwgvGLlDH%2BKNGbN4vVmf7H7DTzRShtagaBUKatiuqHAvW0%2By52Q%3D\"}]}\r\ncf-ray: 9cff5afaea86a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1950,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1258eed9a5fea209a723fab988176156","sha1":"24632b50f205e115fcfbaae899e158ab137a3b7f","sha256":"bc1ad7fdcc66f4c922aed9e051fe95a2d87f90f3aa01d2292f0a33c2a55e8961","sha512":"0580da037d664a9aee28ac5903fb3c22f770b6c3be4176648d281a0c18da0cb40c6c49ac5040ec5738449dcefd234c05f73779e357e3ea5280b09c22df2e107b","ssdeep":"","tlshash":"f3419a2953a601042a7bfe2d3f948642fd5a0073c66461197efa91785ff646ce1a0f7c","first_seen":"2026-02-18T17:45:32.533576Z","last_seen":"2026-02-18T17:52:15.454503Z","times_seen":3,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/images/favicon.ico","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:21.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/images/favicon.ico HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:21 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:14:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=crWdbCihvsqMXDFBy6gq6Q6P3e5hkpDqbjgejhnD7VMejZG7hiBhgQo1iQtfLqxSjHtnab9ssT5no%2B82W4Fh0lHHU0xWUd2EZtxrWBjQKE0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\netag: W/\"10be-649b817a89c00\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9cff5adcdbdfa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"514899d7f1c5c4795874494a2722b65b","sha1":"21a0ba95f0bf83ea0e1c7569b9d8a4457c1360b4","sha256":"7603faa50e160b723d2a3df96b276b7dc3ef65fa13ec5ce1867e4250f64e2c80","sha512":"0635978ba323b539bd9e76f0d9fca94e95049d5fcf3792c28c3b869b70de888a35392c21286c987d8f6861f675fb6d5e8e39cf7d27a71b8a3e8a84f03718ce3d","ssdeep":"24:sumbqPo4U1FNrCyRMJ+7xoyQiKK/UWzURubyZAW+b01MxoSVrQhw:cbh4YNrtMJcZpUWzuq4Kv+ShQhw","tlshash":"e59154527f02a7b5d4800376062719bc22e76c9aba708639ffd4b454a7f3d14ec071d5","first_seen":"2023-08-02T14:51:16Z","last_seen":"2026-07-18T17:02:08.022636Z","times_seen":20,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/account/vip.png","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /account/vip.png HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/assets-btcc/css/main.css\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906767; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SI9JjqWeUOJSCHpwKELRWbnqKYCMOSsqW6QNknoJXyRdi4oXKMe%2B0b1qnDCWxQQRl4GlEZcIOQX%2F8r5OjUVYssTB3QJTx8D2c8GYOma00%2Fg%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 4\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5afc5b3aa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":278,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"881e5373cbdcf03f6f1dcdf9fd9fb8da","sha1":"720162957b0a4c13183cee7cf511b2db9ffacb97","sha256":"36e4830d82a16f632076f3803700cb0088281dd333e02232dbb83792ec4dec85","sha512":"dcdf654a42675fbb9050a1c2b06dc7b5ae24f4da0274dafbcdafe2a09294f8647e26490cf190246f914c484623fc7b12e3eb9e09c9feee2c48ed070375f8cbf6","ssdeep":"","tlshash":"bbd02bae5043a38b5922156039c516c6364c22faa43a85e82dc6d48b529857ecd9ab8c","first_seen":"2026-02-18T17:45:32.544442Z","last_seen":"2026-02-18T17:48:54.252529Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/css/min-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:27.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/699589c13ea/css/min-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:48:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 18 Feb 2026 09:44:18 GMT\r\netag: W/\"af9830eef563b4df395870a483ce549c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 28897\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9cff5afe08c9dbb0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36092,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36049)","md5":"af9830eef563b4df395870a483ce549c","sha1":"2c678a245c7b8984569447c9bbfe182583ef7e56","sha256":"5d919993a3fe6ec4c27ec6696b643900c02b95584a4a21a518eb8809edf12531","sha512":"16416617f0c79b40d196c1a7df699f1e01a130e3df75a4f437b4adfc04fa666ac7987d080bbfe759b849bd81860e6bab5b2af02356a8814f0dd1fa9a64b726d4","ssdeep":"384:uTTacuVZNgxYe4fbgL3w23U3xi7vxEbXR+ziLwH0Lg26/tFTiBB6TX3DYC8:yeyna+ziLwH0Lg261F2BBCX3DZ8","tlshash":"47f2bef1f4b700c8b363c122c3d5f67c6459b770ca86ce92f427666c49e16a63581abc","first_seen":"2025-05-21T12:18:34.219676Z","last_seen":"2026-08-07T14:15:53.915653Z","times_seen":49398,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/config/api.php","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:26.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"POST /login/config/api.php HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://account-btcc.com/login/\r\nContent-Type: application/json\r\nContent-Length: 70\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906266; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wSxZjkLsqfrMxoS0hsQIPSv4hBSUstjtmUyaaQcaf2suS6xu8kWOL1CCBCl3RkhgadsWzlVpk2Lo27ZHHd2zi7ZRisnIf9kstRowWnHv5zA%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5af859e5a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7baef91fcce9e1b125fe3a445fdf9221","sha1":"fd9c5484fe484495db0aa817f884f05c5e7e4ddf","sha256":"43aaac3c9aaeabf3e31662b368e3842bed14833b7858a645f8a07d66552ad6d9","sha512":"ed3cc6e17fe5ecdcb957f917efa4ad903e120c2e9ecccb64e709502fde29702fad378886a14513de0d59671d93a5cecc7a2811289c3fad354586e24c766c33a7","ssdeep":"","tlshash":"41b0128143205e1c0fda0904fc20f22055f12f6390541095054dd3df31401444332174","first_seen":"2026-01-22T01:55:34.503438Z","last_seen":"2026-02-18T19:00:25.49018Z","times_seen":20,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/f5cc843ca5834b18.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/f5cc843ca5834b18.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php?username=\u0026password=\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906667; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:28:10 GMT\r\netag: \"10c9-649b847f03a80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 1066\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 198\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HMvLeIL8HUBT%2F8gMB%2BoA5AUQrGvHv1EwNwhuJKPdF9syVMhd7QkvpcwD80%2BGvAarBOJX%2FeseMJ19TtIveuS5prwVcFs0NmxF%2B7eQrfKrSG4%3D\"}]}\r\ncf-ray: 9cff5afb0a93a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4297,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e673bf24e379a1362ab4118d01c0f939","sha1":"98a8da85db5053aa0f50beaa3333e71bcd462857","sha256":"e2625216119e2c226ebaf46e364f0b51d0bee5055000aa1f84df8f269124d8fc","sha512":"33b365ddf3b369771f73863f57fa784b9cc69bbee0a54651b886e5fe5e341f64c997614af1548d5342a37b823bfac9e13163b3f7bfbdb201639c3c65eaef16a1","ssdeep":"96:wm9/mFif0685VFOCrHHyRF4LF5IeHSb79cqKqknW:wm9zfL8PFljS8LF5IeHSf9cq7knW","tlshash":"e291eb30c11200465633ba7c6fd04b64e1d09253ab138c5a7afaa0760ff51bcb2e6ebd","first_seen":"2026-02-18T17:45:32.509921Z","last_seen":"2026-02-18T17:52:15.521689Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/main.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/main.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php?username=\u0026password=\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906667; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:47:56 GMT\r\netag: \"28551-649b88ea12700-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 19085\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 198\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rEmwd7rFQ0QGQEXfKSVf%2F3kzAt3QrbE9xUi%2BhxSYpFMS2cHCY69EoTwMm2univkEQVY2acWBYKdB2llBoMsngED1NDL%2Fav1tDWjwHiOoQ3U%3D\"}]}\r\ncf-ray: 9cff5afb0a94a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165201,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a8ce225d4d29c54e8e7fc4f49ee40ce2","sha1":"f5600a2dd275389cdb4a009eb34385d3925019f6","sha256":"93b51841a01798587492a1e3b1bc49db69a3b2333c05f4080acbba265fa24f73","sha512":"372e821b9909318474e6e4ff6cebcb48c53a63af68a87c073043d8a12f07b0089947404903c67611879f35604597fdc55b879b4d772707d1e20378862a101f07","ssdeep":"1536:TtMy3m4Y31svYhBmMdBPWVaCW4pgcg1zZKZKS/csB/uqdhR/RPGPQgHUfq1Wa9Mx:QaDfrAnfuwZ7vzUBGjVIv","tlshash":"46f34365819152865b336b3c7bd08364faa540638b1a49647efea03c0ff16bc25d2f7e","first_seen":"2026-02-18T17:45:32.522022Z","last_seen":"2026-02-18T17:52:15.492384Z","times_seen":3,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/images/logo_google.svg","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/images/logo_google.svg HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/assets-btcc/css/40b9eb064ea4beaf.css\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906767; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:24:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bKnKEmFPLyg38c0exYshpSdkEQo5QidhmZjSpLbwjMxGE1xj5WgZXGsLHRB2nftnhH%2B8dBvE5%2FKclRgrhIfYeMQPC1QpRFKA1UOGwAEttgs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\netag: W/\"ba1-649b83af1d000\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\nage: 198\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9cff5afc5b46a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2977,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"29dde85ca8ca0643e41d5c727970c837","sha1":"80be442bb941ef07b4bda23805a5e61733488bc5","sha256":"3d5cc6ea662614bfd42ae06ac271a43743cd96eae4e3d2ad1897558b710b24fe","sha512":"2360e0fa9a4c0788cbef67183b2a982ab46ee9e2050539734f30a39ef0941de314750cd0857f1715d80947cb1af46ba6730a5d96e8f82c9ffb3cc2eabb2c32d7","ssdeep":"","tlshash":"855134d423f8a1b6f109cb98aaea7856563c349ba2d4c488b98c6959ff224fd000d543","first_seen":"2025-06-23T21:53:12.052962Z","last_seen":"2026-07-21T10:14:39.417462Z","times_seen":8,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/78663d6631b3cdbb.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/78663d6631b3cdbb.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:27:10 GMT\r\netag: \"ade-649b8445cb380-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 705\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8AsPaPqNnn7N%2F%2Fj5imSPvQ43mMcIkC09DNj%2BSRCN4FAJUsc81DZyxw3EHS3h8NKu9zbC7ZtjuxZ2MpyLobwSR7LwSIF6%2FJo7fYECWdDJqrc%3D\"}]}\r\ncf-ray: 9cff5addec39a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2782,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6b155a88e948c3ee50cef62f324f9fc3","sha1":"442393d9c8e6af54ab6c83f4f5f46f24c5f513a2","sha256":"505e429bfd641204480f5a3c517952d40f6636a31927b6dce24ee29ea5fd537c","sha512":"edc2b05855d9d1913a195a9bf102f83b803423c268843e2dda93aef762fee0bb41e781c7cf6ad6288c4d81df2b1d16d825513688677cd8ffc3ad0f9a7cdd1f8a","ssdeep":"","tlshash":"aa51ab38921941866b72fb3cb7d9f658e6c05853ca3049263e7988580fe86fc61d0f7c","first_seen":"2026-02-18T17:45:32.550464Z","last_seen":"2026-02-18T17:52:15.537467Z","times_seen":3,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=695de32b4cb0f81981e8b018\u0026widgetId=1jfmeja44\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:24.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=695de32b4cb0f81981e8b018\u0026widgetId=1jfmeja44\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://account-btcc.com/\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-834v\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-2-0\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Wed, 18 Feb 2026 17:48:24 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 194\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9cff5aebbb9eeff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3053,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4b3e46af735f0fa71c5bb13ab2c799e4","sha1":"369dcf0992f6aaf16d39ea42475047ec8cbc1a6e","sha256":"7fbe687efb74482d0426498505da38fb98eaf04f4029d3b6fc6221c644e20117","sha512":"3d85f5afe506000a5ea0898f617f669eb1bcd74da0e7ceedb5c84709baf7e1ec5ffc8c3acb7c5d5b4ac5e54c2afd236f1653b420b059cc72f563a33a52dbb2ab","ssdeep":"","tlshash":"a751fe250906de39a3cd829275df3a27a82dc533e384551de1989d38c3efacd221174b","first_seen":"2026-02-18T17:45:32.551567Z","last_seen":"2026-02-18T18:36:58.016025Z","times_seen":5,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/0cbff9cf00db6493.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/0cbff9cf00db6493.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php?username=\u0026password=\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906667; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:20:22 GMT\r\netag: \"628a-649b82c0b1d80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 3255\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 199\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KcLsxhtIuOc5PdrXHnCVtfKr2EOGnKQoXnGi2HYu8InuTlGFXdoPcxayexSwdE0N02FoA25lcIF5Y%2BCC617ZucVT%2Bfjj8PtTRRq%2FsEcG1NM%3D\"}]}\r\ncf-ray: 9cff5afaea84a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25226,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9359b23138135326c837ed3db6fcb0c6","sha1":"7ec048ae6f25d204c4d46d6040a2a63db1871f76","sha256":"eef5b7cf086228a48510980c7e94350da622458c74b402aac9f8cb7fba6855e0","sha512":"bf0d11ee65a6f006ede21b26d1b86f0401397455a85f1f2ceb76c1343c45f9ab3b75c2f76947db36b9fd2355b420ada43a90de1a84c438deedfbf86002031bfc","ssdeep":"192:ktkgjkHL3RcVXdAAn+UUP3egbXHjH0na3/mMHuHucCPPVz65TeBE1INKG3wrWzGA:BnNVmmVzVoVsVmVHV+","tlshash":"c0b2ea14426177daae331e3827fc9254e1a54083ca9c09247aff4c5c8ff576a2d72bb6","first_seen":"2026-02-18T17:45:32.530046Z","last_seen":"2026-02-18T17:52:15.508131Z","times_seen":3,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets/css/all.min.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:21.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets/css/all.min.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:21 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 04 Apr 2025 21:33:48 GMT\r\netag: \"17527-631faa4478700-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 22230\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y0inObkPBzC2L1%2FUlPOm1a94jZF7dyl9v3jhynpnx8P%2Bwnj%2FXMB0mNuRAjmssqFTQbr7EykLg2fYm9GoR0qtQcp8XBBJwOXLRaEhAITvQho%3D\"}]}\r\ncf-ray: 9cff5ad9eb40a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95527,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"113ee5f7e27f9c75d03afa2bc40d3de8","sha1":"11cfd6ac170b177ec66129c675da8ed42bf59b2e","sha256":"505e3ddfac26c3f78cc579ebcabb61e7996e38101e52b68c8001e3cdaccc44a8","sha512":"c73502ca46096a10e382848e725bf34b068a249118fbad761af0abba496a3107a929737b2d2ec6dc272c1a5f5b2fe341e9f018f7a58db88cf7f88b9e17fd91f0","ssdeep":"1536:JmrmDmqbmPmToaEXW0Ob+zj3bsP85YSYnyICHD9I4M1pdQD8m5K3IACSwGvtDDBB:1fEXWrW3bckeTCSwaTHdd6vMcV6z","tlshash":"8b93801c60f32da65218266725ceaa43b7363bdb3d5fac9939c06809ff568bc1147f12","first_seen":"2026-01-22T01:55:34.523676Z","last_seen":"2026-02-18T19:00:25.478457Z","times_seen":20,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/config/api.php","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:23.