{"report_id":"4cf05a18-a623-4d4a-8e69-0fa061f0f612","version":0,"status":"done","tags":[],"date":"2026-09-27T19:23:49Z","url":{"schema":"https","addr":"batarpay.com/","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":0,"asn":965,"as":"Webhosting Holdings LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"batarpay.com/","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"title":"Your Digital Asset Platform — batarpay","dom":{"size":21108,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (873)","md5":"3df64b8241193546ca2e185e8e054e83","sha1":"dfd3e78bd26abcf5313b67090b1738749df7f59e","sha256":"498435ce3b044a86b4d6f319a89205c1994ee4c5874cd040b611a13385e7af01","sha512":"dc05311b9ec12fcaee38268e2bd436c2ec1d943a99f64e89fdfc8d80223a44e9dfc89199b2407f44109513715369fd54f0cdfe9ecb44db2343a6a6eb0328a28d","ssdeep":"192:DvUHZpDVdmpCE+6u0Wn0PUaewrlu0dn0PUaewrDJPGgBldcrBcqrz:bAjLYhxUHwVGUHw/c9j","tlshash":"2e9246b3b4f5a1b3024382e79a252b0dbee5a117d556d481f1fc0ad85fe1cebac13914","dom_hash":"domhash39bf39ee3ca76f3837b64b390012cf72","first_seen":"2026-09-27T19:24:16.394338Z","last_seen":"2026-09-27T19:24:16.394338Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"batarpay.com/","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":0,"asn":965,"as":"Webhosting Holdings LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-01T19:23:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"batarpay.com","ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":44,"received_data":6862291,"sent_data":52292,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":1,"received_data":63273,"sent_data":558,"comment":"","tags":null,"fingerprints":null},{"fqdn":"flagsapi.com","ip":{"addr":"172.67.191.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-12-03","domain_rank":101354,"first_seen":"2021-12-03T19:30:00Z","last_seen":"2026-09-18T22:47:14.029877Z","alert_count":0,"request_count":22,"received_data":62693,"sent_data":11836,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":5,"received_data":124522,"sent_data":2777,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"batarpay.com/landing/js/countdown.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f6c5dd8bbfb6c6210f57d60996cdfbf","sha1":"b1f5b082e85f170b76bf80a29cc26e350457af55","sha256":"2e7ecf3488ec14b0fddd6a05766d507906cfb20fcc91e280639082cf4f1a6ef6","sha512":"4110ace34fb80c0384fdb538ecc6b33651e40cdca36b6213e2716a33e11d91b34489624ad0b302db8fc6c78ae4dbe6f626de32b274f5f4da55e33bf8cddeba77","ssdeep":"192:fQHe5prdiuBGpy4hiNey+SCGByoibvbrakjyPdebeDZnmHqvSsk4JmSXqSG95fqs:fTYpTvr9uDYqvSsk4JmSXqRpxUeMQZ","tlshash":"45221e0cb7f71191956b71290fae00082236d24ba48add597ceca3c82f2587c55fbfb9","size":10034,"data":"","first_seen":"2026-05-15T00:34:12.919088Z","last_seen":"2026-09-27T19:24:16.44963Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/swiper-bundle.min.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d642da1ac69e6c513f5e626d45806d8d","sha1":"a3378716746549469c7ded7fd21800270679ebcd","sha256":"a9470bbe71ea47bde6dcd9f3dc4970244904c2260badd66314550947b9fab9c7","sha512":"a3d678a7e6fc9cc3502ffb4b55c8c7d83c755cc27ae91958c7bec7b9a03a9c2b03ceea61f631e9781dd51079dc0f56938f9e0553dbd1524a67aa733b2b8b1083","ssdeep":"1536:qIJ8fGRELR8Nxb0LzGhd+IWzGolxUFnOk8+ILDX1ftgeQV9qDlUpf/arWcWXvQOF:RJjNqLz2vHnOk82V9SAXiTWXpk07jl","tlshash":"8ee3f8896220b57646e316db93e4c611b3b54540b80ac8f470b94c9f597ec9813feffa","size":143100,"data":"","first_seen":"2026-06-19T09:37:25.177097Z","last_seen":"2026-09-27T19:24:16.424917Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/magnific-popup.min.