{"report_id":"3d950aa0-cba8-4138-ae95-62e973313ecc","version":6,"status":"done","tags":[],"date":"2026-05-16T18:29:02Z","url":{"schema":"https","addr":"btconbase.pages.dev","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.125","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"btconbase.pages.dev/","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"title":"$BTCB: BITCOIN ON BASE CHAIN","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T04:01:16.359001Z","times_seen":17736640,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"btconbase.pages.dev","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.125","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-20T18:29:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":3,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-16T18:28:38Z","timestamp":1778956118,"ip_dst":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":53840,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-05-16T18:28:38.025204+0000\",\"flow_id\":1677681726137186,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":53840,\"dest_ip\":\"172.66.44.131\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"btconbase.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2026-05-16T18:28:37.992098+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-16T18:28:40Z","timestamp":1778956120,"ip_dst":{"addr":"173.244.207.30","port":443,"asn":13213,"as":"UK-2 Limited","country":"Germany","country_code":"DE"},"ip_src":{"addr":"Client IP","port":49626,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2026-05-16T18:28:40.803763+0000\",\"flow_id\":564185685055949,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":49626,\"dest_ip\":\"173.244.207.30\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":914,\"bytes_toclient\":1584,\"start\":\"2026-05-16T18:28:40.743885+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-16T18:28:40Z","timestamp":1778956120,"ip_dst":{"addr":"173.244.207.30","port":443,"asn":13213,"as":"UK-2 Limited","country":"Germany","country_code":"DE"},"ip_src":{"addr":"Client IP","port":49630,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2026-05-16T18:28:40.805897+0000\",\"flow_id\":1194974646917719,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":49630,\"dest_ip\":\"173.244.207.30\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":4434,\"start\":\"2026-05-16T18:28:40.744023+0000\"}}"}],"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-05-16","alert":"Hunting_JS_WebAssembly","trigger":"btconbase.pages.dev/drainer.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"btconbase.pages.dev","ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-05-16T18:29:04.834141Z","last_seen":"2026-05-16T18:29:04.834141Z","alert_count":45,"request_count":22,"received_data":5570566,"sent_data":10182,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rpc.ankr.com","ip":{"addr":"173.244.207.30","port":443,"asn":13213,"as":"UK-2 Limited","country":"Germany","country_code":"DE"},"domain_registered":"2007-04-23","domain_rank":541361,"first_seen":"2021-10-24T12:41:06Z","last_seen":"2026-05-16T06:32:25.604913Z","alert_count":0,"request_count":2,"received_data":1467,"sent_data":1023,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ethereum.publicnode.com","ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":2041631,"first_seen":"2022-10-25T06:21:40Z","last_seen":"2026-05-11T11:28:59.489427Z","alert_count":0,"request_count":2,"received_data":1367,"sent_data":1039,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-05-11T04:37:33.959609Z","alert_count":0,"request_count":1,"received_data":2603,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"eth.meowrpc.com","ip":{"addr":"172.67.70.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-04","domain_rank":3310557,"first_seen":"2023-05-08T18:17:57Z","last_seen":"2026-05-04T17:47:33.520381Z","alert_count":0,"request_count":2,"received_data":1555,"sent_data":1023,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"btconbase.pages.dev/drainer.js","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d3a8a65315c1aac30bfe4c8e75a26eb","sha1":"f91ef7816dd10369f55bc698398ba8548287ac52","sha256":"5a6c8d055a5db1101195b5be2aa84705d4a6b9ac85c5d7eb1da98adc80f3fd6c","sha512":"cac0fc67d7e3cc00d13fb35c169bb5270b31c28d43ae3a4fc550362a9af1ab518dc6e6c9594e8e4a53543ad8c870dbc6c8e5b4a5b527321e23932cc1b2ee343f","ssdeep":"24576:3Aeinnl7iyBbocrJ2UxyxmeJcp7JJOH3BujOoCEmNnb88Kwb1Kfzrs1FiUL/IzPz:G","tlshash":"2ec5bfb876047de6667f576bda96acdc13b617239acba4cc8064b7c305a3375fe02804","size":2585286,"data":"","first_seen":"2026-05-16T18:29:07.881165Z","last_seen":"2026-05-16T18:29:07.881165Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-05-16","alert":"Hunting_JS_WebAssembly","trigger":"btconbase.pages.dev/drainer.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"btconbase.pages.dev/","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"82d8860af032383f8ece9de2f6efd0da","sha1":"942aedbf5fe1df55c431acb9df59fee8f24d25e8","sha256":"8cba0ad6cbf46dcde5d6e842787b4a041e077fc8e038868616a901ad1f9b41a6","sha512":"61c6f08c6cbf8b217814d0a2431e7d65ab190d6206113aa590bae9d04b7eebf2b28395838d2e96b9058248da4f5c0d78955e8f71d39130361677ae9311ce681f","ssdeep":"","tlshash":"c0e02b286e5510f926b37495c71f7240e86000735081dc01fd1cf68a4fc0f1934b1fca","size":297,"data":"","first_seen":"2024-08-29T18:05:58.681954Z","last_seen":"2026-05-16T18:29:07.882416Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btconbase.pages.dev/","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"90ea3157914c4eeb307df26fd1fd01de","sha1":"15068b453a8ff13b80e16ef6b4bb6cabc9b77b1e","sha256":"bdab2ce474d57e25978036c6547a728af3edf846014bd07e100b54daba8c886b","sha512":"c822e4cc586b823c8717a56a9fd841ffde3f098519edbf7ba3f00b7f1fb85d9869d16c20ae53b6bc6f9dee583a8c407d568ac65a9bbb052c05f1476f4d4a52cb","ssdeep":"","tlshash":"efd02ea82e95123823736424831f92803be08003a0e0f8023a1ce6c60fe1a1000be5db","size":274,"data":"","first_seen":"2024-08-29T18:05:58.684854Z","last_seen":"2026-05-16T18:29:07.883875Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btconbase.pages.dev/","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb9ac14b9e96ff95fb5d8be10d564894","sha1":"c360a335cb1310ea580ec755868f17cb76998a0c","sha256":"2f7cd8b053c912c7fcfb24a71ab1468ce7f4952fe3aa9d7f8a6d5a218e941168","sha512":"2c5b25696338adba61dfd2b38bb4cd5591befb6ba826056ce5f82287060b65a91892f9e84f687bc3716c94fcfdc73437e0ec0d403c3ee1325551b5c5ece12753","ssdeep":"","tlshash":"61e0863935751574097b98afc74b934b7da1141b5001e5167d4c924b0fa4f1034e6599","size":334,"data":"","first_seen":"2024-08-29T18:05:58.687028Z","last_seen":"2026-05-16T18:29:07.885265Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btconbase.pages.dev/","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aa95e0530399e81b29cf328d5d2a924a","sha1":"8442aff4f6b69def9798797b1253aaa994a58c7b","sha256":"e8c999ef7745467bcb1860a4aeddd19b9f134b75c17cb229cd844c0b67418967","sha512":"0e56d3c4fc0f7334bdd4cabc86cf5a857042a09c6ffcc4bcecff3b17137fa0d53a7e0754f7ee3215db6c12c9993475375a5e3e262b56201954dbaa9c6caecae4","ssdeep":"","tlshash":"d1e0207e1d847d31b26756b710f7da0c30723058b645d550dddf88052d08d4d54a4f99","size":352,"data":"","first_seen":"2026-05-16T18:29:07.891839Z","last_seen":"2026-05-16T18:29:07.891839Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"btconbase.pages.dev/pikaday.min.css","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:38.