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"POST /login/config/api.php HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://account-btcc.com/login/\r\nContent-Type: application/json\r\nContent-Length: 70\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:23 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t2D%2FUTZrWW3jcRvkjr%2Fd6LZNYV6Y51SICYmgHQ4qQuo5vcxukYJZgcBXJ8HdVFu6OxPxVDrRHB7LG2uZPiCzfyT0Wii5YjDiHEzPOhwYzHI%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5ae59dd7a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7baef91fcce9e1b125fe3a445fdf9221","sha1":"fd9c5484fe484495db0aa817f884f05c5e7e4ddf","sha256":"43aaac3c9aaeabf3e31662b368e3842bed14833b7858a645f8a07d66552ad6d9","sha512":"ed3cc6e17fe5ecdcb957f917efa4ad903e120c2e9ecccb64e709502fde29702fad378886a14513de0d59671d93a5cecc7a2811289c3fad354586e24c766c33a7","ssdeep":"","tlshash":"41b0128143205e1c0fda0904fc20f22055f12f6390541095054dd3df31401444332174","first_seen":"2026-01-22T01:55:34.503438Z","last_seen":"2026-02-18T19:00:25.49018Z","times_seen":20,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:24.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/699589c13ea/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://account-btcc.com/\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:48:24 GMT\r\ncontent-type: application/json\r\nlast-modified: Wed, 18 Feb 2026 09:44:19 GMT\r\netag: W/\"73eea1de9215521cb137b51419ba55a9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 195\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9cff5aebcba5eff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10839,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"73eea1de9215521cb137b51419ba55a9","sha1":"a8876b573146cd5450adc92a5450febea8d33f22","sha256":"df1d970dbd95be40780e8c006102fa7892bfe26bc989ee0c9222b089038542ee","sha512":"277849fa8a9d59430663b5c1aac29a198436731ab59bc5968ed9fcfb839f00a31e6e278c3c78547f6e1c20d94847963375de011be6493af268a7bac25cd15257","ssdeep":"192:ImwHq/LrnzPLEgIE1iN+xiDgGOy+HpVHnKWyay8V1K5Av+cE:s6LrnzCE1iN+xkDOy+Hp8/5Avy","tlshash":"c7224269ce504ea702c29647399f35437624429b1f54382eb78891ac0f8ec6f71f779e","first_seen":"2026-02-18T09:54:55.751197Z","last_seen":"2026-08-07T14:15:53.872572Z","times_seen":28721,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.btcc.com/8c55dbc3-80d8-4b3b-9ae5-f204b003f522","fqdn":"www.btcc.com","domain":"btcc.com","tld":"com"},"ip":{"addr":"172.66.43.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 01:27:45 GMT","end":"Wed, 29 Apr 2026 02:27:33 GMT"},"fingerprint":{"sha1":"12:F1:F3:33:29:32:75:1F:B1:90:CE:DE:1E:D7:53:20:3E:72:9A:27","sha256":"71:28:8E:C1:28:91:68:92:DA:D9:5F:72:D7:BF:FB:CC:72:E1:2A:32:16:12:21:04:79:18:DB:BE:5F:51:63:96"}}},"request":{"raw":"GET /8c55dbc3-80d8-4b3b-9ae5-f204b003f522 HTTP/1.1\r\nHost: www.btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ndate: Wed, 18 Feb 2026 17:48:27 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlocation: /en-US\r\ncontent-security-policy: upgrade-insecure-requests\r\nset-cookie: __cf_bm=8egTd2P2OEto0cLFz7cKNlPOO_J0KP1.BixueBumocI-1771436906.8659267-1.0.1.1-lSFZF9JoQp3IQ_j0VbFvONAS7yTn3Xpj.5hsTrAy4zmGZawLZXm7BveN306gP7ddQapBiWfcpHR7_HUyhp2ZibIRDc9bXVw10vPklcrv3zoVw_9Q6ctQR24PqK5aIMgQ; HttpOnly; Secure; Path=/; Domain=btcc.com; Expires=Wed, 18 Feb 2026 18:18:27 GMT\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9cff5afbeba75a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T14:07:12.2636Z","times_seen":17762617,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:27.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/699589c13ea/js/twk-chunk-6289ff8e.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:48:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 18 Feb 2026 09:44:18 GMT\r\netag: W/\"32bb78eaac9071d3dff248a90ed2442c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 28896\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9cff5afd0891dbb0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106023,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"32bb78eaac9071d3dff248a90ed2442c","sha1":"703ef8547ac5f72c14dce7a5556fad1c4b286ab3","sha256":"b0bbcca7f0bb2100a57d659d36fe28c95d520c13ef4724b56fb0ad84ce2dcdae","sha512":"7e21bb6d7980f421ba2f6f6c4bde41126daddcb0250a2c56168b6c34bb620c67cf954153a3c78fc1df096a40bd803da5dee59fae6bb975d92fe80bb5ee138df2","ssdeep":"1536:BigMTWFu196wufn32jGDdgaOFUWbaGlDluK1MFYGdZPkx3u4V5pfYMrlSf:4nmuTilGhmkx3u4V5pPrlSf","tlshash":"1da3096ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","first_seen":"2026-02-18T09:54:55.823034Z","last_seen":"2026-02-19T02:17:55.619098Z","times_seen":82,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/config/api.php","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:36.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"POST /login/config/api.php HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://account-btcc.com/login/\r\nContent-Type: application/json\r\nContent-Length: 70\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=0; twk_idm_key=bsOZuIxzo1QITdLaxAQhz; twk_uuid_695de32b4cb0f81981e8b018=%7B%22uuid%22%3A%221.2BjHvJJDktnVGP6fgTrZeufmitOf80sgCSIKaKFAi87UzUatvXfidQyVOAkgLIKWIcmDHg1ShEAbLxDtQ3DKl4DWBZS9aQ2JfriZzwlRaGyiNB0Rik7TSOutrqU%22%2C%22version%22%3A3%2C%22domain%22%3A%22account-btcc.com%22%2C%22ts%22%3A1771436906998%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:36 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KBc0rAlpNVV8JlaEAgjHm3ZEIzvwyUynyE3rrnzU9ydXxIQtKI6TOtY0km2AToyw4mhK66EasCkDeuRbpe48P8Xw8P4DJt6%2B7GMjgEV9T%2F0%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5b3a2800a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7baef91fcce9e1b125fe3a445fdf9221","sha1":"fd9c5484fe484495db0aa817f884f05c5e7e4ddf","sha256":"43aaac3c9aaeabf3e31662b368e3842bed14833b7858a645f8a07d66552ad6d9","sha512":"ed3cc6e17fe5ecdcb957f917efa4ad903e120c2e9ecccb64e709502fde29702fad378886a14513de0d59671d93a5cecc7a2811289c3fad354586e24c766c33a7","ssdeep":"","tlshash":"41b0128143205e1c0fda0904fc20f22055f12f6390541095054dd3df31401444332174","first_seen":"2026-01-22T01:55:34.503438Z","last_seen":"2026-02-18T19:00:25.49018Z","times_seen":20,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/config/js/qrcode.min.js","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:21.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /login/config/js/qrcode.min.js HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:21 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 14 May 2025 12:25:44 GMT\r\netag: \"4dd7-63517a5e48200-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 7007\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n2c8K0hIs3FrJ4A6yC%2BqE9AEMMV54AJmt9d29WBe3%2FesdXyk1z2P%2BejPJCCJZfcaTq0omSIE5EFxfps4Uo%2FmZua5BJnv26iY%2F4MqWz7umvM%3D\"}]}\r\ncf-ray: 9cff5ad9fb4ca106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19927,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (19927), with no line terminators","md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-08-07T12:54:37.561124Z","times_seen":66138,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets/js/themeclient.js","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:21.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets/js/themeclient.js HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:21 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Jan 2026 16:28:52 GMT\r\netag: \"88a-6499d77fc9900-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 591\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\nage: 198\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4I2nX%2BM5j4ItPNBVDyoZdowVq%2F2iIrp1cVE5HgvGuoFTV6A6XNCgURnXSwyxMFOiHqPuDIKWCSt7rNn7T1SiBOUdrEoV5VPdg0ac8yNNwqQ%3D\"}]}\r\ncf-ray: 9cff5ad9fb4da106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2186,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"f60b11d2e0f782c247767d342e60f122","sha1":"342135508969158d783cf61cf01479f10a9f50d0","sha256":"f6b1cfa9742d31bcc38119a13cd4079487a43471c83dc0b918f3bc40f8466767","sha512":"16dee14c5a840a869941ccf9ee53f7e19cbec313a5615b5164e78ee1d4d444ed3f871083869e2d315c5c266cb7a5f2da3a7616348078151e6a189079415a1cfc","ssdeep":"","tlshash":"38417d5a3053121ac47737fe96834c4cf72b79b765916708bd0d86041fb25924972fed","first_seen":"2026-01-22T01:55:34.551882Z","last_seen":"2026-02-18T19:00:25.50934Z","times_seen":16,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/images/meta_mask.png","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/images/meta_mask.png HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/assets-btcc/css/40b9eb064ea4beaf.css\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:24:14 GMT\r\netag: \"c14-649b839df2780\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 3092\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 193\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8REBVWegIxFfmDnjKtn7Exu4GftIyrGnYqZtU18prbrv1ACqSdJyMWqRET5jET8p2LKtcCP6oAj2hBOk06w4qvJUmBU6LUNZsNJPkasncZw%3D\"}]}\r\ncf-ray: 9cff5adf0c79a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3092,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"3954748147aef343808291324c10a69e","sha1":"a3105ec6ecb0f25219506c25a741a3d258d812e4","sha256":"be4c65253afe857648f7abcc354e94069c9c7b35e2a1e75c14dff891468dac4d","sha512":"279ad90c32ed85434f6b55fd4b8d44b540671934b8f886a049d108c989a3fa3f96aef6809c8141cf716567d5e7711c7a0a2b275be1dce07b17c6e9f8a0ee2c1e","ssdeep":"","tlshash":"60515cefe5e42c5bf40d891ef9a84442f608a3ce48ddc02d480eca91e9be02cd32061d","first_seen":"2025-06-23T21:53:12.0267Z","last_seen":"2026-02-18T17:52:15.517424Z","times_seen":4,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/images/b0089ad8-edd6-44b3-bf2f-b682147e380b.png","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/images/b0089ad8-edd6-44b3-bf2f-b682147e380b.png HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php?username=\u0026password=\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906767; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:18:28 GMT\r\netag: \"d044-649b8253f9d00\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 53316\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 198\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qITjF1CKf1W%2Bw0MvFoTSvCdcfohw6vwcRUmF3TGhaFfkAZivxz0ct3rRMXr%2BMiPZcTRQJxghb471374fYMEBET1BJo547vFpCUC5uHOEVQE%3D\"}]}\r\ncf-ray: 9cff5afc5b3ea106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53316,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 960 x 380, 8-bit colormap, non-interlaced","md5":"6a0b3af015e1057b030748bb8f630a8d","sha1":"a710bcc84c8067d785f7f88da9af77d7d4583740","sha256":"931eb82cecdaff79e0fbfb032cc9fff3a958309eafc403dc79a842da9fa4537f","sha512":"4f23edf764af7e1edb67699ab3103cdb23b29d392969bfcdb30349da0f04059d97a9644074ae700ded5ace368e87a549834ef4f1ace704ba06f39a836e788a9d","ssdeep":"1536:+5tgQ15NBmDanmBLNvU9COJjmdLNgDewy8nwx+nJ:ch5NBnmBLNUwQjs6C/5x+J","tlshash":"7333027d6de090bb5c739b0326a54bc399bd67aaef79c6060313de5c893338a0111f89","first_seen":"2026-02-18T17:45:32.576299Z","last_seen":"2026-02-18T17:52:15.493247Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/config/api.php","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:30.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"POST /login/config/api.php HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://account-btcc.com/login/\r\nContent-Type: application/json\r\nContent-Length: 70\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=0; twk_idm_key=bsOZuIxzo1QITdLaxAQhz; twk_uuid_695de32b4cb0f81981e8b018=%7B%22uuid%22%3A%221.2BjHvJJDktnVGP6fgTrZeufmitOf80sgCSIKaKFAi87UzUatvXfidQyVOAkgLIKWIcmDHg1ShEAbLxDtQ3DKl4DWBZS9aQ2JfriZzwlRaGyiNB0Rik7TSOutrqU%22%2C%22version%22%3A3%2C%22domain%22%3A%22account-btcc.com%22%2C%22ts%22%3A1771436906998%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:30 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gbNTM8AQJrQn8KetD%2BsS1%2FeOMxsdqevKOAQp3J07tjLwJIookEwc%2FxtXJfeB93vp4WFda%2BBV1evXcUI%2FmO92MxQcOal0I1X%2B1sQd3erCpP8%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5b1478c4a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7baef91fcce9e1b125fe3a445fdf9221","sha1":"fd9c5484fe484495db0aa817f884f05c5e7e4ddf","sha256":"43aaac3c9aaeabf3e31662b368e3842bed14833b7858a645f8a07d66552ad6d9","sha512":"ed3cc6e17fe5ecdcb957f917efa4ad903e120c2e9ecccb64e709502fde29702fad378886a14513de0d59671d93a5cecc7a2811289c3fad354586e24c766c33a7","ssdeep":"","tlshash":"41b0128143205e1c0fda0904fc20f22055f12f6390541095054dd3df31401444332174","first_seen":"2026-01-22T01:55:34.503438Z","last_seen":"2026-02-18T19:00:25.49018Z","times_seen":20,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/main.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/main.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:47:56 GMT\r\netag: \"28551-649b88ea12700-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 19085\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FLsQ6pApWqWw6zxjoaB1%2B5zpzpexTsbIM6b7AbH%2FHoIlZerLfnnASSsHRj3WmbI5OpcQHHcbeB%2FDwsXMWGqvSablJl8XBXiH9UtwlKAX2Mc%3D\"}]}\r\ncf-ray: 9cff5addfc44a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165201,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a8ce225d4d29c54e8e7fc4f49ee40ce2","sha1":"f5600a2dd275389cdb4a009eb34385d3925019f6","sha256":"93b51841a01798587492a1e3b1bc49db69a3b2333c05f4080acbba265fa24f73","sha512":"372e821b9909318474e6e4ff6cebcb48c53a63af68a87c073043d8a12f07b0089947404903c67611879f35604597fdc55b879b4d772707d1e20378862a101f07","ssdeep":"1536:TtMy3m4Y31svYhBmMdBPWVaCW4pgcg1zZKZKS/csB/uqdhR/RPGPQgHUfq1Wa9Mx:QaDfrAnfuwZ7vzUBGjVIv","tlshash":"46f34365819152865b336b3c7bd08364faa540638b1a49647efea03c0ff16bc25d2f7e","first_seen":"2026-02-18T17:45:32.522022Z","last_seen":"2026-02-18T17:52:15.492384Z","times_seen":3,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/account/vip.png","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /account/vip.png HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/assets-btcc/css/main.css\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kekf54onZyodNgpb%2Fmd%2BmXF5XyEuvCAnFVdENCM9jWbLiFvAru6FW9m3WXuazzqp0VlH8Wa%2FQ%2Fg0peoF4baGbXUgiF3rP2tGAdxshAVeJCg%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5adefc76a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":278,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"881e5373cbdcf03f6f1dcdf9fd9fb8da","sha1":"720162957b0a4c13183cee7cf511b2db9ffacb97","sha256":"36e4830d82a16f632076f3803700cb0088281dd333e02232dbb83792ec4dec85","sha512":"dcdf654a42675fbb9050a1c2b06dc7b5ae24f4da0274dafbcdafe2a09294f8647e26490cf190246f914c484623fc7b12e3eb9e09c9feee2c48ed070375f8cbf6","ssdeep":"","tlshash":"bbd02bae5043a38b5922156039c516c6364c22faa43a85e82dc6d48b529857ecd9ab8c","first_seen":"2026-02-18T17:45:32.544442Z","last_seen":"2026-02-18T17:48:54.252529Z","times_seen":2,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/images/brand-logo.svg","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/images/brand-logo.svg HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/assets-btcc/css/main.css\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906767; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:28:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WVoSW3YsVnX1h81OqeBVrp1ojhMIikhRzqIInnPjbrsYKUutwd4LFVQlMC03MClCR2lTeCNCekYP0eFqGJ3dhL5FpkiCHpm%2FPYm4RS%2Bt3zM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\netag: W/\"1bc5-649b847b33180\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\nage: 198\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9cff5afc4af7a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7109,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2a2c89a596b4d7a21577b6f66cc37f01","sha1":"01f0a988ad5a3788ab83b3253627d35dd0094072","sha256":"0c1156802a992f13b592e0eed693a0c3b613b319c2ebb48a28228c0eb81b81d1","sha512":"cc3ebe8f35fafa32b93af50d8db192c4f2ba417ae612bb1c4d9386082dd2c81b98c583c60ee8bdf3934c919b3ca8563403280a6d43ec4a69966ad1d8f8932f59","ssdeep":"192:85UC/fzaHbdUq1g3WPHXAtPP75uXg0jtwPuf:ZC/fzieq1AeAtPP7wg0pwG","tlshash":"4be1b4f1a78496e0ed06ebf8ce2b15e676273cfd7e41c28843a55d1476211aecdc89e0","first_seen":"2026-02-18T17:45:32.583121Z","last_seen":"2026-07-21T10:14:39.475561Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:27.