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","size":20216,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-27T23:47:26.679686Z","times_seen":76472,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/appear.min.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5562f4c5ee9be56af4f1476f3ab847a","sha1":"dae0c59843bc215b0e194642c92961d569e6af36","sha256":"084fc308e9fbbf4b63b2b829f86d01f2cd391043794a15b56273a1e6396f9283","sha512":"0c28c749c77ccaab08e9ec3fe5d9b7d816143832f2082f7e165eea1a12cf01b46a773b27b702b4964de3f52c383b3166ec199a3ebef047ab0cd3428b1c9e1da0","ssdeep":"","tlshash":"7c21bbca79c6bca183fb702c562b72411171953f824249a36ceecdbc3aa6c513d23e5c","size":1270,"data":"","first_seen":"2023-07-29T22:13:26Z","last_seen":"2026-09-27T19:24:16.499993Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/jquery.min.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-09-27T23:44:19.603296Z","times_seen":197024,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/popper.min.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"31032b08bd8e72220462d3f54f8bd69a","sha1":"871d6ef1070bd363ea390e0c8c384e47dce7f389","sha256":"c212f4b505a86352aed62b24a8f16f999f821ecbe6456c7f3c8a04bc87968782","sha512":"4cf8763b1960d73a7e933de7140d02e6f542ea5786ffa9a6d73f7e980f35308e5e69456a6ac3cb3bc0ae93880c1788147cfe5eb51ef7ae053ff0f34cb127aca1","ssdeep":"384:PZjckOxmemwN3igs6HdfGmLmnNV5LrpfV1Nn1K4kwTiO6rg3MI/9NUmJ/aZg:uxmemg3igs69TYf/pd1Nn1uwXSg3MI/9","tlshash":"f392d7dc3a94f0e5167b52bac03f011fb2379524218ee510a255d6c92c74ebba23bd7e","size":20122,"data":"","first_seen":"2023-05-30T11:24:05Z","last_seen":"2026-09-27T19:24:16.400218Z","times_seen":12819,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/bootstrap-dropdown-ml-hack.min.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c898a23d06bf74e00839925781d2fb73","sha1":"8e9a0dc8a71408c3624aaa2e83881fe2b6d047ef","sha256":"0a409a8b0d90bf9ea2f5e4237171b7a141e2bb68a0877f131090fa9e6a774c9a","sha512":"4a5b53580cad8e509bfc3687649002329bd1dee480b130f4bc09484f13485f1eb1796c2180f106017acaa96e44d9dc8c14c271baff26df73e10e51975e7f1e93","ssdeep":"","tlshash":"99219bd8f35426ba01eb66ba16a756857ba768c8b04081383035cdde3b945ca2205ffd","size":1117,"data":"","first_seen":"2024-08-19T19:51:47.85669Z","last_seen":"2026-09-27T19:24:16.477364Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/gsap-scroll-trigger.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"656fa09a811b94f597bff00f110acc6d","sha1":"e39b3ab7943b0f4218439d798aaa1f95a9b53575","sha256":"682c02f2244438296b056b9b8f59eb8b464f79eaa76fdfb798eaa676154694ac","sha512":"2eb24a24a3537b241742a2a6038f78d48193c03ff74c6016a48b49ee45e49bb17c36dd87a21a10e542c56ca95cc5220f8ba1c885d79bc32ea4eb85659edad24b","ssdeep":"384:sBdfDFqm2m+W5A/uJJFffJH4ukQIVK7FV8ZdrVbrha4L9vWqOMMtSyV9MsR72QIz:8djYWJJRpnIw7FVA3x9ROMMtSQ79TFU","tlshash":"4d0308ce3245b07267ef62ba912f0206733614d9681f4028f625a4e93c7e57c877be9d","size":40286,"data":"","first_seen":"2025-06-29T00:34:56.041248Z","last_seen":"2026-09-27T19:24:16.42361Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/bootstrap.min.