{"report_id":"3e6c9820-2e3b-479a-b259-1f93edac105b","version":6,"status":"done","tags":[],"date":"2026-03-16T14:27:46Z","url":{"schema":"https","addr":"btlyp.com/h5/#/register?code=bmqjkpq7ms00","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"104.21.74.188","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"btlyp.com/h5/#/register?code=bmqjkpq7ms00","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"title":"BTL","dom":{"size":10937,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (8463)","md5":"0c8a9a80c4208a3e91a8681ddefed03c","sha1":"f90b8b9b8a2b3349522293ffb6f4e7f4d7c5108b","sha256":"2bb7cbc58a8e458af6d7c139e98f6e22ad9aa0dd92dc3c989646ca4f1394b405","sha512":"12361ff0a2640c4a9bb52213f31a96d9d023f95704f7e237e542a82b63ac086436393701532b4f68d560681e3e00d7261b5eabc32e9b5fe8869c0075cb75ab51","ssdeep":"96:n1nbu/ZO24wwlCvgbm2QTr44S08x8zrjWdLa4Wr44SN70xqzjjd7YHAxMDAj:1nbuxOZ1lCHaTeTaNeG","tlshash":"bc32b966680d19274617cad0b5b1ffa939e2e70ec90e61009fad03e50ff7db1a97c1a1","dom_hash":"domhashfd13d297847e746c187d1bbc6e0e2d57","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"btlyp.com/h5/#/register?code=bmqjkpq7ms00","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"104.21.74.188","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-20T14:27:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.bttla.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":8,"received_data":19406,"sent_data":4565,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"btlyp.com","ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-18","domain_rank":0,"first_seen":"2026-02-25T14:13:36.247506Z","last_seen":"2026-02-25T14:13:36.247506Z","alert_count":32,"request_count":32,"received_data":5237226,"sent_data":13805,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"btlapp1.com","ip":{"addr":"172.67.208.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-18","domain_rank":0,"first_seen":"2026-02-25T14:13:36.246431Z","last_seen":"2026-02-25T14:13:36.246431Z","alert_count":0,"request_count":1,"received_data":17773,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"btlyp.com/h5/js/vendor-CqYl8bh2.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9bc0a119195dfb4c37a642c1f7042661","sha1":"9eedc29ca1a465f3c431d005910553350e5a90e6","sha256":"d3208b20a86afe42b7dc9dd5866a7bedefdc34651bdf80baaecacd43488b25a5","sha512":"27707e975c3353b733b8383da2a8ee1f010eccb9a31cdc5c7b9cdaba3f267b2ad537b173e9db1bd4b723c980d0a5016cc1918c7dfac3c7ee56aaf13b1b951a5a","ssdeep":"24576:T8e4YksVYcOogMMZE/wgOHs5QPoyXQCkyt51iN:T8e4YksVY9ogMMZE/wg75QPoyXQXyt5k","tlshash":"74153bd4b2a5b06243a715f4507f0007f23a6959744e84a8f16ddceb3eb984992bbf3c","size":919003,"data":"","first_seen":"2026-03-16T14:27:56.89442Z","last_seen":"2026-03-16T14:27:56.89442Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/LanguageDialog-pW3bhaLF.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a939c2b8cc494f856c12a3e3fc8cb63c","sha1":"50366fca5181122850c1fca6e6b39349a6c6fd60","sha256":"fbe61a1ea2873f7a6487661c1c2cd20ff8c6af6382ba05be7e24f3171f84a98a","sha512":"4b831b9e3c90c99351b4f81cc9dbf06fc1d7f996be371b2bd4732c6aa295abea1783e80c3cd99680cdb3cd1092bb486c23052b9f831d569ff3c23a520fafb34e","ssdeep":"","tlshash":"0331744af8289a7e96bb10f691004501656e1fafb3714bc5b1be1e36039be845248a11","size":1699,"data":"","first_seen":"2026-03-16T14:27:56.852835Z","last_seen":"2026-03-16T14:27:56.852835Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/waitForGrecaptcha-DRY8uLox.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d9a3040669579cfad66f6a8d274e34df","sha1":"47c08e211acfc738d1029098565df2e324096bd7","sha256":"a236f9fda43e59f0829a0b10ebcc59a29230173d2bdeb62f2742bfebc73d9e7c","sha512":"091fc4fef0a2598af6f7e77591b8f79c6bc9825c3db87fc22ae6132279cd160c234fb36f4b464dae37b163b7354d954e088697bffbd3fde0fb39ab7ecda476d1","ssdeep":"192:jUbjBLZp5nwWxbJk+BOQAbCwDGMsJVkIytcuApXD:4nB5nwatBOQ+CwadVJySuKXD","tlshash":"47d1f9c47849eafb5f73959864cb0100b30ebaade4626c90516b07293fe1eb1735d70e","size":6565,"data":"","first_seen":"2026-03-16T14:27:56.853919Z","last_seen":"2026-03-16T14:27:56.853919Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/index-B7HBgPCh.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f33e30a79c04ee68af0ab3ce1fd7e696","sha1":"ec8e41066a9901a15e4acfc8115b8930b2e46b90","sha256":"7fe7b640a144315419217c565702f51401bb2dd969d7bbee46a7fc4b167f0473","sha512":"93811a24d8aaeb1a4e4431dd41625782bae70dacceef028d6fc621ea5e0924abd1812f6bc375844d8b792c33ceed5c3a7974b2bdeabedbf4940c651905ad82d6","ssdeep":"","tlshash":"ba016dd6b546f3da5103ac066ccb110f95552633fc677cc0450b459fe4729747da28e7","size":752,"data":"","first_seen":"2026-03-16T14:27:56.91421Z","last_seen":"2026-03-16T14:27:56.91421Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/left-CBpy38BC.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2a7253fcccc2a93e28e89296159df06f","sha1":"68ec702f2bbf5d5e5b84e82326f2b9e6425b29e3","sha256":"47fbaa1ebbd3189e3ab2c20ee0cfcb9722aece87812cc3da6be84329743823f9","sha512":"d088949bc818cd6aa6f7a6f1d19ccd4f24afc012748052dcda9eccf32dd89529ffd376f1e6d9539b97480f0483f2de6e9ca56c28fd90487652bcd19fd0d93685","ssdeep":"","tlshash":"a4017075450d7ee1828946f837b331a88d4100cf31b002d0adc9fc0af7cc13472e92a5","size":757,"data":"","first_seen":"2026-03-16T14:27:56.854889Z","last_seen":"2026-03-16T14:27:56.854889Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/close-Lg5wsGHA.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"847cf7a99fe311ba6e617ceb9fdf9bfd","sha1":"eaab15479018158f1cbb172ad8423dff0dd63401","sha256":"d35bcbb17d2cce9e798790ae2b9bcf05b5cec6ef9859b95628c5947ab5a2c7a6","sha512":"74ca0a4f2baf0f430df1b6d7ed39e98480e9932a20796f2d2bbf86dcd5c2a890ab15501e6d964242268945da03a488af3dda9641d31073c598161ba5538bc5fe","ssdeep":"","tlshash":"4c0186a10ccfb8eb68cb01e0985b6533dc49cd8a752b4058f788aa14a3e95543964692","size":825,"data":"","first_seen":"2026-03-16T14:27:56.855958Z","last_seen":"2026-03-16T14:27:56.855958Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/index-BRuTXH-_.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddbd9ff7986b4fd5a6ecfecc75b1320b","sha1":"33eb42c3e7de8c4643e02e0a2334d48c22403f37","sha256":"5f05c12a4da1ef6820416b3a57f159f9ed7a6e8487e9cac0f8fe5ababd1cb4c8","sha512":"791fdb0eceb0cf5d5fd37ac3f87db0fef2ef12ac6978715dbe1b9cc1d589643c6b658d27b35614065df1245599f25ae594ae214d836db459ca4edca1d59cfeec","ssdeep":"192:AxQeEAMCnizH5jv66SrsAd2xJkDaACFETceqW4dElHn4x5qDCqt6bVG3PwKEpqg:KQ3V6iFjv6JsAd2xJW5T3F4GlM5qDCqK","tlshash":"b722c68bb3188db98bb7b4e4f859a0142125e74a941180d0f3be4f562df9db0931da3f","size":10065,"data":"","first_seen":"2026-03-16T14:27:56.869927Z","last_seen":"2026-03-16T14:27:56.869927Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/index-7F_aW3Gz.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"17747af82851682968e9657617ce9fe4","sha1":"c925964897581ec98830dd5faf8bddd92e8b884d","sha256":"3b375eaea1cc00748eb16f6845388592446cf05f1da05cdaf41a6f3cae6e99fd","sha512":"780c018a0e6faa218a113b683af1d27a5d1912b428a9d48777747e88d64e505008cdbdf01b482894db264220442e7bf4ee6d59ba594ce3fba55f1912215ddfeb","ssdeep":"49152:q+IwDOWeGkohzmqJGb/kuM0ZKjey8tlELAXEGeTR/TUrT75i6i:H","tlshash":"2ae55b79d28801f705c5a616e84b3e02b469dd7b8a46b018c3b7de4d26de5bb40fe63c","size":3104491,"data":"","first_seen":"2026-03-16T14:27:56.921963Z","last_seen":"2026-03-16T14:27:56.921963Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/index-vP3G_uhT.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7bde0d4d54ebbf419af2cb69b1400756","sha1":"b83ff5517323720c576684715576a44199b5118d","sha256":"5e901bb2dce5fb8f9513ba9232c6cd39d06738386362511c176f574f7480cef2","sha512":"01b19585231f596be0ca2c5ca351b1a38d69126d007022a63895f29b6063f4cbf2c64fa014a389cc9be2784ce77dd85aeb1448db2d65c9ea0cbf1edec800ed4c","ssdeep":"","tlshash":"3fe02bd5b80ac2eb910b9c4e0ccb271b09681663f852b9f05765df7a6d305f8b051d6a","size":403,"data":"","first_seen":"2026-03-16T14:27:56.916248Z","last_seen":"2026-03-16T14:27:56.916248Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/AreaCodeInput-B9lF43pc.