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btconbase.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 15:43:02 GMT","end":"Thu, 13 Aug 2026 16:40:44 GMT"},"fingerprint":{"sha1":"DC:C9:F4:7B:85:2F:47:41:01:2E:98:86:0E:19:FC:23:4E:93:14:4C","sha256":"05:2B:71:4A:C8:04:26:54:F7:8D:72:FE:1E:9B:D2:8E:2C:87:88:7A:C7:CB:BC:21:96:BA:77:D5:A2:F6:84:B6"}}},"request":{"raw":"GET /pikaday.min.css HTTP/1.1\r\nHost: btconbase.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btconbase.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:28:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qZnxiyd9ncZOyZwd7GhKFng7mG5GvYs1q5POWuInqSY8gxPlkGNwNVMof2cnXvU6ARbn%2FuopkLhUGyDwPkDyTB1AqwEiIslXPqh2%2B2Gjs7AOw%2FW1SRhuPszHVo10KEqYKs%2FqcEB0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"99e434d8070266051a5375565064b9cc\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fcc717bdf18c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2853,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2739)","md5":"f5ae3a7c94c6406a956a462799e30a95","sha1":"f4213cf5638eaa11d8ec7a41ec725a478482a615","sha256":"fb49a46772d98409c4fe5b11d30e73dd9cb4a9a0c87b7ca756ef0b964675a79a","sha512":"3be1f09be2263da3d0e63078e04ae9b0412da0cc7dfc7310d9d70ac21672b08dacbdcb72d76a9a3345459a2aaf6a0fb3c697d45db7999012035628955959c78d","ssdeep":"","tlshash":"53513434e180121ff967c6b437916acf6059c0e3a57e4b3a6815b1adc5cb3d2145f70d","first_seen":"2026-05-16T18:29:07.828543Z","last_seen":"2026-05-16T18:29:07.828543Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btconbase.pages.dev/Bitcoin-Base-Chain-Buzz-1.mp3","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:38.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btconbase.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 15:43:02 GMT","end":"Thu, 13 Aug 2026 16:40:44 GMT"},"fingerprint":{"sha1":"DC:C9:F4:7B:85:2F:47:41:01:2E:98:86:0E:19:FC:23:4E:93:14:4C","sha256":"05:2B:71:4A:C8:04:26:54:F7:8D:72:FE:1E:9B:D2:8E:2C:87:88:7A:C7:CB:BC:21:96:BA:77:D5:A2:F6:84:B6"}}},"request":{"raw":"GET /Bitcoin-Base-Chain-Buzz-1.mp3 HTTP/1.1\r\nHost: btconbase.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://btconbase.pages.dev/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:28:38 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 1921581\r\naccess-control-allow-origin: *\r\netag: \"9b2f4f0ec71d0545ed126429a82885ec\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vKiBG1qA%2BmywdIkEB2vxEidRLLzUqKEGsO%2FXD45kExC%2Bi7iXx5vi%2Fn%2BETeOUIQ%2BCZ9DhwvExqOojw4Yb8r1EnRCEaBqBMboFkc5kj86hb7f%2FLosIjyeVm6pSSb8MJt%2FhCnm2vIbN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9fcc717c9996c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1921581,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 48 kHz, Stereo","md5":"d0d04518ed15d8c8e29a24b1783413ae","sha1":"0c74da1f8a8a6df8612fc339f6fcc917053080b6","sha256":"26828214c0e4c359f043c41d862aaf9a5ea20562910e19392d1de1821d4046a7","sha512":"7cf71216f826d2d04816bf59148f766e9065b7ffcf8f3821532b0503dbe96526d16f17055d041cb848c25a01afbe55657e5eb7eb0be6f2e1664d0d300ccb3adf","ssdeep":"24576:651NuiLTVVpTEfhZIKfmvZHp0ozOUS+WhVsHJuPW:P4BWhakmvZJDC+C/W","tlshash":"e925331cae021514f95f327c81bb2d81b83abfa7ab0e345d0d23b7745a7199ab94dc13","first_seen":"2026-05-16T18:29:07.833859Z","last_seen":"2026-05-16T18:29:07.833859Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":157,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btconbase.pages.dev/flo-icons.woff2","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:38.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btconbase.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 15:43:02 GMT","end":"Thu, 13 Aug 2026 16:40:44 GMT"},"fingerprint":{"sha1":"DC:C9:F4:7B:85:2F:47:41:01:2E:98:86:0E:19:FC:23:4E:93:14:4C","sha256":"05:2B:71:4A:C8:04:26:54:F7:8D:72:FE:1E:9B:D2:8E:2C:87:88:7A:C7:CB:BC:21:96:BA:77:D5:A2:F6:84:B6"}}},"request":{"raw":"GET /flo-icons.woff2 HTTP/1.1\r\nHost: btconbase.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://btconbase.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:28:38 GMT\r\ncontent-length: 7860\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"81b9cb80b3f137661a685488c3f01214\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WHBaE778b8pRlZDpjvuITsuDhIg9oTfVpwtaWkoY0EcTCigjjDvMEuH9inhu3XlaMm2rkmDQUbqnFRn3tytcpnOTa3CIJdJC4BMsEz9S7CMRKhKD%2BAXDgXoi9KZZnDYrnRoErs6u\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9fcc717cea56c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7860,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7860, version 1.0","md5":"769eeee7c835ed7dde05ea878a1066df","sha1":"7b7b504a1e01800b2c302694b8a883c73aa08557","sha256":"3cf82b95c4c1e3f2f07381de876b7186bb31123c2568946f5fca1a2ac84a1edc","sha512":"4ec4866e2e5f29c12f2d9159e3fd850be915b6208fcaa96d40f3c520acc1eabc2c386273d6a9934a5b9d2d03ced2ba812ef79a38d1aac1f7ca20c0b8968bc285","ssdeep":"96:wjtPk4ql0WchVA0G0vtRXcsi4r3IVFEb3W4ZGOI+fWLi1RE0ETWl47GQyeqTkjCE:WzXVBG0bMsxbIVM3lGaTRXhQyeWDZUXV","tlshash":"a9f1bf1c2355db63f0b1b97e0a948051b739fc8d495afaa4840fca4e8f763bfc421224","first_seen":"2023-11-27T11:52:45Z","last_seen":"2026-07-31T22:44:23.114032Z","times_seen":22,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btconbase.pages.dev/HKGrotesk-Light.woff","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:38.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btconbase.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 15:43:02 GMT","end":"Thu, 13 Aug 2026 16:40:44 GMT"},"fingerprint":{"sha1":"DC:C9:F4:7B:85:2F:47:41:01:2E:98:86:0E:19:FC:23:4E:93:14:4C","sha256":"05:2B:71:4A:C8:04:26:54:F7:8D:72:FE:1E:9B:D2:8E:2C:87:88:7A:C7:CB:BC:21:96:BA:77:D5:A2:F6:84:B6"}}},"request":{"raw":"GET /HKGrotesk-Light.woff HTTP/1.1\r\nHost: btconbase.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btconbase.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:28:38 GMT\r\ncontent-type: application/font-woff\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vr%2BnZDbYsi1hI1uUnQJ%2BXS%2BD9Xk0lsvlXQt%2FLvxS%2BMoY%2BtqmXUr%2BUrj7%2FXdl%2FaAuy11CpkAPX3bD82LNzuQqBkt9CfzTSHdZDE%2Foqz9ILD64CL5rTNMaQx5iS9g%2FAnvdQXnNEfu9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"92e209b1cb2225f35dca89af0fd52f06\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fcc717d0a9fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41720,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 41720, version 0.0","md5":"0305cfb49dfbafd7e9d09e2e76c31741","sha1":"b35382b5ba94380ad0ea44f6adddd618afaa167b","sha256":"fd169245269ea3b0ce9e13e0e341d5059584047b3d59a4991950f33effdffca9","sha512":"21ca009a1be28a256662731caec3a5dee6b3f14e266e3e2d2fd6c0bac0bb1bb6fbfda63520702fbf80d62cdb8dd0a313290762f346a5be0ff8f4db1b6e0ed718","ssdeep":"768:rRQA/iNtqj+YGEf8UYp3pBpdsH12LpvguRwvV+aToqaNn1J9:1QAqNtqj+PPBpZCdToqQT9","tlshash":"fe1302751d905d5ecc87f26027e66790374330dfb86f45b8c94adb8f1186bd432897a1","first_seen":"2025-09-28T12:51:16.295918Z","last_seen":"2026-07-31T22:44:23.147721Z","times_seen":6,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":183,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btconbase.pages.dev/style.css","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:38.