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4800bcc26467d999f49b472f02906b8d","sha1":"2c6c0a58345a09d3761230af823a4e4852b12643","sha256":"de040986d9a3ed89d5d5f9ad6d5727015e9e238c2cd13af8f1b55909386d0864","sha512":"ca4675410af4272ff8664bcabaa5a7e2217796a3d9ca28fd891bfab06a8b45d4cf918ebd617ebeef0bd51a6b1d05b8887cdffc39db08ec70018ef12893a668a5","ssdeep":"768:WkN++EvGHWyOOY/uwAxOlU5iBNY5XPxyvTPBVRKwi/C9rfz7uxk6yH8Xae53XC7e:W0xY+t/Nhho1d76KV2O9Ed","tlshash":"3043b6563244b9330ade84e68172430bf7195d98b547816cb5bcacde2b7dc827273bb8","size":60635,"data":"","first_seen":"2024-04-09T12:24:13Z","last_seen":"2026-09-27T20:07:04.45049Z","times_seen":4463,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/gsap.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2ef3c39a4b4589bd7282fc0daaccea3","sha1":"45ca3f3c7378d73434d33194859e1cc2504df732","sha256":"e3170dab622cbd411128e0d8c927c2697c98e052c938582a44bfd948a5e2b95b","sha512":"b591741e741d69d82efe848c612b774a56bd02e6c250c3752f7cf2046b46d977b04247c84e4550c835cd0921f185c2aa4143328b9e7c8ad56edab80edc71274c","ssdeep":"1536:i1BwKyDBpQvvtMOeqZ085JjhBhWDs06WPewGanr6:6wNQPC8vjhBhLLWPepE2","tlshash":"2663f9dd3292b42343565161447f0a0bf33ba998640f0918f269e5ce7d3c99d42bbf7a","size":70856,"data":"","first_seen":"2025-03-30T04:22:37.532333Z","last_seen":"2026-09-27T19:24:16.490923Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/gsap-split-text.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"46699ffa70ff06a2af7723d329b89c76","sha1":"13fef23e00572d0bef4594ba4760931622369d25","sha256":"ae13acf4f5fff4c8d017d6f244bd9c2b9e6a8b236a92028aa1844e8543213deb","sha512":"16bd14a005a279b118aae00247186722e37dd16940482036e6951208803a3c6e26443f6cbaaf7b4f7678c8cbdd6ef127ac212b827a58057f77f3c2d4de0cfbaf","ssdeep":"384:erEawZ1w8LNjr4lQWszZus4/CaCKgiLEW:UwvRmj+aCKgiL3","tlshash":"a36295b010216f216172125399561b1ff0a8490be923db37dbacf0adb340935ebd7af9","size":15205,"data":"","first_seen":"2025-06-19T12:39:55.090542Z","last_seen":"2026-09-27T19:24:16.435056Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/smooth-scroll.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"83b875e128da852fc445d67cadd009cf","sha1":"548def8d903e36120d0f66112d78aecf0fc48ad3","sha256":"401ad2d9a585405cefcee3c5dbba8b545e567cfa9c63eecb3cd403d41c1a1d6c","sha512":"42944a22bfd434efa21af9cc701f1fe9252384f2fdd0e97bb3d0b1141fc62f35f6256227c74b1f02ff2eb022fc6a616564b7f97618019a75d0e7212d51fd85f6","ssdeep":"384:aTF73DPRPKB443CLMacPMb89wuo/ao0ZmgGAeplFvtVbJ0+CFRqz6A:apDS445Pu89bo/o8rrblPmLMz3","tlshash":"b0a2b69955e32c6116af613e979f92c633744053120ad925380ebf982f8ca7453f3fea","size":23038,"data":"","first_seen":"2025-08-29T11:52:54.213434Z","last_seen":"2026-09-27T19:24:16.444567Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/aos.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b57fd6e43eddd97b6684320935392f5c","sha1":"0f2024b63269b84c52363f196775ce5650a3c6d1","sha256":"450b5977b97b79f919ff15129ba87fd03e4d6a27f57e15f5b2b71fddd8ce0ee3","sha512":"69657d155d9c5b120479e0541049ff9d8803307527acd155305e9248fb149c42f79419d5b26fdb31a3861bbe8c1fdc2e5faff7e72a8e6346b185c87d72fb0995","ssdeep":"384:3F2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:12fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"6c52e6dc3680f0a617a794f7827f600ff2f14835245e90a0d269c4e67db58ae8673e5e","size":14249,"data":"","first_seen":"2023-03-26T13:31:02Z","last_seen":"2026-09-27T19:24:16.41032Z","times_seen":233,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/cursor.