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/699589c13ea/js/twk-chunk-2d0c8092.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:48:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 18 Feb 2026 09:44:18 GMT\r\netag: W/\"16da80b3ffe54311216593e613e4a685\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 28896\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9cff5afd0892dbb0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5261,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5261), with no line terminators","md5":"16da80b3ffe54311216593e613e4a685","sha1":"e245dc04a81bcba7d4634a74f1cb22c81166e3dc","sha256":"ee57d23376ab3f56e9ddde0904514dbfaaccad43f47a5d73a2d65e4dfbba3f75","sha512":"6f5fb5dc16e934f2c7a1de63eb82e15baff762720afc3210a648f127d5898c64130677dc831d36036cab4b4e1e52783b53f4892d8462a35ba66752f9352c9c5e","ssdeep":"96:zNC9Hqt7pEma7hY/rcKtJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYrLRIvgx43nVY","tlshash":"28b1859af247b456c156225150ef3b1df33a281ca61ccdc4b66565f218784cba077f39","first_seen":"2026-02-18T09:54:55.789539Z","last_seen":"2026-02-19T02:17:55.609231Z","times_seen":84,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:28.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /emojione/2.2.7/lib/js/emojione.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 39460\r\ncf-ray: 9cff5b04e936a9d3-ARN\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"49dda-cp9vjKV4fYl0Ow7X6yf9dkBr+YU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230183-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 1123411\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gTwWbARuHLvb0O5dzuLm%2BhdB%2FuQAsUrAfqOeUACF9gM1%2BZA0YqHIFFeKUDwBMpt5sS7Ex9QgvOVkICbNugZWTEvImV73RdKkzFU%2FkxejCNYD0wT0I0JGlTZFEzdMJOHtwgk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":302554,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (32014)","md5":"3ebdfd5d06617d7d3cf6bf6e5c458085","sha1":"ac433f0c7c8c06dbb26a85d08a47eadcf30d783e","sha256":"a642ac8ca5dc75fc2fa88c4c1d54b6f57f2a27bac6a74e15a5667e78f2af8e0b","sha512":"7ea52d1e4cfb1b61b84f58790fe6e1649d22b1b4b854e45df4b7ecb1b30a6b4e2f6366c794c51f5ce605f8ed0e85f0577dcb7d0a250d3b4a7182c3639edae402","ssdeep":"1536:Q/drlyiQh7fh7RqgwkMTyDUV6HeAIDgI9IKQ/d2ffWifirh3dfEm+E5ove:Q/drlyogMVc6FIKV+ZhdfEm+ET","tlshash":"ab646f7d86506deee994902d86db3b4af9883c0493ed1276f66441cb37ba43a33487dc","first_seen":"2025-09-10T06:37:47.236235Z","last_seen":"2026-06-07T08:03:01.010717Z","times_seen":6744,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":27,"dns":1,"connect":9,"send":0,"wait":16,"receive":2,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/config/api.php","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:29.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"POST /login/config/api.php HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://account-btcc.com/login/\r\nContent-Type: application/json\r\nContent-Length: 70\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=0; twk_idm_key=bsOZuIxzo1QITdLaxAQhz; twk_uuid_695de32b4cb0f81981e8b018=%7B%22uuid%22%3A%221.2BjHvJJDktnVGP6fgTrZeufmitOf80sgCSIKaKFAi87UzUatvXfidQyVOAkgLIKWIcmDHg1ShEAbLxDtQ3DKl4DWBZS9aQ2JfriZzwlRaGyiNB0Rik7TSOutrqU%22%2C%22version%22%3A3%2C%22domain%22%3A%22account-btcc.com%22%2C%22ts%22%3A1771436906998%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:30 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gq5ZVqWj1Isl05WUMdmkU6jQDHLSoioa0yN%2BqXN9bDbobfvOeBtgXbKbZzieLkQSFxCQ0YJNvcxZq66fu4%2FhPL6vFHD90KqWV3trGoidRc0%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5b0b1e7fa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7baef91fcce9e1b125fe3a445fdf9221","sha1":"fd9c5484fe484495db0aa817f884f05c5e7e4ddf","sha256":"43aaac3c9aaeabf3e31662b368e3842bed14833b7858a645f8a07d66552ad6d9","sha512":"ed3cc6e17fe5ecdcb957f917efa4ad903e120c2e9ecccb64e709502fde29702fad378886a14513de0d59671d93a5cecc7a2811289c3fad354586e24c766c33a7","ssdeep":"","tlshash":"41b0128143205e1c0fda0904fc20f22055f12f6390541095054dd3df31401444332174","first_seen":"2026-01-22T01:55:34.503438Z","last_seen":"2026-02-18T19:00:25.49018Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/config/js/functions.js","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:21.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /login/config/js/functions.js HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:21 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 03:08:02 GMT\r\netag: \"1a17b-649ba83aa8880-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 14889\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\nage: 198\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HAnikBKw5rbg1RXpv0T1QU9%2FcoTSD14WVSd1YwgXlLhSbLRbP0NFLCSffY4KpDJfL9peHcEwJxV3Oh57wih7rdzfkqwi8xEfoGwaUkDb96Y%3D\"}]}\r\ncf-ray: 9cff5ad9fb4ba106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106875,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1212), with CRLF line terminators","md5":"75df9763a99addb648f604deee02940c","sha1":"7d16711851ecdbbde541b2de44e7bb8c00d21a33","sha256":"1b29fd3cbcab809fc140733d62bb867fd1a22f4416acb799a75e154f327d84e4","sha512":"a71328bd9fa3289bdff417e436c57a87dd8e1d75da6291ce272b07ce76f2876a3ffe7af8cfdabc362723d88103f6cb7e65dd21db5048dd9e4e71fb1bb7007655","ssdeep":"768:6xAcyT/l55Pbp6AW731TLsd6rjBI96klDwFo:6xAcw/l5Z9LGVs4PBI96uSo","tlshash":"ffa3b46421a506768473c7b6b7b26619fe194253d7028299bbbc868b4ff3c50ce43ed8","first_seen":"2026-02-18T17:45:32.573113Z","last_seen":"2026-02-18T17:52:15.520116Z","times_seen":3,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/config/api.php","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:32.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"POST /login/config/api.php HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://account-btcc.com/login/\r\nContent-Type: application/json\r\nContent-Length: 70\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=0; twk_idm_key=bsOZuIxzo1QITdLaxAQhz; twk_uuid_695de32b4cb0f81981e8b018=%7B%22uuid%22%3A%221.2BjHvJJDktnVGP6fgTrZeufmitOf80sgCSIKaKFAi87UzUatvXfidQyVOAkgLIKWIcmDHg1ShEAbLxDtQ3DKl4DWBZS9aQ2JfriZzwlRaGyiNB0Rik7TSOutrqU%22%2C%22version%22%3A3%2C%22domain%22%3A%22account-btcc.com%22%2C%22ts%22%3A1771436906998%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:32 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QCDP4%2BQyQyYXgCUNwTSkTStXyAHRic2XsrBcz4H9EKMnIohnYzvRgamYHD7CEDBxTs71Z0swDX0t5Xg%2Fojbfe3VIJUCdDKNz7IoJm290lmI%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5b1ddab6a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7baef91fcce9e1b125fe3a445fdf9221","sha1":"fd9c5484fe484495db0aa817f884f05c5e7e4ddf","sha256":"43aaac3c9aaeabf3e31662b368e3842bed14833b7858a645f8a07d66552ad6d9","sha512":"ed3cc6e17fe5ecdcb957f917efa4ad903e120c2e9ecccb64e709502fde29702fad378886a14513de0d59671d93a5cecc7a2811289c3fad354586e24c766c33a7","ssdeep":"","tlshash":"41b0128143205e1c0fda0904fc20f22055f12f6390541095054dd3df31401444332174","first_seen":"2026-01-22T01:55:34.503438Z","last_seen":"2026-02-18T19:00:25.49018Z","times_seen":20,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/a15b68b9c2c83b8c.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/a15b68b9c2c83b8c.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:27:30 GMT\r\netag: \"79e-649b8458de080-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 601\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NKP9uYzg9gmrjSyMIG%2F3eUyHHjfanXkYMi0ebEiAHiCNWdnKa%2B%2F49%2Bdm6wVZmqdVdChvjgVLOod6%2BZVMEBmgpKY2cuTxVAkxWNFSoWG0AkA%3D\"}]}\r\ncf-ray: 9cff5adddc33a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1950,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1258eed9a5fea209a723fab988176156","sha1":"24632b50f205e115fcfbaae899e158ab137a3b7f","sha256":"bc1ad7fdcc66f4c922aed9e051fe95a2d87f90f3aa01d2292f0a33c2a55e8961","sha512":"0580da037d664a9aee28ac5903fb3c22f770b6c3be4176648d281a0c18da0cb40c6c49ac5040ec5738449dcefd234c05f73779e357e3ea5280b09c22df2e107b","ssdeep":"","tlshash":"f3419a2953a601042a7bfe2d3f948642fd5a0073c66461197efa91785ff646ce1a0f7c","first_seen":"2026-02-18T17:45:32.533576Z","last_seen":"2026-02-18T17:52:15.454503Z","times_seen":3,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/images/brand-logo.svg","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/images/brand-logo.svg HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/assets-btcc/css/main.css\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:28:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jwn04tvdcsYqYXgAE75HVVqeYdn2XVKEFF3BexoL3fvDyxy%2Bq1ajWlsaU0boz8b5x2LGZCBgjn39G0Z1Dtk1JDjX2XFsIg1ESijzhf36eH8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\netag: W/\"1bc5-649b847b33180\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\nage: 193\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9cff5adefc74a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7109,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2a2c89a596b4d7a21577b6f66cc37f01","sha1":"01f0a988ad5a3788ab83b3253627d35dd0094072","sha256":"0c1156802a992f13b592e0eed693a0c3b613b319c2ebb48a28228c0eb81b81d1","sha512":"cc3ebe8f35fafa32b93af50d8db192c4f2ba417ae612bb1c4d9386082dd2c81b98c583c60ee8bdf3934c919b3ca8563403280a6d43ec4a69966ad1d8f8932f59","ssdeep":"192:85UC/fzaHbdUq1g3WPHXAtPP75uXg0jtwPuf:ZC/fzieq1AeAtPP7wg0pwG","tlshash":"4be1b4f1a78496e0ed06ebf8ce2b15e676273cfd7e41c28843a55d1476211aecdc89e0","first_seen":"2026-02-18T17:45:32.583121Z","last_seen":"2026-07-21T10:14:39.475561Z","times_seen":5,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:24.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/699589c13ea/js/twk-runtime.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Feb 2026 09:44:18 GMT\r\netag: W/\"3caf120f8a6ffa0907cb67ee74236137\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 195\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9cff5aea99a05621-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2306,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2306), with no line terminators","md5":"3caf120f8a6ffa0907cb67ee74236137","sha1":"004433ba88e26f0a1532dc154d8d56fff80a30ad","sha256":"f67399e89b4d48f7232f6247c3114a42392f4f9acc5983f88f33eb59af8d1c54","sha512":"1dda98136bbff62bd6678ba2002b211458858c411152f63f953adfa86f6c6af38f4b34301a5ca27c5ed9daf487c28d0696e7812a7435e4b4e20713479e8b5e43","ssdeep":"","tlshash":"9541a3d933e4f9a6834328a1043fa026b6353836497be8c0531dd4f5bc78c45811afb2","first_seen":"2026-02-18T09:54:55.754126Z","last_seen":"2026-02-19T02:19:26.89901Z","times_seen":91,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/78663d6631b3cdbb.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/78663d6631b3cdbb.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php?username=\u0026password=\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906667; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:27:10 GMT\r\netag: \"ade-649b8445cb380-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 705\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 200\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bkECqyB7Ebbx%2Bqi6i384RlevC084sALMCc%2F871A%2FmBD2t7D%2FL23U9pvtDyqT%2BUowtumY85UMbmmz9hgcS9mgj%2F7opuheRGTJoAAwFTxki6w%3D\"}]}\r\ncf-ray: 9cff5afafa8ea106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2782,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6b155a88e948c3ee50cef62f324f9fc3","sha1":"442393d9c8e6af54ab6c83f4f5f46f24c5f513a2","sha256":"505e429bfd641204480f5a3c517952d40f6636a31927b6dce24ee29ea5fd537c","sha512":"edc2b05855d9d1913a195a9bf102f83b803423c268843e2dda93aef762fee0bb41e781c7cf6ad6288c4d81df2b1d16d825513688677cd8ffc3ad0f9a7cdd1f8a","ssdeep":"","tlshash":"aa51ab38921941866b72fb3cb7d9f658e6c05853ca3049263e7988580fe86fc61d0f7c","first_seen":"2026-02-18T17:45:32.550464Z","last_seen":"2026-02-18T17:52:15.537467Z","times_seen":3,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/config/api.php","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:27.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"POST /login/config/api.php HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://account-btcc.com/login/\r\nContent-Type: application/json\r\nContent-Length: 70\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=0; twk_idm_key=bsOZuIxzo1QITdLaxAQhz; twk_uuid_695de32b4cb0f81981e8b018=%7B%22uuid%22%3A%221.2BjHvJJDktnVGP6fgTrZeufmitOf80sgCSIKaKFAi87UzUatvXfidQyVOAkgLIKWIcmDHg1ShEAbLxDtQ3DKl4DWBZS9aQ2JfriZzwlRaGyiNB0Rik7TSOutrqU%22%2C%22version%22%3A3%2C%22domain%22%3A%22account-btcc.com%22%2C%22ts%22%3A1771436906998%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:27 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gjz7a90magfDWgZPQgk6ZbxxBqbfXw%2FMK%2BiN0k3T3Tpv%2BQWUOQuYmcAglvvF7Q6lcJAVjDwcfbQ%2BZbrx8Qdy%2FgQLS54QxPy57oWhdIrU%2Bhg%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5b01bc5ea106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7baef91fcce9e1b125fe3a445fdf9221","sha1":"fd9c5484fe484495db0aa817f884f05c5e7e4ddf","sha256":"43aaac3c9aaeabf3e31662b368e3842bed14833b7858a645f8a07d66552ad6d9","sha512":"ed3cc6e17fe5ecdcb957f917efa4ad903e120c2e9ecccb64e709502fde29702fad378886a14513de0d59671d93a5cecc7a2811289c3fad354586e24c766c33a7","ssdeep":"","tlshash":"41b0128143205e1c0fda0904fc20f22055f12f6390541095054dd3df31401444332174","first_seen":"2026-01-22T01:55:34.503438Z","last_seen":"2026-02-18T19:00:25.49018Z","times_seen":20,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/config/api.php","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:33.