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f4283260808a8aae93e72d287ad7405c","sha1":"c7d44c18a091a69caf66b5778010e48ae0d9d715","sha256":"65bcb3567a7922c7b0c76b08b108985dd3d2e0d7f85d47fb7601b55c7bd3f543","sha512":"2c86bc4e68762ee2d31026037f5ed50aba9cdf99cd90cc07e29cf34b93a24e8a4c152c91bc6f77918864f42bc7de795e2cdbc09f7d99ce1df617fd513f9ca27c","ssdeep":"","tlshash":"9b5184a2f89cca7c96230491b4c62420662d67ecd7608de2fa7e42301fa4de0c65eb35","size":2831,"data":"","first_seen":"2026-03-16T14:27:56.878003Z","last_seen":"2026-03-16T14:27:56.878003Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/current-BwgTtQyU.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"cf9b35d58d35b29de50f1033b7c56e32","sha1":"2f23775fd95588fc1e52e95767d314921c2fdaa5","sha256":"22f3ccebad9ab57642a9de04b6d6b0b1beda30276ab486e377a412bd0a6d503a","sha512":"c0c2d8aa789ffa80d817270aff7434cc60bfd4c161043fd637876be1feff91e03a60cb7b7b98c6553b023b35b819508dd31cfdadb99fc526d57b97d4dbe33cb8","ssdeep":"","tlshash":"38f06815024509c9192d1ccc77568b5ebc8a1de7314d11cfae850b0748c56955db3a43","size":629,"data":"","first_seen":"2026-03-16T14:27:56.879776Z","last_seen":"2026-03-16T14:27:56.879776Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/layout-DvFKDYe2.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"02064e7097d7dea32e1c2e872dff8a5f","sha1":"30281000a8419f2015a19d43a181e82c56c8decf","sha256":"15cddd472ab5895a97703bd51637125f22b567b2272e753654140f93796a5e15","sha512":"c5a8b66151dac5c90a9b8412d04df0a4e3f8853ad23b0b3250201ca9c37cd8dd9a3f6b3a961ce975fb56d22806a18725129eebe8e3f886069140a1425e464d54","ssdeep":"768:irK8wtrDe+i19QS4ZsL+ut26ThEYgBMMo3yAvDZEe:s6P7q54GH28/co3yA3","tlshash":"0cb2d03488613e2a9df5d0adf41c996eae0f2b1fa223d0c2ed6c107373cf6b0519a841","size":25706,"data":"","first_seen":"2026-03-16T14:27:56.871049Z","last_seen":"2026-03-16T14:27:56.871049Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"btlyp.com/h5/js/LanguageDialog-pW3bhaLF.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/js/LanguageDialog-pW3bhaLF.js HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cPpuJ9rW%2FAFgEz3%2Bk9dL3FJeNBg73YfClXAhFRifAxxSnchJrW2tuRjr5QGMW3EotXTMZ51GYMmaxLJgWMBRtfPlvnSrXcM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"841c1b185d78e0c21268427c41aa46d8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd470419e8dc8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1699,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1698)","md5":"a939c2b8cc494f856c12a3e3fc8cb63c","sha1":"50366fca5181122850c1fca6e6b39349a6c6fd60","sha256":"fbe61a1ea2873f7a6487661c1c2cd20ff8c6af6382ba05be7e24f3171f84a98a","sha512":"4b831b9e3c90c99351b4f81cc9dbf06fc1d7f996be371b2bd4732c6aa295abea1783e80c3cd99680cdb3cd1092bb486c23052b9f831d569ff3c23a520fafb34e","ssdeep":"","tlshash":"0331744af8289a7e96bb10f691004501656e1fafb3714bc5b1be1e36039be845248a11","first_seen":"2026-03-16T14:27:56.852835Z","last_seen":"2026-03-16T14:27:56.852835Z","times_seen":1,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/LanguageDialog-pW3bhaLF.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/js/LanguageDialog-pW3bhaLF.js HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/js/index-BRuTXH-_.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cPpuJ9rW%2FAFgEz3%2Bk9dL3FJeNBg73YfClXAhFRifAxxSnchJrW2tuRjr5QGMW3EotXTMZ51GYMmaxLJgWMBRtfPlvnSrXcM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"841c1b185d78e0c21268427c41aa46d8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd470431eefc8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1699,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1698)","md5":"a939c2b8cc494f856c12a3e3fc8cb63c","sha1":"50366fca5181122850c1fca6e6b39349a6c6fd60","sha256":"fbe61a1ea2873f7a6487661c1c2cd20ff8c6af6382ba05be7e24f3171f84a98a","sha512":"4b831b9e3c90c99351b4f81cc9dbf06fc1d7f996be371b2bd4732c6aa295abea1783e80c3cd99680cdb3cd1092bb486c23052b9f831d569ff3c23a520fafb34e","ssdeep":"","tlshash":"0331744af8289a7e96bb10f691004501656e1fafb3714bc5b1be1e36039be845248a11","first_seen":"2026-03-16T14:27:56.852835Z","last_seen":"2026-03-16T14:27:56.852835Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/waitForGrecaptcha-DRY8uLox.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/js/waitForGrecaptcha-DRY8uLox.js HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/js/index-BRuTXH-_.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bnkmyTje8iToTrwco6kRHR6jFIyal9e%2FLIllPCtDvcGgo9biOfTfXqdNMF%2B4vjrN3Hoz8jBIm%2B0RoTOixrB3H%2B%2F8ABP1xQDfIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f13fcb63ed244d24927bd22dfbcef729\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd470431ef0c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6565,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (6556)","md5":"d9a3040669579cfad66f6a8d274e34df","sha1":"47c08e211acfc738d1029098565df2e324096bd7","sha256":"a236f9fda43e59f0829a0b10ebcc59a29230173d2bdeb62f2742bfebc73d9e7c","sha512":"091fc4fef0a2598af6f7e77591b8f79c6bc9825c3db87fc22ae6132279cd160c234fb36f4b464dae37b163b7354d954e088697bffbd3fde0fb39ab7ecda476d1","ssdeep":"192:jUbjBLZp5nwWxbJk+BOQAbCwDGMsJVkIytcuApXD:4nB5nwatBOQ+CwadVJySuKXD","tlshash":"47d1f9c47849eafb5f73959864cb0100b30ebaade4626c90516b07293fe1eb1735d70e","first_seen":"2026-03-16T14:27:56.853919Z","last_seen":"2026-03-16T14:27:56.853919Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/left-CBpy38BC.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/js/left-CBpy38BC.js HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/js/index-BRuTXH-_.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2Fqn8XCd6hJ0N2T8QvjkjER9ZcyOgEAYuRBhiZRUaBtW28wDvo7ANedM7TnArw9NKBC7KMq4fC6EsbxCLxdfJErV%2ByTT0l1zqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"20ef334a7a9ed428b36440428e3985f5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd470431ef5c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":757,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (756)","md5":"2a7253fcccc2a93e28e89296159df06f","sha1":"68ec702f2bbf5d5e5b84e82326f2b9e6425b29e3","sha256":"47fbaa1ebbd3189e3ab2c20ee0cfcb9722aece87812cc3da6be84329743823f9","sha512":"d088949bc818cd6aa6f7a6f1d19ccd4f24afc012748052dcda9eccf32dd89529ffd376f1e6d9539b97480f0483f2de6e9ca56c28fd90487652bcd19fd0d93685","ssdeep":"","tlshash":"a4017075450d7ee1828946f837b331a88d4100cf31b002d0adc9fc0af7cc13472e92a5","first_seen":"2026-03-16T14:27:56.854889Z","last_seen":"2026-03-16T14:27:56.854889Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/close-Lg5wsGHA.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/js/close-Lg5wsGHA.js HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/js/index-BRuTXH-_.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RXL%2BLf4Vw1SFiGuninQytyAhTC6fGg2iSPeX%2FnBc9NVd39JYL4q%2BpiObmTHymhtu5dKZXsTinFmkY%2BNM%2FA1iiMg6TQ59u1JE5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"24e5f8b25ad253b69f239a86051eef98\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd470432ef7c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":825,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (824)","md5":"847cf7a99fe311ba6e617ceb9fdf9bfd","sha1":"eaab15479018158f1cbb172ad8423dff0dd63401","sha256":"d35bcbb17d2cce9e798790ae2b9bcf05b5cec6ef9859b95628c5947ab5a2c7a6","sha512":"74ca0a4f2baf0f430df1b6d7ed39e98480e9932a20796f2d2bbf86dcd5c2a890ab15501e6d964242268945da03a488af3dda9641d31073c598161ba5538bc5fe","ssdeep":"","tlshash":"4c0186a10ccfb8eb68cb01e0985b6533dc49cd8a752b4058f788aa14a3e95543964692","first_seen":"2026-03-16T14:27:56.855958Z","last_seen":"2026-03-16T14:27:56.855958Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlapp1.com/upload/default/52946924084400128/20260221/0/415967577722531840.png","fqdn":"btlapp1.com","domain":"btlapp1.com","tld":"com"},"ip":{"addr":"172.67.208.