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btconbase.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 15:43:02 GMT","end":"Thu, 13 Aug 2026 16:40:44 GMT"},"fingerprint":{"sha1":"DC:C9:F4:7B:85:2F:47:41:01:2E:98:86:0E:19:FC:23:4E:93:14:4C","sha256":"05:2B:71:4A:C8:04:26:54:F7:8D:72:FE:1E:9B:D2:8E:2C:87:88:7A:C7:CB:BC:21:96:BA:77:D5:A2:F6:84:B6"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: btconbase.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btconbase.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:28:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cUUivRbSGkn2a2TI15G9dY2p%2BhVmbBu5fSjK498Oaog9gXb%2F5wwtAyoPsc89dP1T1QEaxIZxXpFvG%2F9gti7ZqKVeuB0QNY8DLlqErETBOQzzyUgiq7CzjGxM5BbQwHQppCtwwsQB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1b0b37bfcfb292c528364cb4f7536f4e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fcc717bdefac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3358,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c3b7db8361aa102f48ee43882c8db487","sha1":"654ef14de9160d4ba52d8b7a4eb2f5e8a71ad868","sha256":"0ec82d0e9bd1af725878220369906c8b672aa47cbf3f20fa47d4889360be9f64","sha512":"9715ba5e6b8490cc55a23b36f9cdcc839fd89cd3c7a03a47643db7d2cd4a175ce51b77d22dd4e413cd436fb3d44de0985c4ea26d266ce97ebe1859e4c0e5b11a","ssdeep":"","tlshash":"45619ef494bc094e0308d5d262c226386f1cd534ddae6e99d2ba784cb9ef608c9953fc","first_seen":"2026-05-16T18:29:07.846842Z","last_seen":"2026-05-16T18:29:07.846842Z","times_seen":1,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btconbase.pages.dev/HKGrotesk-SemiBold.woff","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:38.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btconbase.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 15:43:02 GMT","end":"Thu, 13 Aug 2026 16:40:44 GMT"},"fingerprint":{"sha1":"DC:C9:F4:7B:85:2F:47:41:01:2E:98:86:0E:19:FC:23:4E:93:14:4C","sha256":"05:2B:71:4A:C8:04:26:54:F7:8D:72:FE:1E:9B:D2:8E:2C:87:88:7A:C7:CB:BC:21:96:BA:77:D5:A2:F6:84:B6"}}},"request":{"raw":"GET /HKGrotesk-SemiBold.woff HTTP/1.1\r\nHost: btconbase.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btconbase.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:28:38 GMT\r\ncontent-type: application/font-woff\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LDqIYfyKtV9exHveUmKnewSPUVHlEZqNUaX5j3Y%2F8BOKEVqmF3mKnR9YiFPrnZTbeg9X4oneP1Y3DOCENigY0Jek0UlBM1TtIlgfX18LJhWM4wDSZBRF8RKNKQX1EnTNn%2Bd%2FCZIb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"100671859c7eca3144b5c8ff1694dce1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fcc717d0a95c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42844,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 42844, version 0.0","md5":"a64443b26af32d781a49160ab3f40a18","sha1":"f6261b22c18abe24ce3c8bf81db532fd0b73d477","sha256":"1ef55097896516ba2efbb536858c7710cc1aeccd25a4ae23b0b61c3db3ec9b19","sha512":"ead4a8f34f86e8486748ade1d557829880c55dd9a5a7003433e236f87cda3ba32045f1c8866b1a098ec1cb98277dc1a792c9c8bda652d8855eb37ea4ee5407a1","ssdeep":"768:S7CYg20VwQ1lDxWWY30AisH86FhhqQ4n3Aa0+3TSkAhI+3gLR4j0wPQWuCMaI:SGYg2kwQ1lDxWU286JqQ4n3AJqQdgmjW","tlshash":"bd13f1b3b1f23b44a312b2ba966d3a0702d97554a087b0720cdcef77081f136b5da2d9","first_seen":"2025-11-20T10:46:59.983638Z","last_seen":"2026-07-31T22:44:23.131323Z","times_seen":8,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":185,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btconbase.pages.dev/css.css","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:38.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btconbase.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 15:43:02 GMT","end":"Thu, 13 Aug 2026 16:40:44 GMT"},"fingerprint":{"sha1":"DC:C9:F4:7B:85:2F:47:41:01:2E:98:86:0E:19:FC:23:4E:93:14:4C","sha256":"05:2B:71:4A:C8:04:26:54:F7:8D:72:FE:1E:9B:D2:8E:2C:87:88:7A:C7:CB:BC:21:96:BA:77:D5:A2:F6:84:B6"}}},"request":{"raw":"GET /css.css HTTP/1.1\r\nHost: btconbase.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btconbase.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:28:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jjAFz0GOBVWlFKJ7KNvcgGqtS5eP%2Fx3rjY4dqrDJX7uoXsly%2FMdG67wWXB9Hul77rjTR%2BRuZqH2w0SIky8mRvPkw%2F9aumQY%2BV2io0hwGTr%2Fb7C10zGeRiPtxje%2BkWlSXLS%2BdRZdF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"74962a8e5bd0cc7abdeec8d229bf4d33\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fcc717bdef5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49546,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1116)","md5":"8678e5152da90da81b6d4d01170b0116","sha1":"ed6706fb2a93c9327e161ab437cf558670574fcc","sha256":"1c11a8779f241891495b79c20cd8380e925375abd4bc5301302e9862a0e6468c","sha512":"31f93b8b6166e2ccbee3d91fd2642688cab4a8176fa4bf0c51a5872a7c2db94178bbf6f8bf8a735913025ba53620c84de2f79c92afc7b1b90bee02e87649bb6d","ssdeep":"768:3qZ/h0+Y+lw9HKQvhXENbTQyZu595cuqby0:3q/Y++9qQZXENbTQiuRcHby0","tlshash":"49230d640936cd30fba75ceea3deab139fac34583804c9ec4bf54446ac5a056916bb8d","first_seen":"2026-05-16T18:29:07.851955Z","last_seen":"2026-05-16T18:29:07.851955Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btconbase.pages.dev/BTCBlogo-628x628.png","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:38.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btconbase.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 15:43:02 GMT","end":"Thu, 13 Aug 2026 16:40:44 GMT"},"fingerprint":{"sha1":"DC:C9:F4:7B:85:2F:47:41:01:2E:98:86:0E:19:FC:23:4E:93:14:4C","sha256":"05:2B:71:4A:C8:04:26:54:F7:8D:72:FE:1E:9B:D2:8E:2C:87:88:7A:C7:CB:BC:21:96:BA:77:D5:A2:F6:84:B6"}}},"request":{"raw":"GET /BTCBlogo-628x628.png HTTP/1.1\r\nHost: btconbase.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btconbase.