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"44a0bcd846d78e4233e4efd71d22e704","sha1":"918045d5a50bf5b5c5255526b470cbbc6bf8eb51","sha256":"e40b7a5039dd2b3581b6bacc06b5f7899f7dd415b5b435992323e04fbf14430f","sha512":"8b6f3aacd9bab7e651edc910a030f32ae1d2c67a8dcc493bf52c759ab415a29efb7d3e017d3f41579cc94b8ad794628a8c739dc04fc2bdc5b3b198bf08223d9c","ssdeep":"12288:E6DsSqy+k3g5TJpL0JoWcK/NUGbIPN9yl9FcxwoD3NVyY7pv8M1iPKtUO:E6DsSqy+k3g5TJpL0JoWcK/NUGbIPN9J","tlshash":"05c4b6897ee611264623b1799fafa145f639c0131509ed48bc4e93942f9483882ffff9","size":591107,"data":"","first_seen":"2026-09-27T19:24:16.488574Z","last_seen":"2026-09-27T19:24:16.488574Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/odometer.min.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc259ded1a84fccde97eed25b0f36fd7","sha1":"951884d82a2ab311e2719ff96d429082b48c4053","sha256":"45cd87a552a2962ecab5f977c381df31f82adc173512b492cb4a0bd555b2c567","sha512":"a8f21bb09901d6d0f61941dac83cb874b3c132ec4f4f5e163523e1e35705080e57866042de05d3c20c2a63d156769f755513b9cc9f8cc4b75a797ef51eb7518e","ssdeep":"192:x2vNkLkN/cBQiCmchU752Z/mE7hJrky6XHdKyXmaWZShW1Ik7IaB:8vokN0BQiX5y/m8XklHdKyXIZS8OiB","tlshash":"fe42451163e1273d9707e1a1aeef8d44b7b989296194808eb61cd4d9a831c348b7dff8","size":12145,"data":"","first_seen":"2023-03-11T22:43:23Z","last_seen":"2026-09-27T19:24:16.426219Z","times_seen":257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/main.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69913065cf2522429d70236c535e7498","sha1":"5b3b241e864c8fd43018cd565525da9e3c724364","sha256":"56ba7352e2f66af261d31de8f7c895f91d0648250795619fce120a27ac96658c","sha512":"6e70b4752973530bff982f0028898d8feaea08680aa5df74fa0aa5a65bd8510fd44a7d82cee05478952502c850aee0701098b4640b41f5ccd5c886651d6405e6","ssdeep":"96:SdSoaku0CGJSW3rmn6zEK/mgFtyDYLDrZydPrxCwlaw+C7IfrQOGhjEYPLnXRsnx:Sooao8R6zCcDdyd9tI0d373W","tlshash":"451221092cbb207218b7f5b95b9f6200fa76500bad0add6175df01841f8972c91fe9eb","size":9831,"data":"","first_seen":"2026-09-27T19:24:16.46828Z","last_seen":"2026-09-27T19:24:16.46828Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"batarpay.com/landing/images/shapes/shape_coin.webp","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.476Z","timestamp":1790536996476,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/images/shapes/shape_coin.webp HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"2f23e-6a13f15d-99337c9f5de2ea19;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 193086\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":193086,"size_decoded":193416,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"558382a22bb41ff0274f50f635453af0","sha1":"3365cce7cc90bb9a1af084b40dbc69e003af2b8a","sha256":"abb3318ea2ff14e972edbc5951e4937ff12de56f4aea1da96ee43dc293a2d358","sha512":"0f8f344ff0126e725e733b379bf052a10fd6b6d45dfabc191abd48b66079e40080c3e52e461a713155e05f377c0f2d58e14a29de7e4c1c189e31e0a27be5f4da","ssdeep":"3072:n0//7Mwvw3iA5JcSJopNwFgy39PI6wjQ217aln5QvjZeofYapCP:0//7ZwSA5JcSJonKj3tYjQQXv4wYJP","tlshash":"941412d94f208beac1e0d2f795f5ec339d92eabe4a3c205b0d757b4458456a03939af0","first_seen":"2026-01-04T15:47:29.599538Z","last_seen":"2026-09-27T19:24:16.397044Z","times_seen":54,"resource_available":false,"data":null}},"time_used":1790,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1034,"receive":756,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.585Z","timestamp":1790536997585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://batarpay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:12:40 GMT\r\nexpires: Tue, 21 Sep 2027 16:12:40 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nage: 529837\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62460,"size_decoded":63273,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-09-27T23:37:02.96667Z","times_seen":26299,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":24,"connect":34,"send":0,"wait":17,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/icons/fa-regular-400.ttf","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.587Z","timestamp":1790536997587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/icons/fa-regular-400.ttf HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/landing/css/fontawesome.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:17 GMT\r\ncontent-type: application/x-font-ttf\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"fd648-6a13f15d-6ac8ccb45e456c58;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 426086\r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1037896,"size_decoded":426466,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, 10 tables, 1st \"OS/2\", 22 names, Macintosh","md5":"ea17b87c8b1e1b8375c946e7fbc08b2f","sha1":"f60919f77a3acf3ea49b93179b5655c072925728","sha256":"125529a32dde30a4f3a4fd484e2623d502cb70e994f43f50729c357e92149f57","sha512":"9d9a83862c222c690ab39775c1994364630327c4c61f96b7695fd7e9f09cfb87c382301143c6df11d9ad4bb3248566e96753bdf113df0856a7cdbd2c57da7a9e","ssdeep":"12288:7bjSKLtWScRCQk1DtvZnzBqaHXmNMGYgFcrVSq6CtVnNbKYiKXj9PFx6PF8W0:7plxnN33m0rrVSq3tJN+PKz16I","tlshash":"2425188263ed5e8fe8257d3882802d0e3395252c92a58373ffcb695dc1bccd58765ba1","first_seen":"2023-12-24T21:26:10Z","last_seen":"2026-09-27T19:24:16.39919Z","times_seen":177,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/css/animate.min.css","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.206Z","timestamp":1790536996206,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/css/animate.min.css HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"f242-6a13f15d-c25aecd4a0a8f680;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4257\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":62018,"size_decoded":4640,"mime_type":"text/css","magic":"ASCII text, with very long lines (62018), with no line terminators","md5":"c10921850b5ce9db03a5052ceb45e639","sha1":"064e95bd98143f4983ed3c9d26512687cb52dbad","sha256":"7f5ea25d7b20c2b3b7ca083776104d5e24c5fed557a30a483348e96dbf2ea783","sha512":"a5c0b954095aa8639748e1cbfeaf9c8e8f271e7375e27e80bb60e5845a405a7579b3f0130c0a377da906398e336492ae81ecf4b987c6d5f43c036a992d766086","ssdeep":"192:4xHSW35HeHGFg52jBW9hMoLrWn9jX5SEMSEZC+xY+MvD:KHeHMy2j2hMoLrWnBXmC+xY+MvD","tlshash":"a153d89a5ca0214857224915d7ce9fa89a3cf67324b14cfe73912c8fcb45bac13dd62b","first_seen":"2025-05-07T21:42:09.692959Z","last_seen":"2026-09-27T19:24:16.399709Z","times_seen":112,"resource_available":true,"data":null}},"time_used":1285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1283,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/popper.min.