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:26.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1d1acc7f.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 05:23:47 GMT","end":"Fri, 22 May 2026 05:23:46 GMT"},"fingerprint":{"sha1":"1D:19:A1:2F:9C:AE:6A:AA:02:0A:71:28:2E:72:19:88:45:0A:9F:6D","sha256":"35:87:2E:75:B1:7F:BF:78:60:72:39:D0:B5:F0:FF:C5:B9:3B:B5:5B:E6:24:0D:FF:47:15:7D:41:82:A0:1B:7E"}}},"request":{"raw":"GET /upload/default/52946924084400128/20260221/0/415967577722531840.png HTTP/1.1\r\nHost: btlapp1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Mar 2026 14:27:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 17131\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YS3Rx44st2WZZWkacRsj4IkEukREL8ysgStVW6HQbDspzKN9hvKzX3poIwfLMbZ%2Bw1Qdmf1sd2CQcOlEUmgZDceQyUFAV6xA7Vh3\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"ac23a38907d0fe66d89b28ea9e025a31\"\r\nlast-modified: Sat, 21 Feb 2026 12:26:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-ray: 9dd4704c2a2911c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17131,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced","md5":"ac23a38907d0fe66d89b28ea9e025a31","sha1":"bfe23dbd9c3371dbecc79b9fd80df928e26350d3","sha256":"c9249f0084663d64e654a0b3bdca7c38ab20680417488dde509997085df0d0a5","sha512":"032470b63f0995fe44717e4829d70740a012d5eea42ec45e25c70b57bb0e851b897788e657e00d06a05c71da80ab00e36a0925c0eee694d2c1cc8ceaf30a1610","ssdeep":"384:+0n06JQKR3Y4Sy1Rs4VxFKPyhDpfpHrf9LkBxwUusY/6LL9frO2:v0upRIk1+A/002","tlshash":"cc722a08f9329d348e1d6ac4f6ede25267bb4fc4e7819085ecc689171da117dcc8f992","first_seen":"2026-02-25T14:13:45.338171Z","last_seen":"2026-03-16T15:01:08.67963Z","times_seen":3,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":0,"dns":27,"connect":8,"send":0,"wait":280,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/index-BRuTXH-_.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/js/index-BRuTXH-_.js HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/js/index-7F_aW3Gz.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c8k4jDmR6c5ZFSI7hU77Wg9BzqZD9JP7Bpu%2FPKAa7ShPgAsTPEPcU0l4OUdkIkpTED04WdQW3XNBULczXZWd%2BQnGOsUkX1aSWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"2881e31d5724feb24d6b960f2e19f673\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd470423ea8c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10065,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (10064)","md5":"ddbd9ff7986b4fd5a6ecfecc75b1320b","sha1":"33eb42c3e7de8c4643e02e0a2334d48c22403f37","sha256":"5f05c12a4da1ef6820416b3a57f159f9ed7a6e8487e9cac0f8fe5ababd1cb4c8","sha512":"791fdb0eceb0cf5d5fd37ac3f87db0fef2ef12ac6978715dbe1b9cc1d589643c6b658d27b35614065df1245599f25ae594ae214d836db459ca4edca1d59cfeec","ssdeep":"192:AxQeEAMCnizH5jv66SrsAd2xJkDaACFETceqW4dElHn4x5qDCqt6bVG3PwKEpqg:KQ3V6iFjv6JsAd2xJW5T3F4GlM5qDCqK","tlshash":"b722c68bb3188db98bb7b4e4f859a0142125e74a941180d0f3be4f562df9db0931da3f","first_seen":"2026-03-16T14:27:56.869927Z","last_seen":"2026-03-16T14:27:56.869927Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/layout-DvFKDYe2.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/js/layout-DvFKDYe2.js HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/js/index-BRuTXH-_.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v6v7IpXvFRAepAvCHZjN8L2BFBdqkC9UB%2BRUWWEgJHdgOicMBAyWBFmsAH6cYUzsv4PemDRLD91tHrIEt9nzBpoYYOmg%2B1olDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a56b1775e96467b843b8487b1b8fe2a8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd470430eeec8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25706,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (25705)","md5":"02064e7097d7dea32e1c2e872dff8a5f","sha1":"30281000a8419f2015a19d43a181e82c56c8decf","sha256":"15cddd472ab5895a97703bd51637125f22b567b2272e753654140f93796a5e15","sha512":"c5a8b66151dac5c90a9b8412d04df0a4e3f8853ad23b0b3250201ca9c37cd8dd9a3f6b3a961ce975fb56d22806a18725129eebe8e3f886069140a1425e464d54","ssdeep":"768:irK8wtrDe+i19QS4ZsL+ut26ThEYgBMMo3yAvDZEe:s6P7q54GH28/co3yA3","tlshash":"0cb2d03488613e2a9df5d0adf41c996eae0f2b1fa223d0c2ed6c107373cf6b0519a841","first_seen":"2026-03-16T14:27:56.871049Z","last_seen":"2026-03-16T14:27:56.871049Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/#/register?code=bmqjkpq7ms00","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-16T14:27:24.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/ HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Mar 2026 14:27:24 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iSHqLove9GYD1%2BPUL6XiuC7qSurh1ZrywFYhOO5rrvqBBlJpX95UWT%2BBY8%2F%2F8mtuZcqQdKjm1zhMJk7p8yHxQHrTEnlqQnraWQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9dd4703c2d4efb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":723,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"85b99078f89f6c34e8b00fe2adc38d7a","sha1":"d68468e7edf68b531aa7de9fb226fa60ab2a80ef","sha256":"9e546bdcd065cedf386a0a4e193e12851301b49c8531155e840ca387cd60365e","sha512":"7d151d3ef5d2db02e4a2c83e0c79b08848d4651b4ef751ba1e0d83bbc345c3990dbff3163cb7b7e2719671b0113bcb4b41589d3ee135e5bfbba000055584c120","ssdeep":"","tlshash":"1f014c81a0e1cc0a53208725bde1f4159dcbe797474aa84175da70bd4f94b878aef4ac","first_seen":"2026-03-16T14:27:56.872085Z","last_seen":"2026-03-16T14:27:56.872085Z","times_seen":1,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":92,"dns":65,"connect":8,"send":0,"wait":79,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/css/index-BlHM1fRJ.css","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:24.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/css/index-BlHM1fRJ.css HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:24 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uysIFi84S%2Flju1%2BUmubOty7rnrt5K1bi%2FCVEZn3WQNQEJNeblh6r2Liz8g4d7OQBkwGmHSo9Qmk%2FHi%2B3RHe%2BjWynBClFGWKeHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3b68990ba9698cb1b64fa1ca2aabc14e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd4703d8de4c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26434,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (26433)","md5":"b11cb036d3f8292feb20d7e119c14455","sha1":"0c0855363c6a4d4a9e70e5581ccb852d0320bce2","sha256":"407bf2baa34339b93d85a019c95b870333837b7845f297f5c0068a4dab174df9","sha512":"f080d8ad89d288119c1df3b1e7cfcae25cf5c5eba4818a3d6f41ad701cee3dea2e2fbfa45535e8a3c96598887be87920a4cf8e10b641779bc640dc8bea00ed35","ssdeep":"192:8aXr+wPmQvQ8tMZIGiEE8IwZmEI87dbO25peyFHtbasDCopkypRL/:8g+x8vM1E8NZmEI882GQtbLDLky7L/","tlshash":"5fc274de2fc9142cbd5241eff4a0fbdcd1197850ef62a6eba90239218bd12db385152d","first_seen":"2026-03-16T14:27:56.873009Z","last_seen":"2026-03-16T14:27:56.873009Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/css/layout-BU4y-iJc.css","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/css/layout-BU4y-iJc.css HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FhzNCkWilMn9p7RcE8YMm6CNfCUVE9%2FXSramloJ5P%2F782F9uKFBRmlEDCyVoS1njyxqXyF73GXH1WId1sjg5OwCbeLfhtoUs7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f9cf83e22cd941d4ac31476d20882ae0\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd470418e85c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1019,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1018)","md5":"61fc11eb56e4e4e0d80207b090202a4b","sha1":"c902abd849e6b5a2100edb57c3de19e9763af892","sha256":"dd037ec28210b65618fa7d7f31fae481aff428024fff2505d8077324b42e4bc8","sha512":"9a6ed40edb2d419366dbb3a7f396189b53f55dc7e078296957a279c75cff67408e04c6340b965d0c113d2f773ed521cb7cb23e886a45fb65f0e92b56b60cb0e1","ssdeep":"","tlshash":"d611f0313264712a55b3e166a9f67b4c232af257c7436b9cf6a7219a0dcf4031d33148","first_seen":"2026-03-16T14:27:56.87397Z","last_seen":"2026-03-16T14:27:56.87397Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/index-BRuTXH-_.