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:28:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 34681\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"5f68fd664e3d573b80d79ca4ae393a01\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0SqgoyIiGSrcKsvFbyb%2FB3bsNj7jbkI612b2iREhKsR0l1mfMb4M7GAWB%2FfofJvISOi4Pau5QjA1QwqwfTNZMDXfi0kda1W0ecmPTLJ6HznqTJEJd7fjDMYeI1yjuUFfysahcGFl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9fcc717bdf22c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34681,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 628 x 628, 8-bit/color RGBA, non-interlaced","md5":"7779b28161aa6a148da6f2f4ef935edc","sha1":"1f18fda882316f09745d245fddf5e2d966000b3f","sha256":"167ce5057511afc1f64af43af9bcf9e47879b5d88d7160bb637b9d9923755442","sha512":"3adda02deabc1b79819f293274d63ec9bf766c2548ca4abf6477279ee2af1b03663f15f7aca4d4297f1d5f338da969a8b7ec1e7fcf06e413026e3c19f1295a0b","ssdeep":"768:Avp9Hx8+Ni6Urhgk8nxFU4iytZLYXjTY/kqX6+pLYs+Ab:+pxxOtrh1OqXjM/vpEsX","tlshash":"6df2f22bc57361400c6b135a05eb2c49917d68fcaa9fce61ae6c49f55f3b8d602ac4bc","first_seen":"2026-05-16T18:29:07.853879Z","last_seen":"2026-05-16T18:29:07.853879Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btconbase.pages.dev/drainer.js","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:38.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btconbase.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 15:43:02 GMT","end":"Thu, 13 Aug 2026 16:40:44 GMT"},"fingerprint":{"sha1":"DC:C9:F4:7B:85:2F:47:41:01:2E:98:86:0E:19:FC:23:4E:93:14:4C","sha256":"05:2B:71:4A:C8:04:26:54:F7:8D:72:FE:1E:9B:D2:8E:2C:87:88:7A:C7:CB:BC:21:96:BA:77:D5:A2:F6:84:B6"}}},"request":{"raw":"GET /drainer.js HTTP/1.1\r\nHost: btconbase.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btconbase.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:28:38 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3mvGOYORMghVfy7cLrhothn%2BEjOv7v%2FQQ14NZhy0kmXixnrtlE3pnCjuBSKmCStbiA3k64H7%2FxaRXVEFwFMnUwuQ8ZdDaTPREdIGjH2LmPi3pIuF3FCZFepdYCMp8Yt4%2FmH6PLOM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"46af4513c472d946e1660c36c882595f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fcc717bef2ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2585286,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (63725)","md5":"4236556451d3e73f0fee940e6f4126bf","sha1":"1597d3b641a852847a9c0f131af2592f3d17e509","sha256":"467bce3e787f3ac03ba7a3c9da0b8f7e0de02a55d6b0e8a0c5cd2ed0cf6bfe5a","sha512":"3ee2fe9e84d6a539beaa91eedb83708cefb7006519e05264b4c24937f6e8839714ede07c25ea386620d91f171e9a97f6cee222afaf1b7ca2c5d310dacf28dcfa","ssdeep":"24576:3Aeinnl7iyBbocrJ2UxyxmeJcp7JJOH3BujOoCEmNnb88Kwb1Kfzrs1F8:G","tlshash":"5b25bfb876047dd66a7f476bda96addd13b617238acba4cc8064b7c305a3375fe02804","first_seen":"2026-05-16T18:29:07.855788Z","last_seen":"2026-05-16T18:29:07.855788Z","times_seen":1,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-05-16","alert":"Hunting_JS_WebAssembly","trigger":"btconbase.pages.dev/drainer.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btconbase.pages.dev/flo-flex-icons.ttf","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:38.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btconbase.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 15:43:02 GMT","end":"Thu, 13 Aug 2026 16:40:44 GMT"},"fingerprint":{"sha1":"DC:C9:F4:7B:85:2F:47:41:01:2E:98:86:0E:19:FC:23:4E:93:14:4C","sha256":"05:2B:71:4A:C8:04:26:54:F7:8D:72:FE:1E:9B:D2:8E:2C:87:88:7A:C7:CB:BC:21:96:BA:77:D5:A2:F6:84:B6"}}},"request":{"raw":"GET /flo-flex-icons.ttf HTTP/1.1\r\nHost: btconbase.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btconbase.pages.dev/style.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:28:38 GMT\r\ncontent-type: font/ttf\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=poeHTyvdIO5dgOT%2FtBDbl1yy3rtGLEh4ghxzcSn%2BiQ%2BAHv%2FQB5ixL8wUxuPRqW5wX9715R3BKkoyu4fycCMnPQ2zDOubBGdDTZC82yX4NBC%2FdcAb8jdLGaPEUpN1lTPzjbiZZ3ZX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"48e8cfe25cc0b2868a9bc7639b4290ff\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fcc717e5e98c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7924,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, flo-flex-icons","md5":"af6483a1d97417925899a6b2b9665685","sha1":"52503194ebd703ed9d43fa2530dfbc060c23a110","sha256":"641ab98fd17ba93d629938d754365a337e626f23118eac0ce9a04bd6a6a0e665","sha512":"803e9ffe4b9f6550e97ec066ceb6d31c8176e5495d8cf79192207fc8a765a82f30266b13301fa69c530cdf5d95a28483da8f3975310a31be0df8269fe92047a0","ssdeep":"192:7dKw7rXbGlORJyK/B1Rvr7yK/tslSZQCPPKiOlii5UK:wMr9d1RvrLscuCPP65l","tlshash":"def107466797eb4ee811aaf61c31d2314ed6e621973ee74bb8802a465e0c5f0cc14fbd","first_seen":"2023-05-14T00:49:56Z","last_seen":"2026-06-08T21:32:33.28752Z","times_seen":29,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/eth","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"173.244.207.30","port":443,"asn":13213,"as":"UK-2 Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:40.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shark.multi-rpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 11:28:53 GMT","end":"Sun, 21 Jun 2026 11:28:52 GMT"},"fingerprint":{"sha1":"AE:1D:6B:AA:47:F3:E6:57:DE:8E:AE:96:E2:57:FD:59:C7:98:35:45","sha256":"E7:E9:5B:8C:16:7D:7C:6C:3F:CA:EE:53:6B:E2:1C:37:99:35:61:A9:23:2A:B7:B5:21:15:EE:7D:F2:99:FF:57"}}},"request":{"raw":"OPTIONS /eth HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://btconbase.pages.dev/\r\nOrigin: https://btconbase.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 16 May 2026 18:28:41 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version,x-ton-client-version,x-client-name,x-client-version\r\naccess-control-max-age: 1728000\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T04:01:16.359001Z","times_seen":17736640,"resource_available":true,"data":null}},"time_used":599,"timings":{"blocked":286,"dns":34,"connect":28,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereum.publicnode.com/","fqdn":"ethereum.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:40.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 23:57:50 GMT","end":"Fri, 10 Jul 2026 00:57:42 GMT"},"fingerprint":{"sha1":"FA:41:42:B5:59:CD:F2:75:9C:78:CB:D0:5E:1F:F6:83:58:D2:EE:5F","sha256":"07:86:2C:E3:AD:0C:A4:31:FD:57:1E:C8:01:EA:80:5B:24:9B:5E:3F:7B:09:9D:D4:1B:FE:A9:2B:34:AC:3E:B4"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: ethereum.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://btconbase.pages.dev/\r\nOrigin: https://btconbase.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 16 May 2026 18:28:40 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcc718aa892712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T04:01:16.359001Z","times_seen":17736640,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":34,"dns":5,"connect":1,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereum.publicnode.com/","fqdn":"ethereum.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:40.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 23:57:50 GMT","end":"Fri, 10 Jul 2026 00:57:42 GMT"},"fingerprint":{"sha1":"FA:41:42:B5:59:CD:F2:75:9C:78:CB:D0:5E:1F:F6:83:58:D2:EE:5F","sha256":"07:86:2C:E3:AD:0C:A4:31:FD:57:1E:C8:01:EA:80:5B:24:9B:5E:3F:7B:09:9D:D4:1B:FE:A9:2B:34:AC:3E:B4"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: ethereum.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btconbase.pages.dev/\r\nContent-Type: application/json\r\nContent-Length: 192\r\nOrigin: https://btconbase.