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"POST /login/config/api.php HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://account-btcc.com/login/\r\nContent-Type: application/json\r\nContent-Length: 70\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=0; twk_idm_key=bsOZuIxzo1QITdLaxAQhz; twk_uuid_695de32b4cb0f81981e8b018=%7B%22uuid%22%3A%221.2BjHvJJDktnVGP6fgTrZeufmitOf80sgCSIKaKFAi87UzUatvXfidQyVOAkgLIKWIcmDHg1ShEAbLxDtQ3DKl4DWBZS9aQ2JfriZzwlRaGyiNB0Rik7TSOutrqU%22%2C%22version%22%3A3%2C%22domain%22%3A%22account-btcc.com%22%2C%22ts%22%3A1771436906998%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:33 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=17uUlncWRkiPUwCFewRLvYNvH48K3zmSvlz%2BFDcF%2Bm0DSOUssuLHFE%2B9%2BkFKiO2lVkkpVGxGWvTyaL51x%2BX3jawu6%2BxXIYPUP3Nowo0fhCY%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5b273c32a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7baef91fcce9e1b125fe3a445fdf9221","sha1":"fd9c5484fe484495db0aa817f884f05c5e7e4ddf","sha256":"43aaac3c9aaeabf3e31662b368e3842bed14833b7858a645f8a07d66552ad6d9","sha512":"ed3cc6e17fe5ecdcb957f917efa4ad903e120c2e9ecccb64e709502fde29702fad378886a14513de0d59671d93a5cecc7a2811289c3fad354586e24c766c33a7","ssdeep":"","tlshash":"41b0128143205e1c0fda0904fc20f22055f12f6390541095054dd3df31401444332174","first_seen":"2026-01-22T01:55:34.503438Z","last_seen":"2026-02-18T19:00:25.49018Z","times_seen":20,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/40b9eb064ea4beaf.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/40b9eb064ea4beaf.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php?username=\u0026password=\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906667; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:25:16 GMT\r\netag: \"27f4-649b83d913300-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 1798\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 198\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wq60c0yt6cX3MjxYdvNC3k8j0qO6DkZZJxIoEP%2BQBOJQrJOyYtrUJ4ctdsCc2LFDd00prEZTN2hVkOQ0XOA%2BkdFuwAWemUmbIyZ8cw7ezWg%3D\"}]}\r\ncf-ray: 9cff5afafa90a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10228,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"3fcf224ad5618a4017226ebdfb99ca62","sha1":"cfb6d0e3a00811534465df666390e9055b7d2de6","sha256":"21e751996b34e62cc7980808d4afc49c67e67f603c6ef0fd70d86ba850ba2e07","sha512":"8d7ce11ef6f1875b21547f20cdf1e6a4f9af06d4185f4352dfe4412f13cf410a67ce2dba5b593d65a58001a35586751076c334dfb8001a68903ac29a5f2dd945","ssdeep":"192:CiZ7PG4KCLNw53m1jLWqndK6janACBYorv80zHBh3bS1iyCJNUm:F46yYC0UhX","tlshash":"2f22bd31a2110442aa33bb3c7b908344f5a160539f5289697ef7a1784ff59fcb192ebd","first_seen":"2026-02-18T17:45:32.524462Z","last_seen":"2026-02-18T17:52:15.539026Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:27.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/699589c13ea/js/twk-chunk-4fe9d5dd.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:48:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 18 Feb 2026 09:44:18 GMT\r\netag: W/\"8249fafc9a9fbe0f75d4bef0aae2305a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 28897\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9cff5afcf88fdbb0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1000,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1000), with no line terminators","md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-07T14:15:53.948604Z","times_seen":49582,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/config/js/statusUser.js","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:21.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /login/config/js/statusUser.js HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:21 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 07 May 2025 20:15:08 GMT\r\netag: \"b8a-6349163b56b00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 1079\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\nage: 197\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mWZOEQNOnfnIsutqbKvGMoFLfI%2BiFrNW%2FYqPIT5bwLyKO8S9%2Fx8eVz2wOuLvlHCIKd44L39F6tvo%2B%2BxbBVFIv4%2FYLfrob0cib%2FFxnp1SYeg%3D\"}]}\r\ncf-ray: 9cff5ad9eb47a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2954,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"4eea9a85d3b04c9da41465ed9e3021b2","sha1":"c8abf2a12d9239fa6224dc6ca7e2ad505af88049","sha256":"4d7783b74b3cad0b6e43a848c234d9abeccbf63d1200401375f30b37b5019f75","sha512":"92c5a9a259e394143d58fe22ab63a1a8e120a74781e65f260e80084241f15402f9cb8db3e5f6dd6385b9fe4572c8ee54b402fb2f1ed99eb19cce3353cba40af1","ssdeep":"","tlshash":"665144ca541a21358cb2737a6b5b9505ff0601333b024bb5bf9c56c01fb2466866ef9c","first_seen":"2026-01-22T01:55:34.528893Z","last_seen":"2026-02-18T19:00:25.484678Z","times_seen":20,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/images/gift.png","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/images/gift.png HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:17:48 GMT\r\netag: \"5a25-649b822dd4300\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 23077\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fAbKKFio%2BMGTL72LpELIL3h%2FjMV91kFz%2BoUw3K8o%2B4R2Mkq1%2F4n2NJyBG5ZU24X%2FQLe6H%2FU9eHKBXByFSalb6CXh%2BmKlj3vnA2HhZjj%2BPLI%3D\"}]}\r\ncf-ray: 9cff5adeac64a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23077,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit colormap, non-interlaced","md5":"48dc20c88dba8307f55dc98afc7e77f2","sha1":"2db7c0aac49b0d06f70926b634e04cd048759d8a","sha256":"6f7bc28ded2c79a2db3391a8bad50f5984c184fbfdf4abcb53dc6de30f23780c","sha512":"41ee8e5fa70554177d6bcd413db2e689778e27aeb6a2d71fac3798cdfa33bfe9931ae89bf49b66c81f086c1d1e81e53181acbb617a9b015595b0cc5f6fefb578","ssdeep":"384:5fnVksvnXCjqoivyV4Ekw2ihjOdRDMHkl06HXLYo4gb90FQJDw1okXRX0yuzx:9XfC2hqD2iVUDeO3LYoxB0FPokX2yuN","tlshash":"84a2d163db6db818e81593c1852fcd60107c36c3746d92f3456c239ebf6962a7ad8a31","first_seen":"2026-02-18T17:45:32.574785Z","last_seen":"2026-02-18T17:52:15.531173Z","times_seen":3,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/icons/icon-rocket.svg","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /icons/icon-rocket.svg HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/assets-btcc/css/b412d95c3e3e8d5e.css\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906767; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TbjoIgU3HwZybd9c%2Fo1vdd9chQwrLN%2FDTrBvCOozJ%2FOG%2FzS09gDtACIWhjqoICgNyFrSX7QPdh8wfvbILWYbdS3K%2FvvdBnyG9WSG2aL4Keg%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 4\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5afc5b24a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":278,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"881e5373cbdcf03f6f1dcdf9fd9fb8da","sha1":"720162957b0a4c13183cee7cf511b2db9ffacb97","sha256":"36e4830d82a16f632076f3803700cb0088281dd333e02232dbb83792ec4dec85","sha512":"dcdf654a42675fbb9050a1c2b06dc7b5ae24f4da0274dafbcdafe2a09294f8647e26490cf190246f914c484623fc7b12e3eb9e09c9feee2c48ed070375f8cbf6","ssdeep":"","tlshash":"bbd02bae5043a38b5922156039c516c6364c22faa43a85e82dc6d48b529857ecd9ab8c","first_seen":"2026-02-18T17:45:32.544442Z","last_seen":"2026-02-18T17:48:54.252529Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:27.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/699589c13ea/js/twk-chunk-2d0da3af.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:48:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 18 Feb 2026 09:44:18 GMT\r\netag: W/\"09eb16f53b45faa5c349645e82f9b4aa\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 28896\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9cff5afcf88ddbb0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14213,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14213), with no line terminators","md5":"09eb16f53b45faa5c349645e82f9b4aa","sha1":"e3265071a8833ca14ae93c1c49cc196518b7a4ba","sha256":"5ef2c831d152b3a35157daf51676f0daee8bfa0dbf51978449647ac530457d3a","sha512":"6965366a9af259e44abb20d7bdb5aaf8d0f15f8540e65e88cabc3c2536a67c02ad2e79ca7a2eb64e01a6f0f2ec1e1f0801d7c77c7e5e3a0aa7cbabee991a9d8c","ssdeep":"384:UJw/U5YK8Hx9KJvThWazJbUZDkM0kWEYPk6F+UtKM5eH:6+9KJvThWazJbUZDkM0kWEYPk6F+92eH","tlshash":"2452c6a7b2a4782d42379712308f3205f33b7d45b215da19f36edcea4aa84c16056f3e","first_seen":"2026-02-18T09:54:55.771679Z","last_seen":"2026-02-19T02:17:55.608687Z","times_seen":77,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/images/b0089ad8-edd6-44b3-bf2f-b682147e380b.png","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/images/b0089ad8-edd6-44b3-bf2f-b682147e380b.png HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:18:28 GMT\r\netag: \"d044-649b8253f9d00\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 53316\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Hos9dbcJAdygYlT54fsOxn3usL9gFzeR9YPcaAc%2FMCxMqAfci4mS2DSSZcVxM98vooMM3zUzrF6j37o8LYXt9GDjFFPzy44WZ2WZLmzzCs%3D\"}]}\r\ncf-ray: 9cff5adf0c77a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53316,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 960 x 380, 8-bit colormap, non-interlaced","md5":"6a0b3af015e1057b030748bb8f630a8d","sha1":"a710bcc84c8067d785f7f88da9af77d7d4583740","sha256":"931eb82cecdaff79e0fbfb032cc9fff3a958309eafc403dc79a842da9fa4537f","sha512":"4f23edf764af7e1edb67699ab3103cdb23b29d392969bfcdb30349da0f04059d97a9644074ae700ded5ace368e87a549834ef4f1ace704ba06f39a836e788a9d","ssdeep":"1536:+5tgQ15NBmDanmBLNvU9COJjmdLNgDewy8nwx+nJ:ch5NBnmBLNUwQjs6C/5x+J","tlshash":"7333027d6de090bb5c739b0326a54bc399bd67aaef79c6060313de5c893338a0111f89","first_seen":"2026-02-18T17:45:32.576299Z","last_seen":"2026-02-18T17:52:15.493247Z","times_seen":3,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:24.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/699589c13ea/js/twk-vendor.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Feb 2026 09:44:18 GMT\r\netag: W/\"3b341e35b39f6195793ecaf5db7c1d63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 195\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9cff5aea99895621-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82913,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-07T14:15:53.946879Z","times_seen":66388,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:27.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/699589c13ea/js/twk-chunk-2d224aff.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:48:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 18 Feb 2026 09:44:18 GMT\r\netag: W/\"2db7120711b243479906d92103a92b5a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 28897\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9cff5afce888dbb0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18392,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18392), with no line terminators","md5":"2db7120711b243479906d92103a92b5a","sha1":"2aabb27600631801b44f12fe3b75b4e8f2e5166e","sha256":"cf58bd8379a510ab4ab4f48b061f7ba9219e0b9056d885503dc2c97757d85d05","sha512":"dde667091369cf9fe7122a609b7213a8e45244d119eb579e5a73d1079da80ffd1c92c2f35baa9e27de41342eff73db81b1f7ab822b49e7655f5fa20341d348f9","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCOGN//h6LiJq:SzP2DkSLi8","tlshash":"50822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","first_seen":"2026-02-18T09:54:55.821819Z","last_seen":"2026-02-19T02:17:55.702126Z","times_seen":84,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets/js/general.js","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:21.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets/js/general.js HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:21 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 04 Apr 2025 21:34:52 GMT\r\netag: \"245-631faa8181700-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 333\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\nage: 198\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kUZ5QiXqtDK9yLVaVMWn9OylBDW7L1yPZG8ESc51AMql4%2BHYhZwE5tC0dU%2Bnk7Nvl53vd2ngzAFwPiOfYH%2FhLgEeEIH1hVzFh9nVXceA104%3D\"}]}\r\ncf-ray: 9cff5ad9eb44a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":581,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"968bd279ea28a3f0c551767db373de38","sha1":"695e83c3c510438d00496a31b5127762c8b9b589","sha256":"f3901dd10c3400d65452e3b4c2d956f050855b9d02b4f923c65564d1b6e7ea7d","sha512":"ac5f0f5100daa1adf56bfa5ed279d3efd4b7d4b6cd04b1751f4f11c7f790297d55982ecdc91491355ab8cf72f836e6862e2b89b790544e8088bf266b00e72bcb","ssdeep":"","tlshash":"71f0e94e025593368a7243a25e518df9dc901363998254223dbdd3884fb5322af74f85","first_seen":"2026-01-22T01:55:34.550071Z","last_seen":"2026-02-18T19:00:25.479703Z","times_seen":20,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/312b33c43ef3e4bd.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/312b33c43ef3e4bd.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:27:06 GMT\r\netag: \"4002-649b8441faa80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 2075\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L9YPWmwErbYuQ6wo4Qnv8M0hsGHj9KnSTYlPnnhs0xrdaW8Ixl0ckeeKGCWYseV7zUFnI1kxFvJV85Npc7Q4gZfsP2x40Mdayh8pD%2Fww6zg%3D\"}]}\r\ncf-ray: 9cff5addec3ca106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16386,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"802cc537d0ddaaad1fbb431d7816bf88","sha1":"bae608934a70f92379cf29f6583c6ddf29120c0c","sha256":"3ab84e89a56f29a9b6c48698fc683875c2450f4092fb4402378e614716780ad6","sha512":"030170796671d1a39583375b0878f65af084664ac5188caa4dafbec7fe5da268a78cd80c26140c7b4a4796fde68bcb22d6c62fb17ca7ed38fbadf207ea39c6f0","ssdeep":"192:L3RcVXdAAn+UUP3egbXHjH0na3/mMHuHucCPPVz65TeBE1INKG3wrWzG8kDd7qu:bnNV8","tlshash":"f3728c04427173ea6e230d3863fcd168e56590d3cadd5d207aaf4c5c8bf2b6a1cb26b5","first_seen":"2026-02-18T17:45:32.539294Z","last_seen":"2026-02-18T17:52:15.497265Z","times_seen":3,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/config/common/json/dataCountries.json","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /config/common/json/dataCountries.json HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://account-btcc.com/login/exchange/index.php\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 23:34:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6L%2BEDVMku0Xu6UGBhxdxrJhaj5NYdirEzOc3w%2FQ3gjhiJhqitfbdRjlh5dYsgwx36ULjxFVXW%2FDQL99YYkJ9kZlNG3DWpbcbqioIdcr7VYc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\netag: W/\"2db81-6475c084b9b80\"\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9cff5adedc70a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187265,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d4ec7611ecd4e9d239d5a1fc14d285b1","sha1":"213cce38ddd6ccf921e06366f739d839abce325d","sha256":"ec14dda58ea83ddac379b9fdf1eed465b28eb47a71cc6c985e60707a005b096c","sha512":"b7efa5ca7c8f69aed0a5bebef61ccb6d03fa166d82ac4130f6f8d04a971c5b4a64e5aa9a8e922cc281968aa7b7f32153887a50040559daa8020dafe24b56e9bb","ssdeep":"768:yydBWYpoIHuJR5tA3z9LNA1bw4JnBewzecNIxfo4l5cZLFw/PSLS6qIq3Trz+Svm:yIR5Ob7ZvNQbb+wRWIti8N5gd","tlshash":"6104cd3bca1c4ea3f9f5529030966d0af1207b6f1898ccb77bfe4a4c5fbb411a05519a","first_seen":"2026-02-18T17:45:32.527408Z","last_seen":"2026-02-18T17:52:15.502175Z","times_seen":3,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":308,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/fonts/btcc_Medium.ttf","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/fonts/btcc_Medium.ttf HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/assets-btcc/css/b412d95c3e3e8d5e.css\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:33:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SAhij4YOEvUetUPUSSDUdulsQ45cIp%2Bo8hHCJ%2FD2c5U9u3Eim3VHtPBMlRKctdZDCWF2IMzdDZ%2FmP21F%2FWlIxAbe0%2FXM%2BKmaYHQfbR6vnuk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\netag: W/\"6740-649b85a88f880\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\nage: 193\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9cff5adf0c7aa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26432,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"FFTM\", 33 names, Macintosh","md5":"9e272cb1411082a35e61f11849b15ffe","sha1":"d9c5b9704e0e2d4b987ad31ad0e932d75918d24e","sha256":"47101f24a040f20bdcc342ff5ed5563132a978bfd73cec252897d4fd2e1a26a3","sha512":"7ebeabeca467e332777383629adf7f6c6150eddda07b9f7864bdaa7585cb27121123bdcf6e8a44257fa12257c437c74c5b1f51070f1f8a9b4d45c964b2657618","ssdeep":"384:H8hvwk6YorlrgZFIIBvIphml30M4QBQ8Bjoc41Dz/e/D4SoV+pf:H8dwkBulrgZFxF0hml30EBKX/4K+pf","tlshash":"1fc20932b3955723d5232b38df66d3309332f4227fab130a72444916bc879e89e76769","first_seen":"2025-09-29T15:51:45.332403Z","last_seen":"2026-07-21T10:14:39.639931Z","times_seen":8,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:24.