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/js/index-BRuTXH-_.js HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c8k4jDmR6c5ZFSI7hU77Wg9BzqZD9JP7Bpu%2FPKAa7ShPgAsTPEPcU0l4OUdkIkpTED04WdQW3XNBULczXZWd%2BQnGOsUkX1aSWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"2881e31d5724feb24d6b960f2e19f673\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd470419e89c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10065,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (10064)","md5":"ddbd9ff7986b4fd5a6ecfecc75b1320b","sha1":"33eb42c3e7de8c4643e02e0a2334d48c22403f37","sha256":"5f05c12a4da1ef6820416b3a57f159f9ed7a6e8487e9cac0f8fe5ababd1cb4c8","sha512":"791fdb0eceb0cf5d5fd37ac3f87db0fef2ef12ac6978715dbe1b9cc1d589643c6b658d27b35614065df1245599f25ae594ae214d836db459ca4edca1d59cfeec","ssdeep":"192:AxQeEAMCnizH5jv66SrsAd2xJkDaACFETceqW4dElHn4x5qDCqt6bVG3PwKEpqg:KQ3V6iFjv6JsAd2xJW5T3F4GlM5qDCqK","tlshash":"b722c68bb3188db98bb7b4e4f859a0142125e74a941180d0f3be4f562df9db0931da3f","first_seen":"2026-03-16T14:27:56.869927Z","last_seen":"2026-03-16T14:27:56.869927Z","times_seen":1,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/css/waitForGrecaptcha-D4xFs4hw.css","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/css/waitForGrecaptcha-D4xFs4hw.css HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ld8z5%2BLSNdvvQfmuOUFf%2BnKgl7w%2F0RITR0EyEJOEG%2BBWKikiWF%2FSfxG5RzTBJPo%2B5Xa29TM6W2YEqbx0b2Ogie6Aslf64xLP3g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a95ff993413e251870c29c854483116a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd470418e87c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1499,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1498)","md5":"87891e71007e7f975503e48e9b69922a","sha1":"f80d044f23ef2493f01a7d08c4cf1d7a87c3827b","sha256":"d4e296ac85a8e112c3d01cd00d7e65187c1dbc2f33f4d07c32810c00426a33a0","sha512":"b49c83f2aa0ffb931d4e78fc248346f19e5246e5fb8097baea5436203d36dac86c005a5e321d3e4f5c3622e93186bfadc3a4af38cbba682ecc37145b8fd36e24","ssdeep":"","tlshash":"7431d3b17b0d5014acbbc56578c19b89c16c5252d551094caa9737ea0c8b4973eb17cf","first_seen":"2026-03-16T14:27:56.87491Z","last_seen":"2026-03-16T14:27:56.87491Z","times_seen":1,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bttla.com/api/app/user/phone/country","fqdn":"api.bttla.com","domain":"bttla.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:26.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.bttla.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 06:49:59 GMT","end":"Fri, 22 May 2026 06:49:58 GMT"},"fingerprint":{"sha1":"6D:2C:84:D7:91:86:E1:EC:F8:ED:86:63:F7:1C:14:26:98:01:8C:DF","sha256":"7F:15:48:57:85:80:65:E6:F8:CD:F9:38:F0:F3:67:58:C0:1C:B2:5F:5F:0A:92:C7:F6:B1:16:C9:05:63:46:B8"}}},"request":{"raw":"POST /api/app/user/phone/country HTTP/1.1\r\nHost: api.bttla.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/\r\nContent-Type: application/json;charset=UTF-8\r\nSET-LANGUAGE: ENGLISH\r\nAPP-ANALOG: false\r\nset-aws: true\r\nApp-Version: M2.9.5\r\nContent-Length: 2\r\nOrigin: https://btlyp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Mar 2026 14:27:26 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v8Zj0p1m9%2Fh3dQrT3MFmUry01He4yWB8LmvaA36VFDewd8Rr7l1y63v3oVloRUBQczfuSQgfsZg5wn8kN4MLxJc44R123xxJiZxbFWc%3D\"}]}\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://btlyp.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9dd47049b9070d2b-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9538,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"87837812115f1ceccaad7d9d0248e91e","sha1":"a68aa102f47a19d64ac179d16819be39760d5511","sha256":"c2c238a7b57c1336c96baf2977678ecaad1bafe01d24cda4c8b851105a1b5f03","sha512":"d8f5548ba1cdacaccfaa8f6cdbf319275143a79e0722204b80a7eb6dc55d729cbe587c967deed5359d075e09e58ad21c8abfeeb75c7fdece20ebee04c9920c88","ssdeep":"96:VokFg7zjp8YNPXITOS8wF807f+j6zAo6KlZpfvGnNoF5KbUcATl9tF9PzyjQ7nug:LUWovKNF4YF5hr5VrusYSJN6JC9Cg7","tlshash":"a712db7d892ddebded763fd83d8b392658fd32083ba42d1a0dc5a37922801d85126473","first_seen":"2025-10-30T10:51:52.013235Z","last_seen":"2026-06-08T17:29:55.962963Z","times_seen":44,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/css/vendor-BT8CbWrD.css","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:24.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/css/vendor-BT8CbWrD.css HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:24 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M5hwE7jwTKE6ZOw%2FxmSifAioWzGTTu5wfIa30Yh5Ta1COs6R6lmvADqtCNI5t2paB9SZ70ApesqogxRTLL5m%2B6tZa9ZEyScjJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8426039819dbb371051fc1e06f282853\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd4703d8de3c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133372,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"aad3a1429d19031611ec7d2b47d1153a","sha1":"58716fe7a1f978e226f2101f91ca29432e6dc818","sha256":"78319ab12125ed416e1e01bee52a73d43c12ff7a03327780cf9fae162fc9cf71","sha512":"7c8fdbeb64a13172655e5934e9c8a007dc2cb191eedd5e63754d5c747626369f32741d60dbf18bb3e096af33e261b1f649b7738bd99e7496a7b302005ff2148f","ssdeep":"1536:K8YIyNBi3MFYaQj7FCwsBlDOFIxuVox3oIWVxM:K8kNIClDsIxuVS3kfM","tlshash":"30d3e5a59ac064bc6f1af2669b87a6dcf13cfa71cc41dda4f20551190fc7bf50213a2a","first_seen":"2026-03-16T14:27:56.877089Z","last_seen":"2026-03-16T14:27:56.877089Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/waitForGrecaptcha-DRY8uLox.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/js/waitForGrecaptcha-DRY8uLox.js HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bnkmyTje8iToTrwco6kRHR6jFIyal9e%2FLIllPCtDvcGgo9biOfTfXqdNMF%2B4vjrN3Hoz8jBIm%2B0RoTOixrB3H%2B%2F8ABP1xQDfIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f13fcb63ed244d24927bd22dfbcef729\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd470419e90c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6565,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (6556)","md5":"d9a3040669579cfad66f6a8d274e34df","sha1":"47c08e211acfc738d1029098565df2e324096bd7","sha256":"a236f9fda43e59f0829a0b10ebcc59a29230173d2bdeb62f2742bfebc73d9e7c","sha512":"091fc4fef0a2598af6f7e77591b8f79c6bc9825c3db87fc22ae6132279cd160c234fb36f4b464dae37b163b7354d954e088697bffbd3fde0fb39ab7ecda476d1","ssdeep":"192:jUbjBLZp5nwWxbJk+BOQAbCwDGMsJVkIytcuApXD:4nB5nwatBOQ+CwadVJySuKXD","tlshash":"47d1f9c47849eafb5f73959864cb0100b30ebaade4626c90516b07293fe1eb1735d70e","first_seen":"2026-03-16T14:27:56.853919Z","last_seen":"2026-03-16T14:27:56.853919Z","times_seen":1,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/AreaCodeInput-B9lF43pc.