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.447Z","timestamp":1790536996447,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/js/popper.min.js HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"4e9a-6a13f15d-a92f13decc98a212;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 7120\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20122,"size_decoded":7497,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20033)","md5":"31032b08bd8e72220462d3f54f8bd69a","sha1":"871d6ef1070bd363ea390e0c8c384e47dce7f389","sha256":"c212f4b505a86352aed62b24a8f16f999f821ecbe6456c7f3c8a04bc87968782","sha512":"4cf8763b1960d73a7e933de7140d02e6f542ea5786ffa9a6d73f7e980f35308e5e69456a6ac3cb3bc0ae93880c1788147cfe5eb51ef7ae053ff0f34cb127aca1","ssdeep":"384:PZjckOxmemwN3igs6HdfGmLmnNV5LrpfV1Nn1K4kwTiO6rg3MI/9NUmJ/aZg:uxmemg3igs69TYf/pd1Nn1uwXSg3MI/9","tlshash":"f392d7dc3a94f0e5167b52bac03f011fb2379524218ee510a255d6c92c74ebba23bd7e","first_seen":"2023-05-30T11:24:05Z","last_seen":"2026-09-27T19:24:16.400218Z","times_seen":12819,"resource_available":true,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/images/shapes/shape_section_divider_1.svg","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.480Z","timestamp":1790536996480,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/images/shapes/shape_section_divider_1.svg HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"305-6a13f15d-bd74e07a54eacee1;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 412\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":773,"size_decoded":778,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"037520848e077fe17cc4b052e077a5b6","sha1":"ff54e2925c7d98a58bf5eb6b2810235e59b6f00f","sha256":"e9fa146e3e2f93e2a27bc51fb9c0aa4651e209fa30af798fbe347481f7c511e6","sha512":"0143c9bcbb7482fbb3d2d2fc73877614a8389f430f9abdc0286168a348cddea7c1b43e3d44a591b3acfc145b326db4cf4d40fa0c3226558a2cbd81da172ce5ef","ssdeep":"","tlshash":"1601c9edd21cc932a275c3d4ad68947188ad069e1b84c392d0d0efae3034ad61f5f9d8","first_seen":"2026-01-04T15:47:29.605175Z","last_seen":"2026-09-27T19:24:16.400725Z","times_seen":51,"resource_available":false,"data":null}},"time_used":1035,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1035,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/SA/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"172.67.191.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.704Z","timestamp":1790536997704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:33:20 GMT","end":"Sun, 29 Nov 2026 11:33:18 GMT"},"fingerprint":{"sha1":"86:5B:D5:86:78:1D:94:C7:7C:25:24:B2:81:87:D7:51:2A:A8:25:0B","sha256":"3E:C2:D5:AC:08:46:77:A3:EA:7B:9F:FA:F0:02:5B:B5:90:60:B4:C2:5D:1E:30:3C:52:90:44:17:EF:4E:63:41"}}},"request":{"raw":"GET /SA/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jYTPyssWxeJ2232wagXVmZKsHE1%2B6YEaSElLOIaC2Y8OCjQK3ydyWCElCaOESRNQCYu%2BXwOMmDY0IKGCWbqrU5Zc8zTvt58VsomBXNHrujWGnrnjZOVnhHAEy53Xw74%3D\"}]}\r\nage: 2624322\r\naccept-ranges: bytes\r\nlast-modified: Fri, 28 Aug 2026 10:24:35 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41ce1cbdcff1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3172\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3172,"size_decoded":4129,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"745c7afc376ea42458fbc71d554009c3","sha1":"6b994f1014180691429703cefe0bc6e28a015030","sha256":"c06080acde309e11bea8b4becd65ae2e4d67c785ef5c6d9965b4340b9ece5c0b","sha512":"675b70adb88c50df47a028bf555703fa589118b2c16108ff906696125e3e51dcb5ce2a235f2950cb937003b4cefe4cf37e3c4a66b0b8c21f6752d70df18b008b","ssdeep":"","tlshash":"34613c97646b35d8c5f8b0d02ebd1219e0b4e5606d2f236d9fdd106539978b4460db0f","first_seen":"2023-10-31T17:27:49Z","last_seen":"2026-09-27T19:24:16.4019Z","times_seen":106,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":6,"connect":15,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/VN/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"172.67.191.