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/699589c13ea/js/twk-chunk-common.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Feb 2026 09:44:18 GMT\r\netag: W/\"ac72d89379507f6b06d84ccfd2d39b67\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 195\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9cff5aea99935621-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":240941,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458)","md5":"ac72d89379507f6b06d84ccfd2d39b67","sha1":"e7014927ac023a3ad7bae95299f87833de9f227b","sha256":"2571059c4df4796fbb1bb18ec53903812b113e2cb88873e0d8bc800a95e33075","sha512":"da5b5c4d5383a12f65c75fe8574f9dc1472f652b2920cde5ab3092cb330d741f283aeb6db722dfc1dff8e302b3ed7f385cc4992b06eb53f8b39cf33a3fce569d","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fOicErQYIMPdLMz9o115:kyWFW1W+fM4fikBLMz9215","tlshash":"b334c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","first_seen":"2026-02-18T09:54:55.781762Z","last_seen":"2026-02-19T02:19:26.971381Z","times_seen":91,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/images/gift.png","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/images/gift.png HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php?username=\u0026password=\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906767; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:17:48 GMT\r\netag: \"5a25-649b822dd4300\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 23077\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 199\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wKR9rZzytxvhNldfzwzSl%2B1A%2B5XMxa0OHSl7HeK11l%2BQRiDSXX7EgCWHNkeMRVrzx16q8nN%2FnqWfqMWEaIAd0TgFkHlOkG7VFzUlb7kkKug%3D\"}]}\r\ncf-ray: 9cff5afc0acda106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23077,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit colormap, non-interlaced","md5":"48dc20c88dba8307f55dc98afc7e77f2","sha1":"2db7c0aac49b0d06f70926b634e04cd048759d8a","sha256":"6f7bc28ded2c79a2db3391a8bad50f5984c184fbfdf4abcb53dc6de30f23780c","sha512":"41ee8e5fa70554177d6bcd413db2e689778e27aeb6a2d71fac3798cdfa33bfe9931ae89bf49b66c81f086c1d1e81e53181acbb617a9b015595b0cc5f6fefb578","ssdeep":"384:5fnVksvnXCjqoivyV4Ekw2ihjOdRDMHkl06HXLYo4gb90FQJDw1okXRX0yuzx:9XfC2hqD2iVUDeO3LYoxB0FPokX2yuN","tlshash":"84a2d163db6db818e81593c1852fcd60107c36c3746d92f3456c239ebf6962a7ad8a31","first_seen":"2026-02-18T17:45:32.574785Z","last_seen":"2026-02-18T17:52:15.531173Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/fonts/btcc_Bold.ttf","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/fonts/btcc_Bold.ttf HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/assets-btcc/css/b412d95c3e3e8d5e.css\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906927; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:33:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iyvCJLVxWDmSHLyYnnscoZc%2B284AVZmYK04sFTkf7%2FamPqHASBszfEBLgevi%2FxEdljGFbvVHuON45iiObPm9sTMEDACR%2BorRds1t3jr4iAc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\netag: W/\"6620-649b85ac60180\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\nage: 198\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9cff5afc6b51a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26144,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"FFTM\", 27 names, Macintosh","md5":"9f2aba403aa9713019523d57fcd5b08e","sha1":"94521c08cbaeeba7729eafe75651b51d52c1e81f","sha256":"1721550309a1d4b8b1b108fb9f02e9d11231b4cb926d5a01280c978fcbdcd62a","sha512":"62942f8bbab369aaf97fbd83b7f846cade43c6d0aaaa3b2116305d5cd5f2e89f86031942a4cf1a19ea70aaf9b67185410cbf085c55d67633af4b5810100ddca1","ssdeep":"384:C286EBVATEv+u9XnINg4QBw5DAcLrWNmPFtCO:C286zTEGuRSgBwNAcLrWgNt/","tlshash":"28c23a72f3a59716c52367389f52e330ab71f8227f6b530a72546911bc87de09c323a9","first_seen":"2025-09-29T15:51:45.32549Z","last_seen":"2026-07-21T10:14:39.651177Z","times_seen":8,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.btcc.com/en-US","fqdn":"www.btcc.com","domain":"btcc.com","tld":"com"},"ip":{"addr":"172.66.43.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:27.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 01:27:45 GMT","end":"Wed, 29 Apr 2026 02:27:33 GMT"},"fingerprint":{"sha1":"12:F1:F3:33:29:32:75:1F:B1:90:CE:DE:1E:D7:53:20:3E:72:9A:27","sha256":"71:28:8E:C1:28:91:68:92:DA:D9:5F:72:D7:BF:FB:CC:72:E1:2A:32:16:12:21:04:79:18:DB:BE:5F:51:63:96"}}},"request":{"raw":"GET /en-US HTTP/1.1\r\nHost: www.btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://account-btcc.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:27 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-nextjs-cache: HIT\r\ncache-control: s-maxage=600, stale-while-revalidate\r\ncontent-security-policy: upgrade-insecure-requests\r\nset-cookie: referer=https%3A%2F%2Faccount-btcc.com%2F; Path=/\nlang=en-US; Path=/\n__cf_bm=FNNe1ygVf26H8i28aBEPggE8UVY_.qBZjc9lStzW1R8-1771436907.2411757-1.0.1.1-eVH2fnwOGJlmsU_P3jc3z1VvBmHF3rrkjtW8CbF.2I3z3ltC3RxQd1QQhY7TuIXk4_4pZOMOyPiTUuBH3aWMyNWcGOmNmlIFzLL0OSAJIzQjb1NPlQUjGtCWJZAniVrE; HttpOnly; Secure; Path=/; Domain=btcc.com; Expires=Wed, 18 Feb 2026 18:18:27 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\ncf-ray: 9cff5afe4ef75a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T14:07:12.2636Z","times_seen":17762617,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":220,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/00fb4f24664bef21.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/00fb4f24664bef21.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php?username=\u0026password=\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906667; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:20:24 GMT\r\netag: \"1169-649b82c29a200-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 989\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 198\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OD2B3d1WpcB%2F708Ezcqa5zbZvV%2Bd33Rfv9zz%2FvdX2THgsg4MWqH7%2BnPgxHQP1sKRuhBLYLkqYvOmgGc%2FfTtvnIaDAgxnNj0XOBSHlHps6WY%3D\"}]}\r\ncf-ray: 9cff5afafa8fa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4457,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"cd5fd98c550e5e4828126e0ea713e1c8","sha1":"922e978d8488c73e4cb849174fe94a65b7c8dcda","sha256":"f9740b37a44fee17df732792ce961e06e2e22e340e4cd76754d36a66d7aabc32","sha512":"e0a20717abc31cd2e00ff4415c02190c7d289f9a0d3c0f97081aff851f681ece651597831124fb06138f9d57417897ca017dc8e430f0b74a4a7c19f286b9b75e","ssdeep":"96:LealD1ydSs/nDRbPq/RCv+sSbwsnqsVvD5Pdh/khmC9y:aC1GSsv17Fv+sSMsqstSN0","tlshash":"1e91df31965164825a737b7c3b910364ea7450278795053dbafad0780fba4bca6c3ebc","first_seen":"2026-02-18T17:45:32.569149Z","last_seen":"2026-02-18T17:52:15.490157Z","times_seen":3,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:27.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/699589c13ea/js/twk-chunk-2d0d2b7c.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:48:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 18 Feb 2026 09:44:18 GMT\r\netag: W/\"ecc9e5cf090bf5602a01763e2895acad\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 28897\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9cff5afce887dbb0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10938,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10938), with no line terminators","md5":"ecc9e5cf090bf5602a01763e2895acad","sha1":"1d07eaeecb0a31f0d95363694e803282518f81a3","sha256":"1cb6c04d780fb838f64fe8bad72bbc16ff24e2466f9ba3123471321f8342cc0a","sha512":"9ace38dcdfd09222ce1f2536d8e4acc781b0055d6ae35486922b86baa540befc98bd9a5bc67bb00b0ef09b9da16ec97b1fe3b2b676b1403cde8eb2c13981870b","ssdeep":"192:0CFny7CpmxwbZlR1cwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mChZlRNr40v0GF/LvV4hwsR","tlshash":"073295b7e0a1107ea316871c506fa610f61f6c8ab2161da6b67ab46f900ddcfc065f7c","first_seen":"2025-11-28T06:07:28.918411Z","last_seen":"2026-06-15T21:26:04.407385Z","times_seen":26443,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/log-performance/v3","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:27.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"POST /log-performance/v3 HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://account-btcc.com/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 95\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":95,"data":"{\"logData\":\"{\\\"socket\\\":547,\\\"register\\\":0,\\\"widget\\\":5805,\\\"script\\\":3358,\\\"download\\\":2447}\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-wptn\r\naccess-control-allow-origin: https://account-btcc.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Wed, 18 Feb 2026 17:48:27 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9cff5b01393cdbb0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"fda44910deb1a460be4ac5d56d61d837","sha1":"f6d0c643351580307b2eaa6a7560e76965496bc7","sha256":"933b971c6388d594a23fa1559825db5bec8ade2db1240aa8fc9d0c684949e8c9","sha512":"57dda9aa7c29f960cd7948a4e4567844d3289fa729e9e388e7f4edcbdf16bf6a94536598b4f9ff8942849f1f96bd3c00bc24a75e748a36fbf2a145f63bf904c1","ssdeep":"","tlshash":"0e3000000000000000000000000000000000000000000000300000000000000000000c","first_seen":"2023-04-06T02:18:46Z","last_seen":"2026-05-10T02:19:39.188302Z","times_seen":38514,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/config/js/controlPage.js","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:21.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /login/config/js/controlPage.js HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:21 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 09 Jan 2026 21:26:10 GMT\r\netag: \"4a03-647fb2c8c0080-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 2863\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\nage: 196\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8FeqBmdN%2FdhFVA2KWkFSDTgYJWgh7Vgl0v5Y%2FoGLHnxR0NREEXc10JPldqPr2fnDRHGGT7qZ7ij6nQJSDhPb43Vkt1ZfVONJefF06Vc3LgE%3D\"}]}\r\ncf-ray: 9cff5ad9fb48a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18947,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"f6f98ddd91673b5d414bbf958cd8376d","sha1":"de7e3b6e2e9782908ae5974a98a3c17b514cc13e","sha256":"c8ed585fa5d4efc8759b546e8a553afb6833070f2c84080237dbcc29b6db01ad","sha512":"3fca9ce955b6e2b3a74871fe099232b33cf0c199bdc14c16d7755b2b35f0349eff0c956e2bd617c0abcb2d7a8854e45f9395cbfcbd4fd454c66e6a5191bc5f64","ssdeep":"192:+3Bk3XrQVy7qdvcGGESASNKmBxhSWmndWTNt17qHIaAUrxM3oidYgFi26YwTqpp0:nNKm8memRT2ye0K1","tlshash":"c9825c443aa977ba14740a1ee9500426c4095e426d019e8ebb3cbfcc7fe58997dfe9e0","first_seen":"2026-01-22T01:55:34.554158Z","last_seen":"2026-02-18T19:00:25.497434Z","times_seen":20,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/f4ffb5a2b37f7c3a.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/f4ffb5a2b37f7c3a.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:28:08 GMT\r\netag: \"18341-649b847d1b600-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 11704\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UEfIgZcSDpxZiCGLi4LLO7josxZfcry0PX3W5NJAZfYjC%2FnJC7GD1fjGmWX6HAq5uMCOmeBODLYPr5LXwFpsr63b86fjhm4JXlKaRrRGl90%3D\"}]}\r\ncf-ray: 9cff5addcc27a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99137,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"cf22277c0076ffb5115fafa6ab272148","sha1":"89f064653af44efdbdd64c6b4377c9dfc13d2d5c","sha256":"0a475a501a28a43e5b601d16d9aec97413094952acc54f8ccf048a3e72353ec1","sha512":"ef1e61fd67c48c4c87ca640ba22d2bd163f98ec2f6775228b76bf8852f66c9cd68e0031c6fab29d7e7abb79544b1be085ccbfaa8eaecb34e670214d5c4425c7b","ssdeep":"1536:TtMy3m4Y31svYhBmMdBPWVaCW4pgcg1zZKZKS/csB/uqdhR/RPGPQgHUfq1Wa9Mg:QaDfrAnfuwZ7vzUBGb","tlshash":"57a32ca595d250425b737b3c7b9147a8faa110234b1b89647afaa03c1ff11bc61c2f7e","first_seen":"2026-02-18T17:45:32.556432Z","last_seen":"2026-02-18T17:52:15.515758Z","times_seen":3,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/images/logo_google.svg","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/images/logo_google.svg HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/assets-btcc/css/40b9eb064ea4beaf.css\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:24:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YhMGP0Qz%2FnQe8X0pEQahJFxLG4EdGpw3YBcSQVLTP3hF0OrbpkSE7dMnb7BS3sjVFYqc9TWuTU7k2iBAaSuWflGik2dmEWYC9BmSG7yHbC4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\netag: W/\"ba1-649b83af1d000\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\nage: 193\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9cff5adf0c78a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2977,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"29dde85ca8ca0643e41d5c727970c837","sha1":"80be442bb941ef07b4bda23805a5e61733488bc5","sha256":"3d5cc6ea662614bfd42ae06ac271a43743cd96eae4e3d2ad1897558b710b24fe","sha512":"2360e0fa9a4c0788cbef67183b2a982ab46ee9e2050539734f30a39ef0941de314750cd0857f1715d80947cb1af46ba6730a5d96e8f82c9ffb3cc2eabb2c32d7","ssdeep":"","tlshash":"855134d423f8a1b6f109cb98aaea7856563c349ba2d4c488b98c6959ff224fd000d543","first_seen":"2025-06-23T21:53:12.052962Z","last_seen":"2026-07-21T10:14:39.417462Z","times_seen":8,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/cd548f73939393f3.