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/js/AreaCodeInput-B9lF43pc.js HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BVBNa91DMf0y%2F98xpcY29ni0DVa7gc5%2BDRU3QVt7YRrBaOgbZOfuxeIPHEsHfvKsn3luVmH10THY396xuHVcRUBSadYgL%2F2DnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a6034a0feec1c4734f48af98483e84d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd470419e8ac8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2831,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2830)","md5":"f4283260808a8aae93e72d287ad7405c","sha1":"c7d44c18a091a69caf66b5778010e48ae0d9d715","sha256":"65bcb3567a7922c7b0c76b08b108985dd3d2e0d7f85d47fb7601b55c7bd3f543","sha512":"2c86bc4e68762ee2d31026037f5ed50aba9cdf99cd90cc07e29cf34b93a24e8a4c152c91bc6f77918864f42bc7de795e2cdbc09f7d99ce1df617fd513f9ca27c","ssdeep":"","tlshash":"9b5184a2f89cca7c96230491b4c62420662d67ecd7608de2fa7e42301fa4de0c65eb35","first_seen":"2026-03-16T14:27:56.878003Z","last_seen":"2026-03-16T14:27:56.878003Z","times_seen":1,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/css/AreaCodeInput-CgA3TNu8.css","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/css/AreaCodeInput-CgA3TNu8.css HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PSniusE7%2F3cpdid2yNa0I1YgelCWWSQiP5XJnfQrONDaEU10zw8ajNhvH9wU6IGM3BWMduR9p25sj7CudYJM9yX6vLI5ZsmJOQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"109890345a04202698c1aaa6d8e21030\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd470418e84c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1715,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1714)","md5":"59396375da09845f7b0745cbeec21d36","sha1":"1508de9f7207d3bf5ce380a073f1a77c31d648c2","sha256":"6b1d6440e8881babf9bcab4290453b8845ba8f989aa794a58318b996dddc5064","sha512":"ce6155be52677017ee99fa250dc0022df2f68ed27e8810bfb358f34de278cf4be59e1a52d76136408bb9a3a2dd10c53974c09aaa187ca739f2c013842bdc0ec9","ssdeep":"","tlshash":"0731c0712b8e3c159437c555a9f1dbcc004ee322d7424f99e67b70a78ed70833663a69","first_seen":"2026-03-16T14:27:56.878928Z","last_seen":"2026-03-16T14:27:56.878928Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/current-BwgTtQyU.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/js/current-BwgTtQyU.js HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m390zoPVoOx9IqlCyV6T%2BpPdneW1oVOv9YbCYu2OAh2DyEQPRUtnvlZo8Z4fb%2BeegucGdDMAKvpwDbyADtGlJTXlMLKMnwHy6g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"bb1b0cf7f734555943b26076ba4c3cac\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd470419e8fc8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":629,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (628)","md5":"cf9b35d58d35b29de50f1033b7c56e32","sha1":"2f23775fd95588fc1e52e95767d314921c2fdaa5","sha256":"22f3ccebad9ab57642a9de04b6d6b0b1beda30276ab486e377a412bd0a6d503a","sha512":"c0c2d8aa789ffa80d817270aff7434cc60bfd4c161043fd637876be1feff91e03a60cb7b7b98c6553b023b35b819508dd31cfdadb99fc526d57b97d4dbe33cb8","ssdeep":"","tlshash":"38f06815024509c9192d1ccc77568b5ebc8a1de7314d11cfae850b0748c56955db3a43","first_seen":"2026-03-16T14:27:56.879776Z","last_seen":"2026-03-16T14:27:56.879776Z","times_seen":1,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/index-7F_aW3Gz.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:24.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/js/index-7F_aW3Gz.js HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:24 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DxapWuvw9958smZnQDb9C4Ls4iI7udmHiq3GbvJ%2FDScVUcLSbEejX3KEoZ%2FBtpQJ82tEps0yPJmeGlP47PLqJBo%2Fe%2FQvRtgTCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"216a0efd4078aa0b8eb0c8446b0a9568\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd4703d8de2c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3104491,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3441), with LF, NEL line terminators","md5":"bdc3c50453b2deb17b2b9638f7b676d3","sha1":"ce0a82c6636f366ce41e4b5d90a27edcab44fb2d","sha256":"ca4876f65ee1ac87411063a7d10b356bfb0aa4865df6a5a76d73d9ea89ab0754","sha512":"80fc43069a0408384ef605a74672deb09a46da61d9932249bb00990a063d7b5ad2499c4c4a7ce0a6d7ca870e5715050b5a8e3982a42589ffb2b40e2e4b411454","ssdeep":"12288:qfoR8ifXae2BQzYFdNQcuZyic38IqKKFfMmkuNitnYvVQq8bigRLRFOEweCW0lXj:qZYrCaROWeGkgthzvOqJ1F","tlshash":"18550c55929620ab0dfa14e1b8893bd07c27cd9b878e7c2b83bbd71845fd2e210f955c","first_seen":"2026-03-16T14:27:56.880611Z","last_seen":"2026-03-16T14:27:56.880611Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/css/index-yFlv11Gg.css","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/css/index-yFlv11Gg.css HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9rEozVSE8F%2FTjfvX9xDrjhz8L36%2FvsKu6CdRaryO%2FDlHlzVtYqAjYphayM0%2Bh3M99SFbCsG6yMpEvayuarZfNrSQ83kGwVdJog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8283656ad5960864488027ce32368eb5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd470418e88c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1161,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1160)","md5":"667bbc4b45b73c25a4218fd8aefb907c","sha1":"ae23e92feaeb9e267ff1b4a2529026e92ff612e3","sha256":"cad16710d81b31cc511a0d0477d0fd5fa99d6fe392cbb34719e48a680b0a004f","sha512":"ad6b2ff206148eb5c9fc4ff3db84c077c22b7c157c27bbd45e747ec832e9b2fe69b40453118f674c333e12ffb985bd1fd2fcaf3596c6e06fb558455001890569","ssdeep":"","tlshash":"0821f4a03b5b7529da77f84f3580f6d853019b22d14dbeeedb05743188cf2c72260648","first_seen":"2026-03-16T14:27:56.881576Z","last_seen":"2026-03-16T14:27:56.881576Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/close-Lg5wsGHA.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/js/close-Lg5wsGHA.js HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RXL%2BLf4Vw1SFiGuninQytyAhTC6fGg2iSPeX%2FnBc9NVd39JYL4q%2BpiObmTHymhtu5dKZXsTinFmkY%2BNM%2FA1iiMg6TQ59u1JE5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"24e5f8b25ad253b69f239a86051eef98\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd470419e8ec8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":825,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (824)","md5":"847cf7a99fe311ba6e617ceb9fdf9bfd","sha1":"eaab15479018158f1cbb172ad8423dff0dd63401","sha256":"d35bcbb17d2cce9e798790ae2b9bcf05b5cec6ef9859b95628c5947ab5a2c7a6","sha512":"74ca0a4f2baf0f430df1b6d7ed39e98480e9932a20796f2d2bbf86dcd5c2a890ab15501e6d964242268945da03a488af3dda9641d31073c598161ba5538bc5fe","ssdeep":"","tlshash":"4c0186a10ccfb8eb68cb01e0985b6533dc49cd8a752b4058f788aa14a3e95543964692","first_seen":"2026-03-16T14:27:56.855958Z","last_seen":"2026-03-16T14:27:56.855958Z","times_seen":1,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bttla.com/api/app/config","fqdn":"api.bttla.com","domain":"bttla.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.bttla.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 06:49:59 GMT","end":"Fri, 22 May 2026 06:49:58 GMT"},"fingerprint":{"sha1":"6D:2C:84:D7:91:86:E1:EC:F8:ED:86:63:F7:1C:14:26:98:01:8C:DF","sha256":"7F:15:48:57:85:80:65:E6:F8:CD:F9:38:F0:F3:67:58:C0:1C:B2:5F:5F:0A:92:C7:F6:B1:16:C9:05:63:46:B8"}}},"request":{"raw":"OPTIONS /api/app/config HTTP/1.1\r\nHost: api.bttla.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-version,content-type,set-aws,set-language\r\nReferer: https://btlyp.com/\r\nOrigin: https://btlyp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Mar 2026 14:27:26 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FDIslvB6aoW6T31hcFV2VBC8I%2BW%2BjFY13rXIXiN6GrYLQCCyUQjYras0Yo0SluAbMb5ivz6EX5jp%2FA24E%2BoOE43RZL%2BKtWtIDi6JsCs%3D\"}]}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://btlyp.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-version,content-type,set-aws,set-language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9dd470470bf30d2b-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-06-10T03:07:08.772828Z","times_seen":1105,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bttla.com/api/app/language","fqdn":"api.bttla.com","domain":"bttla.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:26.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.bttla.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 06:49:59 GMT","end":"Fri, 22 May 2026 06:49:58 GMT"},"fingerprint":{"sha1":"6D:2C:84:D7:91:86:E1:EC:F8:ED:86:63:F7:1C:14:26:98:01:8C:DF","sha256":"7F:15:48:57:85:80:65:E6:F8:CD:F9:38:F0:F3:67:58:C0:1C:B2:5F:5F:0A:92:C7:F6:B1:16:C9:05:63:46:B8"}}},"request":{"raw":"POST /api/app/language HTTP/1.1\r\nHost: api.bttla.