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":192,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x941E09C78cc72b5C264c17BA6327c06A0Faad6e5\",\"data\":\"0xc2fb26a629690e2388a22f16d924e4a645cd2b40a8e24c414d664ad7ea957b73\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 16 May 2026 18:28:40 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: 9fcc718b08f6712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a928c797e5e47915f28df6242333bc2f","sha1":"2317258029abcb5ca312770c0469c360a890426e","sha256":"d12853d2762c73427b26d8403f4c5940d58faea5fe3e69097124f53ff4b071df","sha512":"2f93eecd1410ea6e1fdb98a5fe4bb8c71356f5830308b6105fd663554a75f1f288cf5c89fae16db6fb8f6cfd18f63f9ba36a048476ae1a6e05046968a5cb0f00","ssdeep":"","tlshash":"c1d02450404d0730d1154d0050c47c00301077cd0dc01f4101cc1c4443ccc03ff15337","first_seen":"2024-04-19T14:51:38Z","last_seen":"2026-06-06T08:39:50.593521Z","times_seen":227,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btconbase.pages.dev/","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-16T18:28:37.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btconbase.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 15:43:02 GMT","end":"Thu, 13 Aug 2026 16:40:44 GMT"},"fingerprint":{"sha1":"DC:C9:F4:7B:85:2F:47:41:01:2E:98:86:0E:19:FC:23:4E:93:14:4C","sha256":"05:2B:71:4A:C8:04:26:54:F7:8D:72:FE:1E:9B:D2:8E:2C:87:88:7A:C7:CB:BC:21:96:BA:77:D5:A2:F6:84:B6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: btconbase.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 16 May 2026 18:28:38 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mkJd1ybdcTX1YuoMCWATqvMFPZOXY%2FVqzt3rOGSte7KoEmSmfAukasW4ZnjsVRttBq6A2Z1qse%2BKETWYLSH5%2BzyfX%2FHULL3etulWNt%2FwyAH8U07FIXUhAQ918ueeolXBn%2FEikmsS\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fcc7179b8c20b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":361276,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"00846b7a3630a1b2a20265bda93fadd8","sha1":"c6c315e4281dc736457ce18dfc26f7e1074578b4","sha256":"53a02f6d1a26523bdacc967fff53123e9573d403c498157c3167f827965ad521","sha512":"75b9f78f38696d8714fdfc7445f3e4a592f761d777a54fa90b2f7c810d253efeec0587e43d11a42cbcc23f8810939fdedb8a4304b6dbf62d15ec7ddca0f353a5","ssdeep":"1536:XcF0GeVFMYRIni3BSN4lJzrFCHWSsboxi9tqGwmDxaN8hZOgQg+s7TtiC+k+rbTj:CGnbcxi9txPbPIXr3vV8oNyHNXrXg","tlshash":"37744085b3360051581b632f77eb912c62309847ce02d958f2ec91399fdea58bee17ce","first_seen":"2026-05-16T18:29:07.860943Z","last_seen":"2026-05-16T18:29:07.860943Z","times_seen":1,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":49,"dns":9,"connect":1,"send":0,"wait":179,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btconbase.pages.dev/flo-forms-public.min.css","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:38.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btconbase.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 15:43:02 GMT","end":"Thu, 13 Aug 2026 16:40:44 GMT"},"fingerprint":{"sha1":"DC:C9:F4:7B:85:2F:47:41:01:2E:98:86:0E:19:FC:23:4E:93:14:4C","sha256":"05:2B:71:4A:C8:04:26:54:F7:8D:72:FE:1E:9B:D2:8E:2C:87:88:7A:C7:CB:BC:21:96:BA:77:D5:A2:F6:84:B6"}}},"request":{"raw":"GET /flo-forms-public.min.css HTTP/1.1\r\nHost: btconbase.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btconbase.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:28:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NMa7n4snOIaEx3U3dL2LNh0sbEiVz741vlhmRkwyP4OBvkfqYxqU7QQ2ErEwzr8fFoyBSd41d546yk2hGf%2FMcq6%2BrhQtsfoQ4znXW9Geje0S1CHfiQpDJG6FxdQT1Sb0gZSxYsaA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"38604de5b95cd35e920cc085b6cd5b71\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fcc717bdf1ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17234,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (17234), with no line terminators","md5":"2b346e3e073ef498fd1b02b54cebf983","sha1":"a842278221794ae83e02f7258b470eb6d9b74182","sha256":"40b46c67c43685d7c5e214c72ec5d69b507ba74817d094399f0b99c4ac1d0b72","sha512":"bff1c0f7bcebef9372bd2768dc4b567f461ef34a75a0a2dbd331c08a59c76a89e9dd7df9f7cc28f638982587b3715ccf5158d4e30a4309eb985abbc7d5af3245","ssdeep":"192:Imf8uQ1qiYnVkzcWkzLpkaoGklLzb1DgrTTtAIZExIekYIdTtlAsUXrJTZ2JbQIw:Vf8uQXZnhEqQ0YVeGe","tlshash":"7b725472e660022c981f4be965c5aded031578184b2717e6f23549fa4bcc2fd2a3a7cd","first_seen":"2024-03-12T10:12:06Z","last_seen":"2026-08-01T14:11:52.936478Z","times_seen":54,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/65a090310ff6374032bf1967/1hjtj6h2u","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:39.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /65a090310ff6374032bf1967/1hjtj6h2u HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btconbase.pages.dev/\r\nOrigin: https://btconbase.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 16 May 2026 18:28:39 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-6a065cc0373\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9fcc7181cd4e32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2123,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"ca909c5592fa9aa4bada8707cd537b71","sha1":"693a700db2d031aa04409aeeb229652b700c0f40","sha256":"2071bf516e164db7cd225229bed498d5547266cf1bb35d0c17138badd6f57236","sha512":"d23af8e9bab9cdd7b66ca6526c23739985c58549941f4ff4a6a128b9262155338adc1c531b01df5db976a9507e868dcfc061c100869961f3b6716ef368d74bd5","ssdeep":"","tlshash":"89410fdb9b4e1853922420d80cbefd4eb0b3b2e6489d5c838708400077627ed228dd3a","first_seen":"2026-05-16T18:29:07.863235Z","last_seen":"2026-05-16T18:29:07.863235Z","times_seen":1,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":23,"dns":5,"connect":1,"send":0,"wait":461,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btconbase.pages.dev/favicon-2.ico","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:39.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btconbase.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 15:43:02 GMT","end":"Thu, 13 Aug 2026 16:40:44 GMT"},"fingerprint":{"sha1":"DC:C9:F4:7B:85:2F:47:41:01:2E:98:86:0E:19:FC:23:4E:93:14:4C","sha256":"05:2B:71:4A:C8:04:26:54:F7:8D:72:FE:1E:9B:D2:8E:2C:87:88:7A:C7:CB:BC:21:96:BA:77:D5:A2:F6:84:B6"}}},"request":{"raw":"GET /favicon-2.ico HTTP/1.1\r\nHost: btconbase.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btconbase.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:28:39 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=74ndPwNaGee3hERmp8EhSAzS9bSSmF%2F5GfzeKT6uMxdaHgdZrNWI3X8sboNvhNqiz%2BlS%2FfpkU6sHls7vMWbNoDeW%2BBzyz1zooznigkLZBdZifntUtzvd2ot4lR8P5wJLzaHyyWTK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b1a1b323ded50a03b6f3d9ac738eae36\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fcc71826ac8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"40b7ff7c01eb1c25bd58cdca36cb0de6","sha1":"f9eef62a85ef4cb40417b0fb031571afd5287b7d","sha256":"9d2733f5be7d5050f7e7c637dfa44f196180a3b83a5b3a531b719330ccc2f070","sha512":"65f055bf1af9148051f273d3cabbc353f831b479174ca05f8718b6f524b9b7bd53105983ca75642a723205455293aaea89170fb25192050db20ea868f3728ff9","ssdeep":"96:jOvPLZBOl74tQGvqxb4oeCk89k2HEfBEYPdnrUy5pZfK2phUES3ejUUa1tS0T2:jCLzEstQWNnr2kJDPdrRlT/jUUa1tU","tlshash":"da621ff12210d502dd799639ccae7afe3395b8297860c34f25d0be0ab67780175698af","first_seen":"2026-05-16T18:29:07.864741Z","last_seen":"2026-05-16T18:29:07.864741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btconbase.pages.dev/HKGrotesk-Medium.woff","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:38.