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/cd548f73939393f3.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php?username=\u0026password=\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906667; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:27:38 GMT\r\netag: \"483-649b84607f280-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 359\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 198\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0d4KSmg4plJfsS%2FO9tSNdTIoyMkkY4zevVw%2BbJg2Stp0YhdGMUnG7Ip3NN0MSWFUUYbKB9Lz28nKdmh93UgmJLCfqvJpthyXtZhaxTruZZk%3D\"}]}\r\ncf-ray: 9cff5afafa8ca106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1155,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a2ab1bb6a8894265576ed4dba2817138","sha1":"4df4a0d9c301407ab489eb86d37da9e29464d7df","sha256":"4f5ba90608b52a8b39aa8f55870df71529c805a1aac1cb5fce45de537a3afad4","sha512":"7a41834093d5969753864fbe0aeb1deed44ba076880d23fc62fd4f8e6aeef1eac4fea3275dc13925dc3ac93a7f9e0bf383a7711c8c57019d5071217566318bce","ssdeep":"","tlshash":"c4212930951901d51933fb5937119a94f4dcb0034a3102367ff3a2b60fa96a85553f6a","first_seen":"2026-02-18T17:45:32.523208Z","last_seen":"2026-02-18T17:52:15.482112Z","times_seen":3,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-chunk-2d0aef27.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:27.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/699589c13ea/js/twk-chunk-2d0aef27.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:48:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 18 Feb 2026 09:44:18 GMT\r\netag: W/\"3b00225fd03c07e8d607099869140cd7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 28893\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9cff5afcf88adbb0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11888,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11888), with no line terminators","md5":"3b00225fd03c07e8d607099869140cd7","sha1":"302f23bfcd6045cad5017d9d97eed74a1e1ea199","sha256":"bb6e98f7da80a04797b6ec965370831385751ac35dd4e762afdf10ff02a02143","sha512":"2354995cd29ff820e2d08971678dbdeccbba3e701168ed19891a7fd99b4b87fe9448a6cdff05762af3a676713614750eba13ad49d50f904280aaaf13f2ac0ca6","ssdeep":"192:0H9Ma5RIU9HkKRU0Ve20lqXvtsTBkpfCNmeAhbKqxK4ILZvUZaUZSsgM:K5b9HkS316xAFKpLZEh","tlshash":"9132a3c6e8c7b9564227160451efe128f73f2a94771adc18f0a895f34a948c3507bfba","first_seen":"2026-02-18T09:54:55.785941Z","last_seen":"2026-02-19T02:17:55.696897Z","times_seen":71,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:27.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/699589c13ea/js/twk-chunk-3ea2c7ce.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:48:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 18 Feb 2026 09:44:18 GMT\r\netag: W/\"52698c6dc96b5f2bd13e8f921334e398\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 28896\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9cff5afcf88cdbb0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5504,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5496), with no line terminators","md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-07T14:25:25.188162Z","times_seen":41985,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:27.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/699589c13ea/js/twk-chunk-7941cc06.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:48:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 18 Feb 2026 09:44:18 GMT\r\netag: W/\"09a6b2a4fc1400ec37c1115e6aa1670f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 28896\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9cff5afd0890dbb0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53530,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (53411)","md5":"09a6b2a4fc1400ec37c1115e6aa1670f","sha1":"d703fbc76276de75b56fad5c189fb663146d116b","sha256":"59147272a66366aa00b1f3771a23f360ee90c3bcac88ad31f59d29562b2d3c28","sha512":"2af2fecb20cad761430bd295a3e8846ad7404f20c9610dc8e20010e4d941b9067a192e700a964b92fccd2289ae4a10eb0e2ae81db8323b49bc3c0543dfe0e457","ssdeep":"768:Vlxfu8+HYUmI+rTRWf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK43:xfurowf20UJWfO+Et7GZrC90k","tlshash":"a533c8c9b2d6f4258763632130af3006f27a4964a81dd155f334d9f6b9ece48a227f2d","first_seen":"2025-11-13T12:40:48.539817Z","last_seen":"2026-06-15T21:26:04.427415Z","times_seen":34009,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/css/max-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:27.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/699589c13ea/css/max-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:48:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 18 Feb 2026 09:44:18 GMT\r\netag: W/\"7c8224daff490314bbee102edaf64029\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 28896\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9cff5afe78dfdbb0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100307,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7c8224daff490314bbee102edaf64029","sha1":"13aabbb4f10305443e0fbb19c55fd27c149828a6","sha256":"a3652c70ae4477871298cf7fec970ce38a1a5f26a814c06b72cbbafa9c6f3298","sha512":"4a1ac844d0cfc147baefde211336f72422efaaa9c92b4e3a150e434aa3bcd0ca3ab49c34aefca46bed94139738c01ec1af989beb50b48dc747faef0cb8a779b0","ssdeep":"1536:f/Uifm7kUdwddCri1iLc0Lg261F2BBCrikauV3cGiH27PNWE98MGfU0nPROpmi0U:xauVLmi0V0d+tKaK","tlshash":"dda399b2e56710cc7363c22692c1faac1029e370c757caa6f827767d4bc25963562f9c","first_seen":"2026-01-16T00:46:03.978063Z","last_seen":"2026-06-15T21:26:04.429831Z","times_seen":27805,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-18T17:48:20.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 18 Feb 2026 17:48:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nset-cookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: /login/\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EGjSzGu0vPrb3U1Ux%2BcqTKl%2BObCMsuQth00gHFKbBhWMlUc8FphA7DJ%2BuqaJ%2BY7QaQvZa09Jsa7NpCrixDjaXkGpbJnOW2wsOMJvlBc7zio%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9cff5ad359e5f375-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3128,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T14:07:12.2636Z","times_seen":17762617,"resource_available":true,"data":null}},"time_used":765,"timings":{"blocked":37,"dns":1,"connect":8,"send":0,"wait":688,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:21.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 18 Feb 2026 17:48:21 GMT\r\ndate: Wed, 18 Feb 2026 17:48:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12137,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"7fbc57b14bea8d6561fdb50fc9c3008c","sha1":"9c9ed86aaf4ca655f083c9c80db324d053d3dd11","sha256":"d90d7d2947e295cba230edef392df55e276c2f3c87e04908d093aeb005da805a","sha512":"d70400de88d9d540ba4e871b2c2c4b997f81bdf1765150d65c2ab18a959c9efa4f910735b3873d43e1eabc646c078533972106c111a4838357f866b44cf57c40","ssdeep":"192:+foOfcfLf9L5fMfgqvfZbqGIwV49fOnf+ofjCXXS2asrqAnbqGIwV4uxzBY:+QOkTltULv1qY49GnDu6SqY47","tlshash":"9f420c910417144096835dd233de7e34ee0fa6616044c0baabfd9bdbeecad69a3b435c","first_seen":"2025-09-17T08:42:41.023406Z","last_seen":"2026-08-07T07:58:57.438762Z","times_seen":7479,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":68,"dns":1,"connect":11,"send":0,"wait":23,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/192496e08f9d9515.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/192496e08f9d9515.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:27:28 GMT\r\netag: \"9f89-649b8456f5c00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 5300\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mvQ%2F2flfzLBhPNEdqmdpilIE3hgR6obhvlGVERU4%2FikOux9rHQTy24EtRjUGI%2FKr0twWZ7RpQ3C97d0gJLeJPKhA5qjlSdxDy%2F5s2jpv5FE%3D\"}]}\r\ncf-ray: 9cff5adddc30a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40841,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b0bd1ff3d1b7c98397f3cded9e047aed","sha1":"6525805312eadd91f3a327d5348c899ce06597a0","sha256":"a7105166981c9e05bb5a67663134a7bd3642003713a3f9a2a4200e776b13fd81","sha512":"7aeecd3a0ac8f974b865f409f29d357ed3f2cd85c4d29c897078fccccd95190cc9443168b630e372661a701a158d5ccda7aeab42627b5f4134608c1a5c36f9cd","ssdeep":"384:pwGJZdI8btdgdBLqYLWuTI1qVoBxcfs3f734:fi8btdgd1CqVoBxcfs3f74","tlshash":"4e03206985619b46263b7e7c3bd08345fae600638b114168bef5913c4ff24bd22a1efd","first_seen":"2026-02-18T17:45:32.531784Z","last_seen":"2026-02-18T17:52:15.457477Z","times_seen":3,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/db52783c150bdc69.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/db52783c150bdc69.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:27:40 GMT\r\netag: \"7cc-649b846267700-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 554\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rrvVonUQTd0VfRFZUw5VlxNNAoIeHvlkKMLKW34Yp56UnI%2BOrIjjBDuRewRXwvv%2FBO%2B1fctIU7Qm9CvBcgqXzdeA3vOXYk2Oe09tFFDUzcc%3D\"}]}\r\ncf-ray: 9cff5adddc34a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1996,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9000eedb5c53a811cc0fc2e2e9ba7de3","sha1":"19c448f1ccb6d43ffb05019477163a38d1611220","sha256":"bd4de6b9c5f42174b1d002c5801bbd8697ddd2565dfaab8158393646a9d28a5b","sha512":"24808a717609af2566787c1a92c8c4692124bc8241be52d9cf0202f5afb92e99a6289af1e19836d2d0495f52b50ae3bc9d1e4c90440540962097e87af4d1c41e","ssdeep":"","tlshash":"cf413c9ac1059185a6f35abc7f580342f48254ab0753911abfb590ecbfb407c6043ebf","first_seen":"2026-02-18T17:45:32.563118Z","last_seen":"2026-02-18T17:52:15.488591Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/config/api.php","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:24.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"POST /login/config/api.php HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://account-btcc.com/login/\r\nContent-Type: application/json\r\nContent-Length: 70\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436904764; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:24 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0yxc01o0mZj7eAAefN4kBAV3Y3NqCzkMPek6kpYKniA9Kt5om8Dxpgs%2FGI4tgTx50nHgh6%2Bfjd9ja25IoguR0twU7tYf2ZcFsLk9hHUM4eI%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5aeeffb5a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7baef91fcce9e1b125fe3a445fdf9221","sha1":"fd9c5484fe484495db0aa817f884f05c5e7e4ddf","sha256":"43aaac3c9aaeabf3e31662b368e3842bed14833b7858a645f8a07d66552ad6d9","sha512":"ed3cc6e17fe5ecdcb957f917efa4ad903e120c2e9ecccb64e709502fde29702fad378886a14513de0d59671d93a5cecc7a2811289c3fad354586e24c766c33a7","ssdeep":"","tlshash":"41b0128143205e1c0fda0904fc20f22055f12f6390541095054dd3df31401444332174","first_seen":"2026-01-22T01:55:34.503438Z","last_seen":"2026-02-18T19:00:25.49018Z","times_seen":20,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":170,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/00fb4f24664bef21.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/00fb4f24664bef21.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:20:24 GMT\r\netag: \"1169-649b82c29a200-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 989\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wSgDbbQ6dOyTN5b%2B%2BcxLOREe%2BDRlSehIROIAzeZe%2FHSZch9wEAotcICfMjubooWslUcM2cmDfyCOeqzEEuJ0pwoBBWmbK3PQ5%2Fs%2BM3hgJrc%3D\"}]}\r\ncf-ray: 9cff5addec38a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4457,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"cd5fd98c550e5e4828126e0ea713e1c8","sha1":"922e978d8488c73e4cb849174fe94a65b7c8dcda","sha256":"f9740b37a44fee17df732792ce961e06e2e22e340e4cd76754d36a66d7aabc32","sha512":"e0a20717abc31cd2e00ff4415c02190c7d289f9a0d3c0f97081aff851f681ece651597831124fb06138f9d57417897ca017dc8e430f0b74a4a7c19f286b9b75e","ssdeep":"96:LealD1ydSs/nDRbPq/RCv+sSbwsnqsVvD5Pdh/khmC9y:aC1GSsv17Fv+sSMsqstSN0","tlshash":"1e91df31965164825a737b7c3b910364ea7450278795053dbafad0780fba4bca6c3ebc","first_seen":"2026-02-18T17:45:32.569149Z","last_seen":"2026-02-18T17:52:15.490157Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/40b9eb064ea4beaf.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/40b9eb064ea4beaf.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:25:16 GMT\r\netag: \"27f4-649b83d913300-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 1798\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2FVDkBGFSZece3hzjSJR37U5DJ3OhwNxJ5V8EwrodouKzuRi3TMnqKfMNz0%2BlXuVxDd3Ny5b8WoXRRcWcKezTH2PraxYyYqOhjfAn6EoB7k%3D\"}]}\r\ncf-ray: 9cff5addec3aa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10228,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"3fcf224ad5618a4017226ebdfb99ca62","sha1":"cfb6d0e3a00811534465df666390e9055b7d2de6","sha256":"21e751996b34e62cc7980808d4afc49c67e67f603c6ef0fd70d86ba850ba2e07","sha512":"8d7ce11ef6f1875b21547f20cdf1e6a4f9af06d4185f4352dfe4412f13cf410a67ce2dba5b593d65a58001a35586751076c334dfb8001a68903ac29a5f2dd945","ssdeep":"192:CiZ7PG4KCLNw53m1jLWqndK6janACBYorv80zHBh3bS1iyCJNUm:F46yYC0UhX","tlshash":"2f22bd31a2110442aa33bb3c7b908344f5a160539f5289697ef7a1784ff59fcb192ebd","first_seen":"2026-02-18T17:45:32.524462Z","last_seen":"2026-02-18T17:52:15.539026Z","times_seen":3,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/695de32b4cb0f81981e8b018/1jfmeja44","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:21.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /695de32b4cb0f81981e8b018/1jfmeja44 HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:21 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-699589c13ea\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 195\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9cff5adc4b435621-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2123,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"f3ea92402df5edb0d07c5e650ae04bb5","sha1":"cfe742897a524c86a5eab3ab38f2acc0c05d90e4","sha256":"b7013e71519618886db60d49b2e4c6e5f1a3093aaca7938efd94b02432cc6a41","sha512":"7f8723b9c71b8d50fe7db727b7e17651430d97a6ac628d7794be6c2fd4f4499a04226584c244904e7540c49cdd21a3f36cdd667b53f3b19b6e0d82eb64c78d0a","ssdeep":"","tlshash":"ad4137d26b8f1892532c20d90dbff90f34b370e6c6ec5892472804017759a6d26cee38","first_seen":"2026-02-18T17:45:32.50523Z","last_seen":"2026-02-18T18:36:58.035635Z","times_seen":5,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":33,"dns":1,"connect":8,"send":0,"wait":33,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/fonts/btcc_Bold.ttf","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/fonts/btcc_Bold.ttf HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/assets-btcc/css/b412d95c3e3e8d5e.css\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:33:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oQ95QBEoyMgY0l2VUjdU9sHrgOzeQZF9qn4AIPhxYObBw1sv4m5uzjzHjdsr86feAv64WHmTqZbU4%2Fe7Ynpl6ID%2BRhjGA1YPlei2WMR7GBg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\netag: W/\"6620-649b85ac60180\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\nage: 193\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9cff5adf0c7ca106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26144,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"FFTM\", 27 names, Macintosh","md5":"9f2aba403aa9713019523d57fcd5b08e","sha1":"94521c08cbaeeba7729eafe75651b51d52c1e81f","sha256":"1721550309a1d4b8b1b108fb9f02e9d11231b4cb926d5a01280c978fcbdcd62a","sha512":"62942f8bbab369aaf97fbd83b7f846cade43c6d0aaaa3b2116305d5cd5f2e89f86031942a4cf1a19ea70aaf9b67185410cbf085c55d67633af4b5810100ddca1","ssdeep":"384:C286EBVATEv+u9XnINg4QBw5DAcLrWNmPFtCO:C286zTEGuRSgBwNAcLrWgNt/","tlshash":"28c23a72f3a59716c52367389f52e330ab71f8227f6b530a72546911bc87de09c323a9","first_seen":"2025-09-29T15:51:45.32549Z","last_seen":"2026-07-21T10:14:39.651177Z","times_seen":8,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:24.