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/\r\nContent-Type: application/json;charset=UTF-8\r\nSET-LANGUAGE: ENGLISH\r\nAPP-ANALOG: false\r\nset-aws: true\r\nApp-Version: M2.9.5\r\nContent-Length: 2\r\nOrigin: https://btlyp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Mar 2026 14:27:26 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H1%2FXGu8YNZELCiajX3dwp2V2bc8IWksksFJDJ0JW7b3ZiQggn5%2FPHNUrGlBcQ2VI%2F1Yoh9vojOtquqNSTYNJB8IZuCjOzQUYm0GoTY0%3D\"}]}\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://btlyp.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9dd470485e770d2b-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":461,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"14836392d9038b5b9a9cc41a31321055","sha1":"ce99a62643305dd7922e179cd200e0acbbbe2d6a","sha256":"3840659b73ddcba0bd3950c5bb646ee97ac003a76faf356c442586f43610e839","sha512":"d5ade39d4cd4c9468a229e676384b2a0112e585c7c30b6bd5dade21e80ad7302628536b5cdb08b1b2464e66efeeefd90bffdf5e276d110f391421543b3df7b71","ssdeep":"","tlshash":"9af08ccd38f81d3e5558fe3ce01b979f369872b30d9e0c0999a58ec022402596478e73","first_seen":"2026-02-25T14:13:45.325426Z","last_seen":"2026-03-16T15:01:08.7019Z","times_seen":3,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/AreaCodeInput-B9lF43pc.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/js/AreaCodeInput-B9lF43pc.js HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/js/index-BRuTXH-_.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BVBNa91DMf0y%2F98xpcY29ni0DVa7gc5%2BDRU3QVt7YRrBaOgbZOfuxeIPHEsHfvKsn3luVmH10THY396xuHVcRUBSadYgL%2F2DnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a6034a0feec1c4734f48af98483e84d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd470430eedc8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2831,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2830)","md5":"f4283260808a8aae93e72d287ad7405c","sha1":"c7d44c18a091a69caf66b5778010e48ae0d9d715","sha256":"65bcb3567a7922c7b0c76b08b108985dd3d2e0d7f85d47fb7601b55c7bd3f543","sha512":"2c86bc4e68762ee2d31026037f5ed50aba9cdf99cd90cc07e29cf34b93a24e8a4c152c91bc6f77918864f42bc7de795e2cdbc09f7d99ce1df617fd513f9ca27c","ssdeep":"","tlshash":"9b5184a2f89cca7c96230491b4c62420662d67ecd7608de2fa7e42301fa4de0c65eb35","first_seen":"2026-03-16T14:27:56.878003Z","last_seen":"2026-03-16T14:27:56.878003Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/vendor-CqYl8bh2.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:24.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/js/vendor-CqYl8bh2.js HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:24 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cmH88ZnM69Et%2BY4gHqAAL8A6FbgQLPFEWBG4b%2F59B9MDrPuP7J3aZooxvvANHba2LrVH9cxD3T%2FKCJINo35t3fd05bVxlaAcQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1289f7b04b0abea08322ed40aae44beb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd47040fe73c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":919003,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9bc0a119195dfb4c37a642c1f7042661","sha1":"9eedc29ca1a465f3c431d005910553350e5a90e6","sha256":"d3208b20a86afe42b7dc9dd5866a7bedefdc34651bdf80baaecacd43488b25a5","sha512":"27707e975c3353b733b8383da2a8ee1f010eccb9a31cdc5c7b9cdaba3f267b2ad537b173e9db1bd4b723c980d0a5016cc1918c7dfac3c7ee56aaf13b1b951a5a","ssdeep":"24576:T8e4YksVYcOogMMZE/wgOHs5QPoyXQCkyt51iN:T8e4YksVY9ogMMZE/wg75QPoyXQXyt5k","tlshash":"74153bd4b2a5b06243a715f4507f0007f23a6959744e84a8f16ddceb3eb984992bbf3c","first_seen":"2026-03-16T14:27:56.89442Z","last_seen":"2026-03-16T14:27:56.89442Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/css/LanguageDialog-Hismb5iB.css","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/css/LanguageDialog-Hismb5iB.css HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yjc2Fh%2F7SPNgOZUwNnrkxW8oUJEy%2BJAz4WVPskx8mIE%2Bdoxiz0hnQfumAiTegOc0RzaOSdiXyvd7h7h0f%2BrrRxL%2FOFZroiY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1b4820ff6c72073a02e35185c415703f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd470418e86c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1502,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1501)","md5":"fefbe0362dc8cd958e4309c152b999ad","sha1":"f5031bec34248180a56454cbbac3bc099b1b34b1","sha256":"b7b4908098e82fd26d7d772e28648c5a4102b28b2eccca9b638ae19fc995753d","sha512":"3418cddc1362ec9baefd15b3dd01123c5f10e997b73e2c447a7a2c49232c628636e3a35e2fecf2a65dd18b3df2a9c25ec70be7837238c25a63a254ad94309ca5","ssdeep":"","tlshash":"3631a33267ce151c40ab938f15c9ce68c15ccd26ef617b8adbdb35160db318335b12a5","first_seen":"2026-03-16T14:27:56.900886Z","last_seen":"2026-03-16T14:27:56.900886Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/left-CBpy38BC.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/js/left-CBpy38BC.js HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2Fqn8XCd6hJ0N2T8QvjkjER9ZcyOgEAYuRBhiZRUaBtW28wDvo7ANedM7TnArw9NKBC7KMq4fC6EsbxCLxdfJErV%2ByTT0l1zqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"20ef334a7a9ed428b36440428e3985f5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd470419e8bc8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":757,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (756)","md5":"2a7253fcccc2a93e28e89296159df06f","sha1":"68ec702f2bbf5d5e5b84e82326f2b9e6425b29e3","sha256":"47fbaa1ebbd3189e3ab2c20ee0cfcb9722aece87812cc3da6be84329743823f9","sha512":"d088949bc818cd6aa6f7a6f1d19ccd4f24afc012748052dcda9eccf32dd89529ffd376f1e6d9539b97480f0483f2de6e9ca56c28fd90487652bcd19fd0d93685","ssdeep":"","tlshash":"a4017075450d7ee1828946f837b331a88d4100cf31b002d0adc9fc0af7cc13472e92a5","first_seen":"2026-03-16T14:27:56.854889Z","last_seen":"2026-03-16T14:27:56.854889Z","times_seen":1,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bttla.com/api/app/config","fqdn":"api.bttla.com","domain":"bttla.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:26.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.bttla.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 06:49:59 GMT","end":"Fri, 22 May 2026 06:49:58 GMT"},"fingerprint":{"sha1":"6D:2C:84:D7:91:86:E1:EC:F8:ED:86:63:F7:1C:14:26:98:01:8C:DF","sha256":"7F:15:48:57:85:80:65:E6:F8:CD:F9:38:F0:F3:67:58:C0:1C:B2:5F:5F:0A:92:C7:F6:B1:16:C9:05:63:46:B8"}}},"request":{"raw":"POST /api/app/config HTTP/1.1\r\nHost: api.bttla.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/\r\nContent-Type: application/json;charset=UTF-8\r\nSET-LANGUAGE: ENGLISH\r\nAPP-ANALOG: false\r\nset-aws: true\r\nApp-Version: M2.9.5\r\nContent-Length: 2\r\nOrigin: https://btlyp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Mar 2026 14:27:26 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RRKM8tQnjJJaaRWDVdezKy%2BCcdi%2B%2Byj807hGFzpWkJxUcEqMuTbJ8TGfsF8DaFeiSwGtQLVjzQ4A1yNv9NdQIs4%2BBWhEjIQ4pXuNzeA%3D\"}]}\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://btlyp.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9dd47049a8d10d2b-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3135,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9802edacbb8dde467ddd94daa23543a3","sha1":"34aeb01290a61d72f02f116b5fa06daf8a1c15b1","sha256":"f831a2df6875d153fc38bbbe49786196ec47228df97e71c1172c5cd0f7e12d47","sha512":"aa6beb4d468f3691fd6ca0e2c24f9b8f1f8ba68470f0c69ceee9ff48b047caece761be0b2202d7c3d5ee3883e1c9ebe7b62bd72f19f6b85945150802ed903db8","ssdeep":"","tlshash":"f551b7fa5150203d9a9603c5f0be2d1b8f3d9a57b4083109f3ad549076d3cb5433a6db","first_seen":"2026-03-16T14:27:56.91264Z","last_seen":"2026-03-16T14:27:56.91264Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/vendor-CqYl8bh2.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:24.