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.743Z","timestamp":1790536997743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:33:20 GMT","end":"Sun, 29 Nov 2026 11:33:18 GMT"},"fingerprint":{"sha1":"86:5B:D5:86:78:1D:94:C7:7C:25:24:B2:81:87:D7:51:2A:A8:25:0B","sha256":"3E:C2:D5:AC:08:46:77:A3:EA:7B:9F:FA:F0:02:5B:B5:90:60:B4:C2:5D:1E:30:3C:52:90:44:17:EF:4E:63:41"}}},"request":{"raw":"GET /VN/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wkmIYW8%2F6qDkrkHiULRWYeBlLmPNhrlF7TKdevC4rU08EekFfMQFEsfWP0DUlTjIayC5ukYsw7OFj3AJE4J1ST7wtvGNOBqg5z%2FcxtbcHbkUTMowpGYctRYMjyU0AUk%3D\"}]}\r\nage: 365400\r\naccept-ranges: bytes\r\nlast-modified: Wed, 23 Sep 2026 13:53:16 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41ce1cbed111ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2024\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2024,"size_decoded":2980,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"3d95cfeee08465290118286c6ac6debe","sha1":"95a4ea46131575c75046fba5d766591c6b0b368f","sha256":"2d9cee51162bc441a8d6fcbc7b9a285218b8e82e815d670384d7be45a718b552","sha512":"0591062d8919524cc934facb3f684cdb2ae90e50c34376d6de731b2d682e2bd372cfd9122ecf9e14970678cc9950a46530c522952ddba3762a569626149d52d6","ssdeep":"","tlshash":"71412c419764c585d4099206b59309e0ee335230f40b8ce8e77ee8753f23372b3c2181","first_seen":"2025-06-30T18:13:20.307868Z","last_seen":"2026-09-27T19:24:16.402887Z","times_seen":86,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/RU/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"172.67.191.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.744Z","timestamp":1790536997744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:33:20 GMT","end":"Sun, 29 Nov 2026 11:33:18 GMT"},"fingerprint":{"sha1":"86:5B:D5:86:78:1D:94:C7:7C:25:24:B2:81:87:D7:51:2A:A8:25:0B","sha256":"3E:C2:D5:AC:08:46:77:A3:EA:7B:9F:FA:F0:02:5B:B5:90:60:B4:C2:5D:1E:30:3C:52:90:44:17:EF:4E:63:41"}}},"request":{"raw":"GET /RU/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t9UM45cWEmPZ2dhCO99wjMaHC1oPcNfPeSvBfWo5UYzUGcQJ5kBzbmRfqsuHgCwjQtBRQKLk2i3NlhKFUkiE4jEbA4gk1PAUxVAK83gzaTPeHcsdtsZZsARIGX1sTyU%3D\"}]}\r\nage: 1405291\r\naccept-ranges: bytes\r\nlast-modified: Fri, 11 Sep 2026 13:01:46 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41ce1cbed121ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1328\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1328,"size_decoded":2281,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"6ef17f4c3424b38c046ed1d0246f68e0","sha1":"c3426e9d2d5ba4f6796cd760fb324074240cfa88","sha256":"f01d865d438d4324b6c9a99d018c6136574bf2b71d3d5161a12756db5fefa3b7","sha512":"f4734a82822295d10fd389abe636419bf3d65399181ff6ee9ee47824c16db3c0827be4b46fddc933bc208139f2f817eeeec321422638493592e76684428ebeea","ssdeep":"","tlshash":"6621d591d683aaa9fd2b3850833d73788d709117259c0af0019164f16971ef2869bc0e","first_seen":"2023-06-09T07:36:07Z","last_seen":"2026-09-27T19:24:16.406495Z","times_seen":186,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/images/shapes/shape_net_ico_hero_section_bg.svg","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.552Z","timestamp":1790536997552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/images/shapes/shape_net_ico_hero_section_bg.svg HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:17 