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btconbase.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 15:43:02 GMT","end":"Thu, 13 Aug 2026 16:40:44 GMT"},"fingerprint":{"sha1":"DC:C9:F4:7B:85:2F:47:41:01:2E:98:86:0E:19:FC:23:4E:93:14:4C","sha256":"05:2B:71:4A:C8:04:26:54:F7:8D:72:FE:1E:9B:D2:8E:2C:87:88:7A:C7:CB:BC:21:96:BA:77:D5:A2:F6:84:B6"}}},"request":{"raw":"GET /HKGrotesk-Medium.woff HTTP/1.1\r\nHost: btconbase.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btconbase.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:28:38 GMT\r\ncontent-type: application/font-woff\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v2PZoSMgtQWDwCu7iccclkmwd3xkTZPR5E3VK%2BCy3WPiBkuikgdAaKuuEBIrER1wghJJiPer3BSnqqsignDdc8jSn9a3v3S1%2FfPJdefBMXC5kW4Rs54sAYVjJIKQH8oDMWQWOJ5m\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d59a59fd779ca79fa57341a168373521\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fcc717cea4cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42648,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 42648, version 0.0","md5":"4bf9c6ac4bd3390d55a08676ed7d387f","sha1":"47c634c0f3439af2ab54977bff1abb534162bda5","sha256":"9eedc3467c03a860937c14e9479b22b2713a5c35839a951b29ded6a7855be427","sha512":"27f2e9edb57719e3ccd83fa7dc7037cb398507237585b109dbe017406e26402c32c7bde036c7dd56de6f51974eca65bf8c475fd50f4204bfadf79b8e73090d36","ssdeep":"768:TidL/o2Xq5YdnyxP1plAAmUC2ToLBAWkWv19G3rIghZh8rIgI:mDo2aYdUP1TYUC+o/v1IbtUI","tlshash":"1d13f113971bfa25d0c2607338f5c605ff46baaa64d1ad64bca59f630f76254f481c20","first_seen":"2025-07-04T22:16:43.130444Z","last_seen":"2026-07-31T22:44:23.112747Z","times_seen":8,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btconbase.pages.dev/HKGrotesk-Regular.woff","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:38.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btconbase.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 15:43:02 GMT","end":"Thu, 13 Aug 2026 16:40:44 GMT"},"fingerprint":{"sha1":"DC:C9:F4:7B:85:2F:47:41:01:2E:98:86:0E:19:FC:23:4E:93:14:4C","sha256":"05:2B:71:4A:C8:04:26:54:F7:8D:72:FE:1E:9B:D2:8E:2C:87:88:7A:C7:CB:BC:21:96:BA:77:D5:A2:F6:84:B6"}}},"request":{"raw":"GET /HKGrotesk-Regular.woff HTTP/1.1\r\nHost: btconbase.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btconbase.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:28:38 GMT\r\ncontent-type: application/font-woff\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4zwm%2FmcVG%2F78Wme%2FqQ%2Fz2Gg1%2BGfal%2FIYBHX1TnZHJdVsfATyX%2FK9akZbhm93ugG6tPjRM0TQwvGc%2BhlYnkFh6L7Q4vVrpfTUfxfrrN5%2Bx9mJVzzX1rAUjacrGiyh59RwxeCLh6OZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"cf1d10662e4465e9d880ebaedb60be63\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fcc717d0ab5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41272,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 41272, version 0.0","md5":"810fb3e253af186b1d179124b7b2460d","sha1":"556eaecba3b78fe1aacd854a0188fd3a82234cbd","sha256":"5fd08712a670aa25791b086b6306a2449b3f175401265e122fa43e6aa992534d","sha512":"de980ba85311b579c1307948cc2c7214e885790571e030e2cc158e246885e6659d6e601e62b191e51aade09471e99888335665449f130e1aaaa94618a1540df3","ssdeep":"768:92OGG2UB/iGZsIcSpcLgAyvQjYtSutG2LpvgUGM35lSE0wcLX0waPpjA7C69:9jPbo5Ih2M/vQj0SuNv32LHLkjjA7C69","tlshash":"9603f1648ae7f849e834f1f480dffc016e587d1da88b4d365884362f59766e964bc3c8","first_seen":"2025-11-20T10:46:59.977158Z","last_seen":"2026-07-31T22:44:23.124877Z","times_seen":5,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btconbase.pages.dev/HKGrotesk-Bold.woff","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:38.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btconbase.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 15:43:02 GMT","end":"Thu, 13 Aug 2026 16:40:44 GMT"},"fingerprint":{"sha1":"DC:C9:F4:7B:85:2F:47:41:01:2E:98:86:0E:19:FC:23:4E:93:14:4C","sha256":"05:2B:71:4A:C8:04:26:54:F7:8D:72:FE:1E:9B:D2:8E:2C:87:88:7A:C7:CB:BC:21:96:BA:77:D5:A2:F6:84:B6"}}},"request":{"raw":"GET /HKGrotesk-Bold.woff HTTP/1.1\r\nHost: btconbase.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btconbase.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:28:38 GMT\r\ncontent-type: application/font-woff\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QWPglyTlrJ90%2Bt3XGc1pdoI9uAQYee2ZibSu548KYxyEuCaPVzEtPe2M4WgqFbMSS%2FbYzmZPHWA0bBMYxPLbLyPq%2FkQmld0MeN7KbWO788RoAbG1mtt3iyi1uweZnep5qu7fBOyd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ae0f27e1bb9c9e13ef22284eb69b5dea\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fcc717d0aa9c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41736,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 41736, version 0.0","md5":"f9d69c970a0ae42b515b22fda4d61895","sha1":"fd914b0d928397f8b4622f494aa8e49fe0fa4185","sha256":"850df7b135a86f25032c05f2a6f9cf72c7fcf43f0fe7b6366fa3e441c1a0ec24","sha512":"3e9d65fa89913b9b4b2d9501243c4840fcb274e27a8399d4b0209a15f0e0e3933aaf09d13e0ea40b4057fd9f9b2235631a76f8779b33b0a39df8d3de6d263286","ssdeep":"768:P/gBlz8y8fxHShiSMrw+yjlenE4qAu61uxNPN6Q2TvDDCJaZDiP9:ul0fxHSDojyJenEhGPIP9","tlshash":"f813f15691820c25e67bf07b02d18ea131eb324df2f2c5d319a22ee8c5d29d6b56d333","first_seen":"2025-11-20T10:47:00.002477Z","last_seen":"2026-07-31T22:44:23.109788Z","times_seen":5,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":227,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth.meowrpc.com/","fqdn":"eth.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"172.67.70.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:40.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 13:57:04 GMT","end":"Sat, 04 Jul 2026 14:57:01 GMT"},"fingerprint":{"sha1":"85:52:EE:75:CD:65:E7:8C:91:4E:D5:62:4F:5F:95:5B:FA:E3:D3:F2","sha256":"FF:7D:9E:82:D7:74:6C:AA:45:C3:DF:90:E6:C1:C8:95:1F:F8:84:3D:FF:FE:C9:F8:71:A9:70:43:3F:B0:FD:5C"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: eth.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btconbase.pages.dev/\r\nContent-Type: application/json\r\nContent-Length: 192\r\nOrigin: https://btconbase.