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/js/vendor-CqYl8bh2.js HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/js/index-7F_aW3Gz.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:24 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cmH88ZnM69Et%2BY4gHqAAL8A6FbgQLPFEWBG4b%2F59B9MDrPuP7J3aZooxvvANHba2LrVH9cxD3T%2FKCJINo35t3fd05bVxlaAcQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1289f7b04b0abea08322ed40aae44beb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd4703ece25c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":919003,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9bc0a119195dfb4c37a642c1f7042661","sha1":"9eedc29ca1a465f3c431d005910553350e5a90e6","sha256":"d3208b20a86afe42b7dc9dd5866a7bedefdc34651bdf80baaecacd43488b25a5","sha512":"27707e975c3353b733b8383da2a8ee1f010eccb9a31cdc5c7b9cdaba3f267b2ad537b173e9db1bd4b723c980d0a5016cc1918c7dfac3c7ee56aaf13b1b951a5a","ssdeep":"24576:T8e4YksVYcOogMMZE/wgOHs5QPoyXQCkyt51iN:T8e4YksVY9ogMMZE/wg75QPoyXQXyt5k","tlshash":"74153bd4b2a5b06243a715f4507f0007f23a6959744e84a8f16ddceb3eb984992bbf3c","first_seen":"2026-03-16T14:27:56.89442Z","last_seen":"2026-03-16T14:27:56.89442Z","times_seen":1,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":142,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bttla.com/api/app/ping","fqdn":"api.bttla.com","domain":"bttla.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.bttla.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 06:49:59 GMT","end":"Fri, 22 May 2026 06:49:58 GMT"},"fingerprint":{"sha1":"6D:2C:84:D7:91:86:E1:EC:F8:ED:86:63:F7:1C:14:26:98:01:8C:DF","sha256":"7F:15:48:57:85:80:65:E6:F8:CD:F9:38:F0:F3:67:58:C0:1C:B2:5F:5F:0A:92:C7:F6:B1:16:C9:05:63:46:B8"}}},"request":{"raw":"OPTIONS /api/app/ping HTTP/1.1\r\nHost: api.bttla.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: set-aws,set-language\r\nReferer: https://btlyp.com/\r\nOrigin: https://btlyp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7B%2FMrX1ad9m4tJk%2B1pLPZIAZY2dL03wKRYKHokvuyeyGsYfiEXgEy2AATIkTjX2C3nZgV3nZE%2FDUN4vlsYYLCN6Wp5miz2HSlzFN%2Ffo%3D\"}]}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://btlyp.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: set-aws,set-language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9dd47042096e0d2b-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-06-10T03:07:08.772828Z","times_seen":1105,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":70,"dns":53,"connect":8,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/layout-DvFKDYe2.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/js/layout-DvFKDYe2.js HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v6v7IpXvFRAepAvCHZjN8L2BFBdqkC9UB%2BRUWWEgJHdgOicMBAyWBFmsAH6cYUzsv4PemDRLD91tHrIEt9nzBpoYYOmg%2B1olDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a56b1775e96467b843b8487b1b8fe2a8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd470419e8cc8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25706,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (25705)","md5":"02064e7097d7dea32e1c2e872dff8a5f","sha1":"30281000a8419f2015a19d43a181e82c56c8decf","sha256":"15cddd472ab5895a97703bd51637125f22b567b2272e753654140f93796a5e15","sha512":"c5a8b66151dac5c90a9b8412d04df0a4e3f8853ad23b0b3250201ca9c37cd8dd9a3f6b3a961ce975fb56d22806a18725129eebe8e3f886069140a1425e464d54","ssdeep":"768:irK8wtrDe+i19QS4ZsL+ut26ThEYgBMMo3yAvDZEe:s6P7q54GH28/co3yA3","tlshash":"0cb2d03488613e2a9df5d0adf41c996eae0f2b1fa223d0c2ed6c107373cf6b0519a841","first_seen":"2026-03-16T14:27:56.871049Z","last_seen":"2026-03-16T14:27:56.871049Z","times_seen":1,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/index-B7HBgPCh.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/js/index-B7HBgPCh.js HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=geN%2FlM1pes%2BPCu5OrYMv5w76wcGJhjKSjDD0i73v3LXOHxg3c1yEmn4q1pbPu29w4ha3bZebzQO0TNDckcgRMhYrIz79e1eqIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"969c31684d91ea4e4615054601eb6a69\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd470419e93c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":752,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (751)","md5":"f33e30a79c04ee68af0ab3ce1fd7e696","sha1":"ec8e41066a9901a15e4acfc8115b8930b2e46b90","sha256":"7fe7b640a144315419217c565702f51401bb2dd969d7bbee46a7fc4b167f0473","sha512":"93811a24d8aaeb1a4e4431dd41625782bae70dacceef028d6fc621ea5e0924abd1812f6bc375844d8b792c33ceed5c3a7974b2bdeabedbf4940c651905ad82d6","ssdeep":"","tlshash":"ba016dd6b546f3da5103ac066ccb110f95552633fc677cc0450b459fe4729747da28e7","first_seen":"2026-03-16T14:27:56.91421Z","last_seen":"2026-03-16T14:27:56.91421Z","times_seen":1,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/index-B7HBgPCh.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/js/index-B7HBgPCh.js HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/js/index-BRuTXH-_.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=geN%2FlM1pes%2BPCu5OrYMv5w76wcGJhjKSjDD0i73v3LXOHxg3c1yEmn4q1pbPu29w4ha3bZebzQO0TNDckcgRMhYrIz79e1eqIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"969c31684d91ea4e4615054601eb6a69\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd470431ef4c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":752,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (751)","md5":"f33e30a79c04ee68af0ab3ce1fd7e696","sha1":"ec8e41066a9901a15e4acfc8115b8930b2e46b90","sha256":"7fe7b640a144315419217c565702f51401bb2dd969d7bbee46a7fc4b167f0473","sha512":"93811a24d8aaeb1a4e4431dd41625782bae70dacceef028d6fc621ea5e0924abd1812f6bc375844d8b792c33ceed5c3a7974b2bdeabedbf4940c651905ad82d6","ssdeep":"","tlshash":"ba016dd6b546f3da5103ac066ccb110f95552633fc677cc0450b459fe4729747da28e7","first_seen":"2026-03-16T14:27:56.91421Z","last_seen":"2026-03-16T14:27:56.91421Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/vite.svg","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/vite.svg HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hjNj6HhtlajYAJjeLuKio4c%2BWlI%2BG5r5xr6SZBoqR3ZI1e%2FGtorowqVS20ObtkkHRQoMoxheJ%2B9pMl92ZZISHinpExH1dEibLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"971db90182ee109ebef3f8d055503f61\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd47043ff1cc8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1497,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e3a10e157f75ada21ab742c022d5430","sha1":"f7f39d7237b791a945d52a5cd7a8fb365f313366","sha256":"4a748afd443918bb16591c834c401dae33e87861ab5dbad0811c3a3b4a9214fb","sha512":"fbf065e26d907454cb432a17d831f448e1c3df0f33cd681ccc52b63e5bc26bc9e4de08591a2de579e5b05219fcffd3b4d4261ada6fa55299e731343df860488d","ssdeep":"","tlshash":"2031451fda7fd4fec0a6cb48e612b047962c30d95e41c5b4d9845f0e64a19f17c0aa64","first_seen":"2023-05-18T16:20:30Z","last_seen":"2026-06-13T14:12:38.423251Z","times_seen":5532,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bttla.com/api/app/language","fqdn":"api.bttla.com","domain":"bttla.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.bttla.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 06:49:59 GMT","end":"Fri, 22 May 2026 06:49:58 GMT"},"fingerprint":{"sha1":"6D:2C:84:D7:91:86:E1:EC:F8:ED:86:63:F7:1C:14:26:98:01:8C:DF","sha256":"7F:15:48:57:85:80:65:E6:F8:CD:F9:38:F0:F3:67:58:C0:1C:B2:5F:5F:0A:92:C7:F6:B1:16:C9:05:63:46:B8"}}},"request":{"raw":"OPTIONS /api/app/language HTTP/1.1\r\nHost: api.bttla.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-version,content-type,set-aws,set-language\r\nReferer: https://btlyp.com/\r\nOrigin: https://btlyp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Mar 2026 14:27:26 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ywd6kmLA1ncO6IuGqFRc9YfRoJavMGHVojCqYVtfEZxRQ3bFT0BvtQ%2FRtvDir7QIdgxksbe4DvQmsl7kRKIa8AUU4eJZqNKLS6%2FkuqY%3D\"}]}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://btlyp.