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/699589c13ea/js/twk-app.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Feb 2026 09:44:18 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 195\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\netag: W/\"e736e189edb5d0d9d5b8e7f23dd9114a\"\r\ncontent-encoding: br\r\ncf-ray: 9cff5aea99a55621-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":151,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-07T13:50:37.986386Z","times_seen":92916,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/b412d95c3e3e8d5e.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/b412d95c3e3e8d5e.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php?username=\u0026password=\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906667; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:33:58 GMT\r\netag: \"511ea-649b85cae4980-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hN1uA6lh8k%2BVvlWzgfIkJnXFEVbUad3sa24%2F67fno%2FQt%2BllXwY8iZmmKQtLr3TnpxCGtIhCZtcwzKFd3hSPboVFw7EULMLm24uqlqjw%2BElU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-type: text/css\r\nage: 199\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9cff5afada81a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":332266,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2242)","md5":"9817d04008a3a42d3dc429c0dee89f9d","sha1":"a22565b09113f8659e7de578b236fbf67eeed800","sha256":"3120f2838fb0e27d59110c2d494dfd600a242c3e404b848b5d572f53cb8d28a7","sha512":"12010b24c436d99e454e805fc5664cd18a951812a9325bb176061da14eb0b330bab40c7afa6ea7fe9db04cda159d6328bb20fa26918bcd58e3ef5adea849d76c","ssdeep":"3072:DGqkp1iw7zKhxcc9TpNO2HLVY/wv3A08sKMQ11zBq1wXLmz3duKVNSBFX7/7ikw:DQp1inx5fvlCBFKkw","tlshash":"3664d72df9f71c5a1a0b407e36cd974177516083494fddaabee6b0c88f881ae05e1b9c","first_seen":"2026-02-18T17:45:32.51488Z","last_seen":"2026-02-18T17:52:15.487068Z","times_seen":3,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets/js/flowbite_new.min.js","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:21.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets/js/flowbite_new.min.js HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:21 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 12 Dec 2025 20:48:14 GMT\r\netag: \"20c25-645c761547f80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 29591\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\nage: 198\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=em7UqKtx%2Fz3dojQ1OxACY0huDDrVOsb%2F88DWBqvfllsg%2BThV5lIsN%2FXf9DePcJBWleCB5HI5%2BlphsaH32TxAMK2dpcguoI4uoWJ4WZyCJjs%3D\"}]}\r\ncf-ray: 9cff5ad9eb43a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134181,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"ce04bdc941d9977ca8f769ccc45adc30","sha1":"6ec7b31b452bc211d7a11c7a3fd6a753edcf24c2","sha256":"ec6607782dfabb7c603c3e18f6b1a0c378aea42f51b6d920746d8daaf9296d29","sha512":"7997ddd8069ac8f126d7f95b28757d2e5442f1c70339520816916d1eb5410bbbb169a6deffbac22688b443d4f72b51f5a00c0cac18b5e6e056f986101cf110be","ssdeep":"1536:hCY/R2t4HK9iB1EohMYokrvs1mNo48PhmCFp//n1p3bfw2T6EFKDrp06X1mlcEIr:hTGb1qBohHpjI30yJF","tlshash":"9fd3f889b790793306db90f0413b160b633ba469d486845c7629d8ee197cc8e71b7fbe","first_seen":"2025-12-02T01:11:34.748249Z","last_seen":"2026-07-30T22:15:01.330921Z","times_seen":53,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:24.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/699589c13ea/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Feb 2026 09:44:18 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 195\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\netag: W/\"da5bb1dc647470204df0e49f5afac2de\"\r\ncontent-encoding: br\r\ncf-ray: 9cff5aea89775621-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-07T13:50:37.9924Z","times_seen":92886,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/config/api.php","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:24.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"POST /login/config/api.php HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://account-btcc.com/login/\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:24 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PE%2BnJh7ZFoCnCFq31kYRQB7i2AexJV%2Fzy2pmCKc1QABu4bS5jK5x5rDjf492BwoIOV0dKVQHQ6A6O7SfBE%2FBzD7WhMuDyGo4ySvZ4tY0Or8%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5aea9ed6a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7baef91fcce9e1b125fe3a445fdf9221","sha1":"fd9c5484fe484495db0aa817f884f05c5e7e4ddf","sha256":"43aaac3c9aaeabf3e31662b368e3842bed14833b7858a645f8a07d66552ad6d9","sha512":"ed3cc6e17fe5ecdcb957f917efa4ad903e120c2e9ecccb64e709502fde29702fad378886a14513de0d59671d93a5cecc7a2811289c3fad354586e24c766c33a7","ssdeep":"","tlshash":"41b0128143205e1c0fda0904fc20f22055f12f6390541095054dd3df31401444332174","first_seen":"2026-01-22T01:55:34.503438Z","last_seen":"2026-02-18T19:00:25.49018Z","times_seen":20,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/b412d95c3e3e8d5e.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/b412d95c3e3e8d5e.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:33:58 GMT\r\netag: \"511ea-649b85cae4980-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=05zg3pqbDx2TYFL4QMPibiVXB4v5qz4TSE65tyrh0laK4Y%2Bf00Dfg7lfFVIjgzR6oqQfgSDiTeDGomeWSxzvBkzmZrjhD1QUlKnETdBafeQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-type: text/css\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9cff5addcc25a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":332266,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2242)","md5":"9817d04008a3a42d3dc429c0dee89f9d","sha1":"a22565b09113f8659e7de578b236fbf67eeed800","sha256":"3120f2838fb0e27d59110c2d494dfd600a242c3e404b848b5d572f53cb8d28a7","sha512":"12010b24c436d99e454e805fc5664cd18a951812a9325bb176061da14eb0b330bab40c7afa6ea7fe9db04cda159d6328bb20fa26918bcd58e3ef5adea849d76c","ssdeep":"3072:DGqkp1iw7zKhxcc9TpNO2HLVY/wv3A08sKMQ11zBq1wXLmz3duKVNSBFX7/7ikw:DQp1inx5fvlCBFKkw","tlshash":"3664d72df9f71c5a1a0b407e36cd974177516083494fddaabee6b0c88f881ae05e1b9c","first_seen":"2026-02-18T17:45:32.51488Z","last_seen":"2026-02-18T17:52:15.487068Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:24.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/699589c13ea/js/twk-chunk-vendors.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Feb 2026 09:44:18 GMT\r\netag: W/\"44b9fc99078bcfe4490fb15034bc1e15\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 195\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9cff5aea998f5621-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":324110,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"44b9fc99078bcfe4490fb15034bc1e15","sha1":"ce24732180436c239c9f7b652793636862abc0cc","sha256":"b3b902e256ff96b3cfb1ce9f97156c7c2ed18a316f2db4328df5ecbffdebe765","sha512":"6dd243ad3d514c4c174dfccc05d61de84ef7225c808b06be721ac89087cff49b3f643654a6739273bf437f20208ff2b0031552ac2f1a9c81b549cb6fad720ed8","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZm+odXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4sJ5Ar6kOx/","tlshash":"ea644bc8f183b0b606e6a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","first_seen":"2025-12-29T13:02:03.642071Z","last_seen":"2026-06-13T18:18:43.524898Z","times_seen":16307,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:24.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://account-btcc.com/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 184\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":184,"data":"{\"p\":\"695de32b4cb0f81981e8b018\",\"w\":\"1jfmeja44\",\"platform\":\"desktop\",\"tzo\":0,\"url\":\"https://account-btcc.com/login/\",\"vss\":\"\",\"consent\":false,\"wss\":\"min\",\"uik\":\"bsOZuIxzo1QITdLaxAQhz\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-54qf\r\naccess-control-allow-origin: https://account-btcc.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9cff5aee3c46eff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1038,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e2742a7fd57a801002326df652aa5cf3","sha1":"731048815144c58daec060795225bc157b101380","sha256":"108835c00bd99d89724824035bc91aac7ad48e1f8c277e9b0c8e088cb6729a76","sha512":"b3ffd94d5119939d18d06cfeaa4159aa3f48a498452230e04b7e4048aac761c68c7a11aa11b1911ad111a3184065d78e0daf6d3565ab9578afce2483a8601bda","ssdeep":"","tlshash":"5111a8521ac45a36e2b21b607e833c0c26cca3c236d511bce4d56d4935e17380443b72","first_seen":"2026-02-18T17:48:54.292297Z","last_seen":"2026-02-18T17:48:54.292297Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/312b33c43ef3e4bd.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/312b33c43ef3e4bd.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php?username=\u0026password=\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906667; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:27:06 GMT\r\netag: \"4002-649b8441faa80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 2075\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 199\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AY5QuR7bOLopGFlJkHLh16I1BUS2ghbz1J7emiW3Uyrjnaxyu0Qjte7uj9OWWxQfPGXQb%2F2bA1q%2BtGLMfz%2BozsA%2BZQ%2Bs9i2IHYlGYipE9rk%3D\"}]}\r\ncf-ray: 9cff5afafa91a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16386,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"802cc537d0ddaaad1fbb431d7816bf88","sha1":"bae608934a70f92379cf29f6583c6ddf29120c0c","sha256":"3ab84e89a56f29a9b6c48698fc683875c2450f4092fb4402378e614716780ad6","sha512":"030170796671d1a39583375b0878f65af084664ac5188caa4dafbec7fe5da268a78cd80c26140c7b4a4796fde68bcb22d6c62fb17ca7ed38fbadf207ea39c6f0","ssdeep":"192:L3RcVXdAAn+UUP3egbXHjH0na3/mMHuHucCPPVz65TeBE1INKG3wrWzG8kDd7qu:bnNV8","tlshash":"f3728c04427173ea6e230d3863fcd168e56590d3cadd5d207aaf4c5c8bf2b6a1cb26b5","first_seen":"2026-02-18T17:45:32.539294Z","last_seen":"2026-02-18T17:52:15.497265Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/699589c13ea/css/message-preview.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:27.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/699589c13ea/css/message-preview.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:48:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 18 Feb 2026 09:44:18 GMT\r\netag: W/\"39f38fff97bceb6dd38d255228384ab9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 28896\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9cff5afe58d3dbb0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54016,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53968)","md5":"39f38fff97bceb6dd38d255228384ab9","sha1":"4f9d5ac34f834ec7f160fe555097691b45d47d39","sha256":"d9b57cfbaea5a38c3d279ba0a64a2fa0ccb499f94dfac8dc8845ac1c0f22f829","sha512":"cf1a36ed2530d962ee9a8013cfa3585dad4e85857e225c6a5670c92a574769d771b6a0f1ff2ae31c176ca078e7f747b704746996fe7dcbf826d906754e5545ed","ssdeep":"1536:fGUifm7kUdwddCriQiLc0Lg261F2BBCsEZf:J1V","tlshash":"cc3322b2f56710ccb363c22292d1f6bc202ae770d746ce96f427766c4ad12a63551fac","first_seen":"2026-01-16T00:46:03.995467Z","last_seen":"2026-08-07T14:25:25.219735Z","times_seen":33755,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/config/api.php","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:35.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"POST /login/config/api.php HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://account-btcc.com/login/\r\nContent-Type: application/json\r\nContent-Length: 70\r\nOrigin: https://account-btcc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=0; twk_idm_key=bsOZuIxzo1QITdLaxAQhz; twk_uuid_695de32b4cb0f81981e8b018=%7B%22uuid%22%3A%221.2BjHvJJDktnVGP6fgTrZeufmitOf80sgCSIKaKFAi87UzUatvXfidQyVOAkgLIKWIcmDHg1ShEAbLxDtQ3DKl4DWBZS9aQ2JfriZzwlRaGyiNB0Rik7TSOutrqU%22%2C%22version%22%3A3%2C%22domain%22%3A%22account-btcc.com%22%2C%22ts%22%3A1771436906998%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:35 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3OFo2shfWcFFL2CHN5Da1H04Ti44k7MwctSEAiPJyhUNXEEYs66iPUTNru6MfwpeWyodgAEa%2BIT99XbvOuwuM%2FdQ3HlhVyIDDI6ormS71qk%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5b309de7a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7baef91fcce9e1b125fe3a445fdf9221","sha1":"fd9c5484fe484495db0aa817f884f05c5e7e4ddf","sha256":"43aaac3c9aaeabf3e31662b368e3842bed14833b7858a645f8a07d66552ad6d9","sha512":"ed3cc6e17fe5ecdcb957f917efa4ad903e120c2e9ecccb64e709502fde29702fad378886a14513de0d59671d93a5cecc7a2811289c3fad354586e24c766c33a7","ssdeep":"","tlshash":"41b0128143205e1c0fda0904fc20f22055f12f6390541095054dd3df31401444332174","first_seen":"2026-01-22T01:55:34.503438Z","last_seen":"2026-02-18T19:00:25.49018Z","times_seen":20,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/0cbff9cf00db6493.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/0cbff9cf00db6493.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:20:22 GMT\r\netag: \"628a-649b82c0b1d80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 3255\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cR9WoUx0gCAvo5GRe4XcMLMTV%2BFjvFkqDczyIhagHLI%2BM%2FQgDyvbWTYXztto%2Fq%2FnTNCXbx%2FY0AYc98TyCU1iseQ8O%2FoAaf9yLl2NNSzRDvo%3D\"}]}\r\ncf-ray: 9cff5adddc2aa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25226,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9359b23138135326c837ed3db6fcb0c6","sha1":"7ec048ae6f25d204c4d46d6040a2a63db1871f76","sha256":"eef5b7cf086228a48510980c7e94350da622458c74b402aac9f8cb7fba6855e0","sha512":"bf0d11ee65a6f006ede21b26d1b86f0401397455a85f1f2ceb76c1343c45f9ab3b75c2f76947db36b9fd2355b420ada43a90de1a84c438deedfbf86002031bfc","ssdeep":"192:ktkgjkHL3RcVXdAAn+UUP3egbXHjH0na3/mMHuHucCPPVz65TeBE1INKG3wrWzGA:BnNVmmVzVoVsVmVHV+","tlshash":"c0b2ea14426177daae331e3827fc9254e1a54083ca9c09247aff4c5c8ff576a2d72bb6","first_seen":"2026-02-18T17:45:32.530046Z","last_seen":"2026-02-18T17:52:15.508131Z","times_seen":3,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:21.