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":192,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x941E09C78cc72b5C264c17BA6327c06A0Faad6e5\",\"data\":\"0xc2fb26a629690e2388a22f16d924e4a645cd2b40a8e24c414d664ad7ea957b73\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 16 May 2026 18:28:40 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OAarUlqOFf878fR0IuWG78cOH8Gq7RX4%2FE4H%2B9ZmTO4SsZIYdM%2FrEaU1YOwMr1P9hntOGQzDM6jDniG1OyXd%2BTOKnwtnTG1ex02jKHDqZa7%2BSuk2LtEf53Eir9nsEwEk5w%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fcc718b5ea7b515-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e46902157aa64abcdc41f29ace8b171a","sha1":"b959cf3eceb9eee47817435a4c36f0792aa15811","sha256":"36edf520b814be5fc0d5360dc0f6ae1e9ed28f47bcc63fe6ede8285bfe2ce982","sha512":"49d1d832b1949ee103d35f061172658ef17bc4970391dca16e61aabfce51f02db86daa7cbe9d7657265e1ebf17916c347233226eedfe065aacadabc4409ce6c5","ssdeep":"","tlshash":"c5b01220514e2b30715a49067e0d394d57f099f104507f031c0c8a09250951790c2130","first_seen":"2026-02-05T07:43:22.648531Z","last_seen":"2026-08-06T00:17:01.921425Z","times_seen":233,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btconbase.pages.dev/css-1.css","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:38.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btconbase.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 15:43:02 GMT","end":"Thu, 13 Aug 2026 16:40:44 GMT"},"fingerprint":{"sha1":"DC:C9:F4:7B:85:2F:47:41:01:2E:98:86:0E:19:FC:23:4E:93:14:4C","sha256":"05:2B:71:4A:C8:04:26:54:F7:8D:72:FE:1E:9B:D2:8E:2C:87:88:7A:C7:CB:BC:21:96:BA:77:D5:A2:F6:84:B6"}}},"request":{"raw":"GET /css-1.css HTTP/1.1\r\nHost: btconbase.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btconbase.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:28:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kd0VeBpXfda3ZdXt8LMNnc1DMNt3U7HWXRjzt%2Ft2mbg0dVo09zwUe1Kq%2FOh1mehanphfiHt2q%2F1cLVwc4fjL05FkwqqGAv9d651plo1Zph7LZU2oKSy5d54lg1037%2B1GQNHRd1fu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7b5f51f69d0a96c4e994fd75c474aa9a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fcc717bdf00c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6452,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f6cce4738f124cdd9ea3f648526fb22e","sha1":"4610bfddf64e3db5b0ddaab88ad683158adb38d7","sha256":"7bd4b600b67ec019b891901f750c5e4dd10d891e74407155314f1e9270c6fe50","sha512":"deeb25daf35d489878fa3af4ab4d528fb85460f0ad1c0725a0040a1321511e78f2d1e060b4dc65a5a21543a08d6a2f3513fc020b4972bacf65c9a60373ad34ab","ssdeep":"192:ke0O3d2GCeaOhf2sZexOc22nkOU2NCeaOzZ2k/:dH35ucD057","tlshash":"b7d16790482a9400e3872ce673cf3e328d9db2047045d9396ffe1868ad9ad7563e5b5e","first_seen":"2026-05-16T18:29:07.871741Z","last_seen":"2026-05-16T18:29:07.871741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btconbase.pages.dev/style.min.css","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:38.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btconbase.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 15:43:02 GMT","end":"Thu, 13 Aug 2026 16:40:44 GMT"},"fingerprint":{"sha1":"DC:C9:F4:7B:85:2F:47:41:01:2E:98:86:0E:19:FC:23:4E:93:14:4C","sha256":"05:2B:71:4A:C8:04:26:54:F7:8D:72:FE:1E:9B:D2:8E:2C:87:88:7A:C7:CB:BC:21:96:BA:77:D5:A2:F6:84:B6"}}},"request":{"raw":"GET /style.min.css HTTP/1.1\r\nHost: btconbase.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btconbase.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:28:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AuRdJuuu5B43bMJv2Qg2WQ6kvKNxLSl8FfBolVQaKuBdgO9NTf1%2FjlfuffgXpOjE1O%2FJN0g5zuK30u%2BcxgBHXrPz8dkr95skRYpWSyntaapJgB%2FEFSsiaQgh1iHGzdoU50HenYT1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b12adef09cd6e22a4ab92dbb421418b0\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fcc717bdf0ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":318070,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"60c0971e223c6fb42f508b7dcd25ec39","sha1":"357de854db381eb8846bf4431e717487d674290a","sha256":"5e885a6fdf22c5da5322f490b528c6db7c2e34ff0530fb8a2cfa1f355cf5721a","sha512":"f444c347125541c0dc1c4c7765c05c70e6a9d295894a5382006ab929c4b7be2d27879118af5d8f68c622675f681f9225a8c04384853c43976628781740f3ee4a","ssdeep":"3072:wbTy1EnmJ4bzwgBB8/KtIr2ZtKgVvPuRY7a9kH3UOy1EnmJ4bzw1B8/KtIr2ZtKs:kjWI25f7x","tlshash":"9e640c6fa110334c0427ca1197ca95685239c411e93295fef9bb6a4ac7cf78815b3bfb","first_seen":"2026-05-16T18:29:07.873234Z","last_seen":"2026-05-16T18:29:07.873234Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eth.meowrpc.com/","fqdn":"eth.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"172.67.70.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:40.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 13:57:04 GMT","end":"Sat, 04 Jul 2026 14:57:01 GMT"},"fingerprint":{"sha1":"85:52:EE:75:CD:65:E7:8C:91:4E:D5:62:4F:5F:95:5B:FA:E3:D3:F2","sha256":"FF:7D:9E:82:D7:74:6C:AA:45:C3:DF:90:E6:C1:C8:95:1F:F8:84:3D:FF:FE:C9:F8:71:A9:70:43:3F:B0:FD:5C"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: eth.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://btconbase.pages.dev/\r\nOrigin: https://btconbase.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 16 May 2026 18:28:40 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: authorization,content-type,dnt,keep-alive,user-agent,x-requested-with,if-modified-since,cache-control,range,x-api-key\r\naccess-control-allow-origin: *\r\nallow: POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2qOEZS6hUiAHT2lFBsuYscxCElzQm2w5JGhjyCVSUORxJAR8lDDoRluAOihie4CBxT%2FCOFruN4odhODo1loDnZfHORuUS5ykGC84JEoAN%2FgXI6cFNIqLb7%2BcC%2FT0aWPf4Q%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9fcc718abe06b515-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T04:01:16.359001Z","times_seen":17736640,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":42,"dns":5,"connect":6,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/eth","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"173.244.207.30","port":443,"asn":13213,"as":"UK-2 Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:41.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shark.multi-rpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 11:28:53 GMT","end":"Sun, 21 Jun 2026 11:28:52 GMT"},"fingerprint":{"sha1":"AE:1D:6B:AA:47:F3:E6:57:DE:8E:AE:96:E2:57:FD:59:C7:98:35:45","sha256":"E7:E9:5B:8C:16:7D:7C:6C:3F:CA:EE:53:6B:E2:1C:37:99:35:61:A9:23:2A:B7:B5:21:15:EE:7D:F2:99:FF:57"}}},"request":{"raw":"POST /eth HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btconbase.pages.dev/\r\nContent-Type: application/json\r\nContent-Length: 192\r\nOrigin: https://btconbase.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":192,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x941E09C78cc72b5C264c17BA6327c06A0Faad6e5\",\"data\":\"0xc2fb26a629690e2388a22f16d924e4a645cd2b40a8e24c414d664ad7ea957b73\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 16 May 2026 18:28:41 GMT\r\ncontent-type: application/json\r\ncontent-length: 229\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version,x-ton-client-version,x-client-name,x-client-version\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"42e136a22281d105bd21fa496816706c","sha1":"bc02950079004b0d4f4bea3888dfd4517cddeeff","sha256":"ede226c79ae326ce9e4b099e9f4dbb4e3d7807da2b793bdfadfafeeb84d7175a","sha512":"a41403da8b9e698eb2823bbe0925160b68682c55d4c64e5c8b27193f8fd8bf4fd118179d26eadb446ed41c2c9c12d46523b6f5094caadaae8a03ba3c1d6bade5","ssdeep":"","tlshash":"33d02313c6470537e34f4633371567c4f559705071105f1b4e1c0315024f97b0255351","first_seen":"2025-04-07T11:34:31.00119Z","last_seen":"2026-08-06T03:35:35.60571Z","times_seen":3027,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btconbase.pages.dev/style-1.css","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:38.