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-version,content-type,set-aws,set-language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9dd470470c010d2b-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-06-10T03:07:08.772828Z","times_seen":1105,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bttla.com/api/app/user/phone/country","fqdn":"api.bttla.com","domain":"bttla.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.bttla.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 06:49:59 GMT","end":"Fri, 22 May 2026 06:49:58 GMT"},"fingerprint":{"sha1":"6D:2C:84:D7:91:86:E1:EC:F8:ED:86:63:F7:1C:14:26:98:01:8C:DF","sha256":"7F:15:48:57:85:80:65:E6:F8:CD:F9:38:F0:F3:67:58:C0:1C:B2:5F:5F:0A:92:C7:F6:B1:16:C9:05:63:46:B8"}}},"request":{"raw":"OPTIONS /api/app/user/phone/country HTTP/1.1\r\nHost: api.bttla.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: app-analog,app-version,content-type,set-aws,set-language\r\nReferer: https://btlyp.com/\r\nOrigin: https://btlyp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Mar 2026 14:27:26 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ily4ERMqqgUsdB4xMJMhq%2F8wfe7MzvBfN%2Fnz1Fxr32mY4hCLGOFkUHi%2FRo%2BGaS9P%2BWTY3ZlutQ3et7HgmQ%2BRTEObHkYITyU136O3SqM%3D\"}]}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://btlyp.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: app-analog,app-version,content-type,set-aws,set-language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9dd470470c070d2b-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c4bf22ac0464ce640ca24001050604b9","sha1":"254521b8732defa2b0cb412ad46895d8e09b642e","sha256":"79e4094cac80ff9e10ffdb10d9aef240097a76641557296dffa7b28d5573524f","sha512":"dd09d5510ad7ab193756ac432edf40bb4f3335ddb75268fe9e45e4d75f98ca770d8e5da4f4daf7c7324fc6279c0d1683a536f44fe670e7d3c09766029034dc21","ssdeep":"","tlshash":"75a011e20a8c08ba0ea083c0202e002208e8b2c032280a0802a08830b0ea8b0300a308","first_seen":"2024-06-22T21:23:49Z","last_seen":"2026-06-10T03:07:08.772828Z","times_seen":1105,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/index-vP3G_uhT.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/js/index-vP3G_uhT.js HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QI%2Fts6wbG05GxTCsmR%2Bdwxf2f%2F9GExK6llpql7SrzUnlZBiBTDU0Rv6Lbu5wKc6ZHlpmoC3oC3MFFVGzNTCYxzsmoZ9nk4BYXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"83eae841d2bada8b26b531bdf44d83a4\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd470419e91c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":403,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (402)","md5":"7bde0d4d54ebbf419af2cb69b1400756","sha1":"b83ff5517323720c576684715576a44199b5118d","sha256":"5e901bb2dce5fb8f9513ba9232c6cd39d06738386362511c176f574f7480cef2","sha512":"01b19585231f596be0ca2c5ca351b1a38d69126d007022a63895f29b6063f4cbf2c64fa014a389cc9be2784ce77dd85aeb1448db2d65c9ea0cbf1edec800ed4c","ssdeep":"","tlshash":"3fe02bd5b80ac2eb910b9c4e0ccb271b09681663f852b9f05765df7a6d305f8b051d6a","first_seen":"2026-03-16T14:27:56.916248Z","last_seen":"2026-03-16T14:27:56.916248Z","times_seen":1,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/index-vP3G_uhT.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/js/index-vP3G_uhT.js HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/js/index-BRuTXH-_.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QI%2Fts6wbG05GxTCsmR%2Bdwxf2f%2F9GExK6llpql7SrzUnlZBiBTDU0Rv6Lbu5wKc6ZHlpmoC3oC3MFFVGzNTCYxzsmoZ9nk4BYXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"83eae841d2bada8b26b531bdf44d83a4\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd470431ef2c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":403,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (402)","md5":"7bde0d4d54ebbf419af2cb69b1400756","sha1":"b83ff5517323720c576684715576a44199b5118d","sha256":"5e901bb2dce5fb8f9513ba9232c6cd39d06738386362511c176f574f7480cef2","sha512":"01b19585231f596be0ca2c5ca351b1a38d69126d007022a63895f29b6063f4cbf2c64fa014a389cc9be2784ce77dd85aeb1448db2d65c9ea0cbf1edec800ed4c","ssdeep":"","tlshash":"3fe02bd5b80ac2eb910b9c4e0ccb271b09681663f852b9f05765df7a6d305f8b051d6a","first_seen":"2026-03-16T14:27:56.916248Z","last_seen":"2026-03-16T14:27:56.916248Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btlyp.com/h5/js/current-BwgTtQyU.js","fqdn":"btlyp.com","domain":"btlyp.com","tld":"com"},"ip":{"addr":"172.67.205.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btlyp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 07:44:37 GMT","end":"Fri, 22 May 2026 07:44:36 GMT"},"fingerprint":{"sha1":"5B:FD:0B:8E:0F:E8:DA:85:1C:CE:95:99:BD:D8:CB:88:23:CA:A7:08","sha256":"2A:4B:6E:9D:7C:53:A5:F4:59:88:70:63:6D:F3:7A:35:9E:00:28:B1:AB:08:7E:C5:21:EA:E2:E3:27:7B:18:D1"}}},"request":{"raw":"GET /h5/js/current-BwgTtQyU.js HTTP/1.1\r\nHost: btlyp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/h5/js/index-BRuTXH-_.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m390zoPVoOx9IqlCyV6T%2BpPdneW1oVOv9YbCYu2OAh2DyEQPRUtnvlZo8Z4fb%2BeegucGdDMAKvpwDbyADtGlJTXlMLKMnwHy6g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"bb1b0cf7f734555943b26076ba4c3cac\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd470432efbc8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":629,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (628)","md5":"cf9b35d58d35b29de50f1033b7c56e32","sha1":"2f23775fd95588fc1e52e95767d314921c2fdaa5","sha256":"22f3ccebad9ab57642a9de04b6d6b0b1beda30276ab486e377a412bd0a6d503a","sha512":"c0c2d8aa789ffa80d817270aff7434cc60bfd4c161043fd637876be1feff91e03a60cb7b7b98c6553b023b35b819508dd31cfdadb99fc526d57b97d4dbe33cb8","ssdeep":"","tlshash":"38f06815024509c9192d1ccc77568b5ebc8a1de7314d11cfae850b0748c56955db3a43","first_seen":"2026-03-16T14:27:56.879776Z","last_seen":"2026-03-16T14:27:56.879776Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"btlyp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bttla.com/api/app/ping","fqdn":"api.bttla.com","domain":"bttla.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btlyp.com/h5/#/register?code=bmqjkpq7ms00","date":"2026-03-16T14:27:25.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.bttla.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 06:49:59 GMT","end":"Fri, 22 May 2026 06:49:58 GMT"},"fingerprint":{"sha1":"6D:2C:84:D7:91:86:E1:EC:F8:ED:86:63:F7:1C:14:26:98:01:8C:DF","sha256":"7F:15:48:57:85:80:65:E6:F8:CD:F9:38:F0:F3:67:58:C0:1C:B2:5F:5F:0A:92:C7:F6:B1:16:C9:05:63:46:B8"}}},"request":{"raw":"GET /api/app/ping HTTP/1.1\r\nHost: api.bttla.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btlyp.com/\r\nSET-LANGUAGE: ENGLISH\r\nset-aws: true\r\nOrigin: https://btlyp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Mar 2026 14:27:25 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LFwgeXtlTjhOinBuuCa2WCNgd5IKjTW98HgAfFbgQMUshAQIigzeoZFGygFZOwUaqV9mlijflmFp6JNxD%2FypSMgIxl4OdUGOEZKlXXE%3D\"}]}\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://btlyp.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9dd47044ef7d0d2b-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9c2f820634d4f7804bff9473e1075d96","sha1":"797e965053c4474e3d577561ccc5cfc7db3e85e3","sha256":"7929171477295ed05b0ddd10eace22051c46cecffdc3a9780c1d763302984108","sha512":"b6950b8a0f3fd45982168ca8ea9644960eb1b7a447f042a6257bdef2b265bfa0688eb7ec8581f614756a778264a02aa3ed327de7a9b465f48ef809c706320a5e","ssdeep":"","tlshash":"60a002c018ec00b14f808384101f192148bda4d519290100576cd82652f40713614726","first_seen":"2025-04-07T10:36:29.519274Z","last_seen":"2026-06-10T03:07:08.799026Z","times_seen":1173,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}