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 18 Feb 2026 17:48:21 GMT\r\ndate: Wed, 18 Feb 2026 17:48:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15162,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cd46912baf19b9fe32c8e6a6320bcaf9","sha1":"08ee007e9656ed41ffbabdb06701a3895bfa0094","sha256":"92a04c9ec1ae41b88f1eda4e7c4d74ffea87294a25c63c0fcdd7472dd82f1035","sha512":"33912fabd74bd7afee0c49ddd4b89161dfc7939fabb2ac6a75b9a5b4fd3e745fcdb6a4dda2ba6ddef3c9177f4ac972ff43239bc2f1af456c7530e7b981510b9e","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kc:8KYXuM0p2+g7r","tlshash":"3f628892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T14:17:01.635764Z","last_seen":"2026-08-07T10:11:35.895453Z","times_seen":5685,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":68,"dns":0,"connect":9,"send":0,"wait":21,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/192496e08f9d9515.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/192496e08f9d9515.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php?username=\u0026password=\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906667; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:27:28 GMT\r\netag: \"9f89-649b8456f5c00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 5300\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 199\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vV%2FG0rTDuPTMUOEu0aJH7a8YpFgKxgbUZWQ8c84S%2FT%2BFtKpcta0JO%2BzQ%2BGAzyiBlt0Ugu5gtoms4Nw3YSCtVeRQbI4zWZBvZo5TMw9ABAnw%3D\"}]}\r\ncf-ray: 9cff5afaea85a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40841,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b0bd1ff3d1b7c98397f3cded9e047aed","sha1":"6525805312eadd91f3a327d5348c899ce06597a0","sha256":"a7105166981c9e05bb5a67663134a7bd3642003713a3f9a2a4200e776b13fd81","sha512":"7aeecd3a0ac8f974b865f409f29d357ed3f2cd85c4d29c897078fccccd95190cc9443168b630e372661a701a158d5ccda7aeab42627b5f4134608c1a5c36f9cd","ssdeep":"384:pwGJZdI8btdgdBLqYLWuTI1qVoBxcfs3f734:fi8btdgd1CqVoBxcfs3f74","tlshash":"4e03206985619b46263b7e7c3bd08345fae600638b114168bef5913c4ff24bd22a1efd","first_seen":"2026-02-18T17:45:32.531784Z","last_seen":"2026-02-18T17:52:15.457477Z","times_seen":3,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/db52783c150bdc69.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/db52783c150bdc69.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php?username=\u0026password=\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906667; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:27:40 GMT\r\netag: \"7cc-649b846267700-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 554\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 199\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wRYPZePx0RnNTs%2FfWgjiRr%2B7oM2wSQMI71OcQCqWxmSwjpMmJrWVjtggNXJaxQMHVTQ%2Bp%2Bkjcby8WmGiJU3WVZLmzczlfrruAyaD7frGF9Q%3D\"}]}\r\ncf-ray: 9cff5afaea88a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1996,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9000eedb5c53a811cc0fc2e2e9ba7de3","sha1":"19c448f1ccb6d43ffb05019477163a38d1611220","sha256":"bd4de6b9c5f42174b1d002c5801bbd8697ddd2565dfaab8158393646a9d28a5b","sha512":"24808a717609af2566787c1a92c8c4692124bc8241be52d9cf0202f5afb92e99a6289af1e19836d2d0495f52b50ae3bc9d1e4c90440540962097e87af4d1c41e","ssdeep":"","tlshash":"cf413c9ac1059185a6f35abc7f580342f48254ab0753911abfb590ecbfb407c6043ebf","first_seen":"2026-02-18T17:45:32.563118Z","last_seen":"2026-02-18T17:52:15.488591Z","times_seen":3,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/59d32ad8b6dcfb5e.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/59d32ad8b6dcfb5e.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php?username=\u0026password=\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906667; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:26:16 GMT\r\netag: \"5fec-649b84124ba00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 3315\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 198\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xdmymtDcp3Q3ObT%2FCquJJiRNz%2Fkyc3PNUntWObcAmNgCM3WXgcl%2Bkd%2Fm27WEFsVioXjwQKZlmrDLDIoU02Au%2FIRd1vtbzgDmBu8tgkqwvRc%3D\"}]}\r\ncf-ray: 9cff5afb0a92a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24556,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"09921eb0fed6853eb6d2830896746a61","sha1":"2f2e7a9a819b3d5edb4718458f115ea0c42bd839","sha256":"dc92fe2d71ff00b949dfd78d3f4645bf225a34c566516b02a66dd9c3367fb1c7","sha512":"66ee42d8313cecc5f7a576136c8241257c1a69ce1113e9818abd9f114b22a652fbb919ab27870fd0c8f9ce5011bf66c21d4899271a2ac0882eea2d4633602992","ssdeep":"192:BoiE5vZe5UOLnEwxjLSsoBb3RcVXdAAn+UUP3egbXHjH0na3/mMHuHucCPPVz654:x4vCWnNVn","tlshash":"77b2ec14466163d96e335e3d73ec92a8e5918083cae90d2079ff886c4ff176d1ca2ab5","first_seen":"2026-02-18T17:45:32.526081Z","last_seen":"2026-02-18T17:52:15.516317Z","times_seen":3,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/config/js/translations.js","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:21.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /login/config/js/translations.js HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:21 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 14 Jan 2026 13:57:56 GMT\r\netag: \"56467-648597ebf0100-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uXJlI5hsyFeJq7Xsbkix0Pw3Hi60Ik5modi1NyVOrZ9VJVcRXJMcAzMgBiwc%2BWHJMXaHCgbGmS%2BDGOSaMIdtnPl7vMyP9mGv9oIczHEAY2Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript\r\nage: 198\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9cff5ad9fb49a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":353383,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"4c55f81f18a4f0b842214ab6e5a46a9c","sha1":"158f0098ae327935e9c4a41100f7031c633d6c9b","sha256":"c29d2c4e264670e0c33477c7531c8dd883d057e720d526ff6f29e6c3c9ca3dc2","sha512":"1758c803e173d41c07a786a5f1a14d649afa52b170feb5c77ca288b14068c6c93fc6e06992529d6ccf64675e006ab95280a674ae0a31b525a0b01031684fb0a3","ssdeep":"6144:7XdTUYoctihdiyIxoJZQZdCfAudpUSDkyp0opisqnovUsqcbsfORBgKZdJRVAzFQ:7XdmccPxI7QhUMQo8RnsNqczUihoF9aV","tlshash":"1b8481c18a8b4b464d72d5dfa7103da4f28d876bd70589a77c3c83182ff263582a5db2","first_seen":"2026-02-18T17:48:54.294364Z","last_seen":"2026-02-18T17:48:54.294364Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/login/config/js/translator.js","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:21.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /login/config/js/translator.js HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:21 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Dec 2025 21:31:08 GMT\r\netag: \"d63-645dc1897ff00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 823\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\nage: 196\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SP5ee3FRbCUTADJ9wj8YeDVxFRQfqJrv%2Bx3TmyO0%2FYsVAZuBMtocO%2FJM6M8gU9zfLBh6vf6zfoWOifdNeZCFpzATkzJ1ekerPkoVHsU%2BwbI%3D\"}]}\r\ncf-ray: 9cff5ad9fb4aa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3427,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"02c634985671b3da733868fa2ca59516","sha1":"4dfd6aaf1a168016f7c80bfa40d435fde7f02f16","sha256":"59d440630bdfbf66565f706d66e889dbe96b3ac5af39ceef21d945339a361b6f","sha512":"ac569359d75e85e0d540008eb16fb1ebfe9847f69461e78aba49098b303929b63fa81920451f4748acb442cefe12e295852c0ebcb74080ec6af506f6fefa3755","ssdeep":"","tlshash":"9061cf4825636201a131737d6e869909f61b080b21353f9d7f4dd9916ff243493bafa8","first_seen":"2026-01-22T01:55:34.550931Z","last_seen":"2026-02-18T19:00:25.499682Z","times_seen":20,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/cd548f73939393f3.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php","date":"2026-02-18T17:48:22.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/cd548f73939393f3.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:22 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:27:38 GMT\r\netag: \"483-649b84607f280-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 359\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ifkLlmD4esJLVI%2Bq7kz96CnXPABmHok9N0OMxP3EwPSGO9MOeQfJBDGkF1bwuO3mubVKa71X2FiZBXph61ZVfhgFGkba2oZ7BLvecb5tW8%3D\"}]}\r\ncf-ray: 9cff5addec37a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1155,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a2ab1bb6a8894265576ed4dba2817138","sha1":"4df4a0d9c301407ab489eb86d37da9e29464d7df","sha256":"4f5ba90608b52a8b39aa8f55870df71529c805a1aac1cb5fce45de537a3afad4","sha512":"7a41834093d5969753864fbe0aeb1deed44ba076880d23fc62fd4f8e6aeef1eac4fea3275dc13925dc3ac93a7f9e0bf383a7711c8c57019d5071217566318bce","ssdeep":"","tlshash":"c4212930951901d51933fb5937119a94f4dcb0034a3102367ff3a2b60fa96a85553f6a","first_seen":"2026-02-18T17:45:32.523208Z","last_seen":"2026-02-18T17:52:15.482112Z","times_seen":3,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/fonts/btcc_Regular.ttf","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/fonts/btcc_Regular.ttf HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/assets-btcc/css/b412d95c3e3e8d5e.css\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906927; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:33:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JlXnRbub3R707xvrMGjVdOLYsnLWQn1fpripRYfQV4nPuPNm3LsmguOtgHvFMNbeX2jCOl9E4a7u3uXJnxzpALZ7bb3fdSdZRTK9vpZYBwQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\netag: W/\"6604-649b859765000\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\nage: 198\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9cff5afc6b52a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26116,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"FFTM\", 27 names, Macintosh","md5":"36051e9e2f86c8e42c6f68f773a54ea8","sha1":"d9ad636c34762552b53614d95c47884f3da23862","sha256":"adc3c54ae95ed84938490a074324c7701751106a13c77329b70ccb51f009079e","sha512":"1f35a2e3d47573db622ea8f83db7d6fc3a7e30cdad5b6088c0ba3a5927efe199c132ac7ad0e6f81efe750fd6af4d9012e147fe50a5d9cc98e8eb814775df9d46","ssdeep":"384:eO4EbXqjL06b1DWV/BnzxaG1g4QBAwAu+Z2nbDO3CH3wurZAq:ezED3KDWVZcQgBlisbDwCH3drZAq","tlshash":"79c21955b3656b03c52367b9dfa2e3309b31f4717f2b570e32804e15ec96880de627a6","first_seen":"2025-09-29T15:51:45.354011Z","last_seen":"2026-07-21T10:14:39.457297Z","times_seen":8,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets/css/bitpanel_styles.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/","date":"2026-02-18T17:48:21.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets/css/bitpanel_styles.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:21 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 12 May 2025 18:50:16 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s30Ef6RWS2SmxvCQMfrxxoVsMZV3wkkSzKsuBzMCKAfqnTaLdsZTrlz8zZ%2BbzUzLB4GDFjvyle0V6NsaspwMuKKidaVL2rvg%2BDmEXGQS7AQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\netag: W/\"0-634f4c9688a00\"\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 198\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9cff5ad9eb42a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T14:07:12.2636Z","times_seen":17762617,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/assets-btcc/css/f4ffb5a2b37f7c3a.css","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /assets-btcc/css/f4ffb5a2b37f7c3a.css HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://account-btcc.com/login/exchange/index.php?username=\u0026password=\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906667; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Feb 2026 00:28:08 GMT\r\netag: \"18341-649b847d1b600-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 11704\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 199\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uqOP3b5aqUfXCuPBevjHRKaSWjwXapmUH9%2FD2z5tn0flzX%2FhwYWhcoDe%2BIMOQ2WNeEqP22aP7yHm%2BUr0uXqHPVzee2tBFARyZdlJ1OjgGm8%3D\"}]}\r\ncf-ray: 9cff5afada82a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99137,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"cf22277c0076ffb5115fafa6ab272148","sha1":"89f064653af44efdbdd64c6b4377c9dfc13d2d5c","sha256":"0a475a501a28a43e5b601d16d9aec97413094952acc54f8ccf048a3e72353ec1","sha512":"ef1e61fd67c48c4c87ca640ba22d2bd163f98ec2f6775228b76bf8852f66c9cd68e0031c6fab29d7e7abb79544b1be085ccbfaa8eaecb34e670214d5c4425c7b","ssdeep":"1536:TtMy3m4Y31svYhBmMdBPWVaCW4pgcg1zZKZKS/csB/uqdhR/RPGPQgHUfq1Wa9Mg:QaDfrAnfuwZ7vzUBGb","tlshash":"57a32ca595d250425b737b3c7b9147a8faa110234b1b89647afaa03c1ff11bc61c2f7e","first_seen":"2026-02-18T17:45:32.556432Z","last_seen":"2026-02-18T17:52:15.515758Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"account-btcc.com/config/common/json/dataCountries.json","fqdn":"account-btcc.com","domain":"account-btcc.com","tld":"com"},"ip":{"addr":"104.21.22.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://account-btcc.com/login/exchange/index.php?username=\u0026password=","date":"2026-02-18T17:48:26.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-btcc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 16:36:07 GMT","end":"Sat, 16 May 2026 17:33:37 GMT"},"fingerprint":{"sha1":"59:F3:FA:AF:3C:8D:63:B6:BD:9D:E8:6D:FF:17:43:2F:41:43:15:12","sha256":"5D:2A:1B:15:AF:C4:00:CF:F1:12:16:14:91:CB:A7:E8:8E:9D:74:AE:87:06:DC:D8:EF:FA:A9:EA:3E:9B:FB:58"}}},"request":{"raw":"GET /config/common/json/dataCountries.json HTTP/1.1\r\nHost: account-btcc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://account-btcc.com/login/exchange/index.php?username=\u0026password=\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3hjj29mb1spfur9qbuvc6sa9qi; TawkConnectionTime=1771436906767; twk_idm_key=bsOZuIxzo1QITdLaxAQhz\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 17:48:27 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jan 2026 23:34:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=atRMzWfkZEBYdwu%2FjMZe3ei3%2FnR2Ce7Ocx4UC3KHgzMwfYGyoFDS94XVe59D%2BI6nIu50gZMbhRg3OIpj3dB9LYRhvuV43H09zyHk5GIQP4E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\netag: W/\"2db81-6475c084b9b80\"\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9cff5afc0ad6a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187265,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d4ec7611ecd4e9d239d5a1fc14d285b1","sha1":"213cce38ddd6ccf921e06366f739d839abce325d","sha256":"ec14dda58ea83ddac379b9fdf1eed465b28eb47a71cc6c985e60707a005b096c","sha512":"b7efa5ca7c8f69aed0a5bebef61ccb6d03fa166d82ac4130f6f8d04a971c5b4a64e5aa9a8e922cc281968aa7b7f32153887a50040559daa8020dafe24b56e9bb","ssdeep":"768:yydBWYpoIHuJR5tA3z9LNA1bw4JnBewzecNIxfo4l5cZLFw/PSLS6qIq3Trz+Svm:yIR5Ob7ZvNQbb+wRWIti8N5gd","tlshash":"6104cd3bca1c4ea3f9f5529030966d0af1207b6f1898ccb77bfe4a4c5fbb411a05519a","first_seen":"2026-02-18T17:45:32.527408Z","last_seen":"2026-02-18T17:52:15.502175Z","times_seen":3,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":170,"receive":463,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"account-btcc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}