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btconbase.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 15:43:02 GMT","end":"Thu, 13 Aug 2026 16:40:44 GMT"},"fingerprint":{"sha1":"DC:C9:F4:7B:85:2F:47:41:01:2E:98:86:0E:19:FC:23:4E:93:14:4C","sha256":"05:2B:71:4A:C8:04:26:54:F7:8D:72:FE:1E:9B:D2:8E:2C:87:88:7A:C7:CB:BC:21:96:BA:77:D5:A2:F6:84:B6"}}},"request":{"raw":"GET /style-1.css HTTP/1.1\r\nHost: btconbase.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btconbase.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:28:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RUMlqMYpLtDr3FzMmzFbE%2FDfSS9NEv%2FPOi5K0IHmSE0kjev9GtbFbrC9WeT%2BHUbBpg5mmvC9cXomkfDU14TBMkcQ1OJIr6nqt0MPav5YBkkdTo7KDuBkFZImCT5BUUTCCbqS5xlV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"efab169e7bf0d0a3f1b3e036056b1336\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fcc717bdf05c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":738,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (409)","md5":"30c055cdcfba651d3a68e5239765785f","sha1":"dd86ecd4dbf3bcbc0110952354a9feaff604a6df","sha256":"8acfac9be20ef65fa332aac88a3b4f62739a70ab0f490bfcd7f8f6e216d77217","sha512":"58418c6737ba5e64f15e0c05a7d1886c6d10b2f8591ef70032b0bbf85ece69dda715b2cab2f60f746d9ff1d792dac17eadd9d876d5f2556a097540988010c01e","ssdeep":"","tlshash":"63016007ef02823b52fd0007b9a7779bdba2d32c3fa0069ed82a052c0241a2c80f074e","first_seen":"2025-09-26T20:42:04.623503Z","last_seen":"2026-05-16T18:29:07.875673Z","times_seen":6,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btconbase.pages.dev/vendor.css","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:38.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btconbase.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 15:43:02 GMT","end":"Thu, 13 Aug 2026 16:40:44 GMT"},"fingerprint":{"sha1":"DC:C9:F4:7B:85:2F:47:41:01:2E:98:86:0E:19:FC:23:4E:93:14:4C","sha256":"05:2B:71:4A:C8:04:26:54:F7:8D:72:FE:1E:9B:D2:8E:2C:87:88:7A:C7:CB:BC:21:96:BA:77:D5:A2:F6:84:B6"}}},"request":{"raw":"GET /vendor.css HTTP/1.1\r\nHost: btconbase.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btconbase.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:28:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U6PAWK8JWdqh9Q7V6lCUiNjdEHp7RTCVpz8MvgEsiCeAT%2B%2BXjiuVOuywrXP4GauZMQAQrp0lZtZaxDZdhMbBFYGLHUhozfN0mYCsDYzwuB%2Fduz34s5X45GLoCr%2BlQayaPPB5WReC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"35fb87b442bd16278c86f5f56fddc997\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fcc717bdf09c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1657,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1657), with no line terminators","md5":"282eda3401aee112cee37b46f4ba093e","sha1":"d34eb370931e78d8bef2074525f3f6043ef566e4","sha256":"50f10340a8e8dfb290d931ffa0d0837220e6df4340f501426e3fa44a14e9592a","sha512":"23a47539a29ad3483760d1d9af19c2b873344a83685bc61a1b2af42d4fcd7b1b5634663bf2b7e0b6c760d6e7defd22389f676396c3fd0f5638dc7e34c50978b9","ssdeep":"","tlshash":"d131dc30c280243ebe27f34d5951d1fce364c3a6baa648af96075322d64ecd785c9c39","first_seen":"2023-07-31T15:46:44Z","last_seen":"2026-07-31T22:44:23.130427Z","times_seen":26,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btconbase.pages.dev/style-2.css","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:38.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btconbase.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 15:43:02 GMT","end":"Thu, 13 Aug 2026 16:40:44 GMT"},"fingerprint":{"sha1":"DC:C9:F4:7B:85:2F:47:41:01:2E:98:86:0E:19:FC:23:4E:93:14:4C","sha256":"05:2B:71:4A:C8:04:26:54:F7:8D:72:FE:1E:9B:D2:8E:2C:87:88:7A:C7:CB:BC:21:96:BA:77:D5:A2:F6:84:B6"}}},"request":{"raw":"GET /style-2.css HTTP/1.1\r\nHost: btconbase.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btconbase.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:28:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aAlOBRyQE6SejsPBHST1RcIoZUWIWBtgxyXKjKFFTQx%2FP7Hc3CdiEoHAe48cJl%2F4zl%2FZfpfeWVddNy9M6jZNrA2BhK2tgy0J9%2Fwj9BfIhQXkLMYRSTBzaBAKUSzg0Ca6rhEnXSYi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d2a769f17d740126d83f34405e473554\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fcc717bdf15c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"27f3801b33f5f8ae3e6bef1ed8ce4b7b","sha1":"6fd7c55d2c230a071f2c7ede985f8d9b2fcf885e","sha256":"ec2c33730c1708fe740a9556c167035d8e13d28f77c0a6b3c4fd6db8fcf094ce","sha512":"1f840f7b5759233e1c0d8666a1500919566105e08254a6e6616e179f3f46960c61214a23fcdf000e00c9f5a898228286f9de7fb32c05a52b8c880dae81481a82","ssdeep":"","tlshash":"43c01250a117830a70b9c6152cb5f1018bb9775cd1c15174fd6e165d471570440d5b0c","first_seen":"2025-11-20T10:46:59.989049Z","last_seen":"2026-05-16T18:29:07.877942Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btconbase.pages.dev/108554348.png","fqdn":"btconbase.pages.dev","domain":"btconbase.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btconbase.pages.dev/","date":"2026-05-16T18:28:38.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btconbase.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 15:43:02 GMT","end":"Thu, 13 Aug 2026 16:40:44 GMT"},"fingerprint":{"sha1":"DC:C9:F4:7B:85:2F:47:41:01:2E:98:86:0E:19:FC:23:4E:93:14:4C","sha256":"05:2B:71:4A:C8:04:26:54:F7:8D:72:FE:1E:9B:D2:8E:2C:87:88:7A:C7:CB:BC:21:96:BA:77:D5:A2:F6:84:B6"}}},"request":{"raw":"GET /108554348.png HTTP/1.1\r\nHost: btconbase.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btconbase.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:28:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 9655\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"8b072d64b05f437c63ad853370153a92\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7021fuU6jV8eFjEav5WV47w0MFhCNcs%2FbTCxAE3%2F5d8m4mUA%2Fg8b20UzhRF5F5TiAs%2FiTAJhenKL7J4lykiYhYrKJGQwPcQa%2BBmXRnkl1Sz2z8XXLtAXtkv70EU5toJVyAHoCqik\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9fcc717bef2cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9655,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"ee9de5a778d171f42ea7306e3ce23d11","sha1":"c8bb0ab3a01b80381bd5ba60183aad02de0bf578","sha256":"8f5a68a3ed7fc7797e4285e4f36976452d6a9ae7c848e233755ba1a18d4894bc","sha512":"017f10e820d4352bbd4698c9eb1fd892147658d73cc3b800014ee4e092238abdd958b7e0d78ca85996ac154dc1f0fcb820af25c6306b253c0c13599f9164dadc","ssdeep":"192:8VhcQ6Zt1AKtytWiZfvoOirnwtYESzKtFsXlt9HqCg69D6:kd6ZVyRXjirnwtrLtFqtEj69D6","tlshash":"9912bff184391e5b01004681e4f2b1418bbdba81dbad53683aafc3fd955d4bb53a10eb","first_seen":"2026-05-16T18:29:07.87944Z","last_seen":"2026-05-16T18:29:07.87944Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"btconbase.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}