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"8cd-6a13f15d-72e21f438f876909;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 902\r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2253,"size_decoded":1268,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"81b0ef12075aef34b92776717bdd64df","sha1":"7bf99f03bb5498a4b340d47f27a35aa559c74234","sha256":"910432c2db123fef10f3f42e25bc4de052d296c91f094e5ea527e2325c692f92","sha512":"8de73b4c1e99bfdf9bb0ec087f10c99a29451c882a4ec07a758557619293ca50472033a6213b7ffb775847a6abb1b9f1b705a4338194f8733f9dc586f8e225a5","ssdeep":"","tlshash":"0941336cf1683663f6acd678ff3344202819615fce8491c0c072a7ea20357ee9d9d4c1","first_seen":"2026-01-04T15:47:29.642439Z","last_seen":"2026-09-27T19:24:16.408096Z","times_seen":50,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/JP/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"172.67.191.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.728Z","timestamp":1790536997728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:33:20 GMT","end":"Sun, 29 Nov 2026 11:33:18 GMT"},"fingerprint":{"sha1":"86:5B:D5:86:78:1D:94:C7:7C:25:24:B2:81:87:D7:51:2A:A8:25:0B","sha256":"3E:C2:D5:AC:08:46:77:A3:EA:7B:9F:FA:F0:02:5B:B5:90:60:B4:C2:5D:1E:30:3C:52:90:44:17:EF:4E:63:41"}}},"request":{"raw":"GET /JP/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9bKZrdx7ELalD%2BxOA3D2Z%2BPnUOXQ9IUagGNAujUDT2Q6OfinWkVZN%2B5BscUBKgB7sF12sRkuw3JlUQboaecT5cfSwJXevsVG92IF7V7y8%2FRlLi1dxilKRvKPUzth4SI%3D\"}]}\r\nage: 2520300\r\naccept-ranges: bytes\r\nlast-modified: Sat, 29 Aug 2026 15:18:16 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41ce1cbdd041ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1417\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1417,"size_decoded":2378,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"01ce5c76140f9aa0fadb0d6f3cd57781","sha1":"d85a26da86ac5ddddd472327d9e79e4e80b2e40f","sha256":"6ac97e0e589598931edc040ab70d7e051a959462e97447ca9b274df5b5adb996","sha512":"3669531867ac6f889f1e795679fd4da155448db51a0059c2da642501996686d1db06433dbd463daac029904869a478d119288ab9024954af74d19b448884af96","ssdeep":"","tlshash":"4c21e9d2109a6de0e2e0276d0787d75569963a14c009a37c52df10a1c975792b393417","first_seen":"2023-09-27T05:02:22Z","last_seen":"2026-09-27T19:24:16.409027Z","times_seen":169,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/aos.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.458Z","timestamp":1790536996458,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/js/aos.js HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"37a9-6a13f15d-15201970c09fa0a5;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4206\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14249,"size_decoded":4583,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14249), with no line terminators","md5":"b57fd6e43eddd97b6684320935392f5c","sha1":"0f2024b63269b84c52363f196775ce5650a3c6d1","sha256":"450b5977b97b79f919ff15129ba87fd03e4d6a27f57e15f5b2b71fddd8ce0ee3","sha512":"69657d155d9c5b120479e0541049ff9d8803307527acd155305e9248fb149c42f79419d5b26fdb31a3861bbe8c1fdc2e5faff7e72a8e6346b185c87d72fb0995","ssdeep":"384:3F2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:12fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"6c52e6dc3680f0a617a794f7827f600ff2f14835245e90a0d269c4e67db58ae8673e5e","first_seen":"2023-03-26T13:31:02Z","last_seen":"2026-09-27T19:24:16.41032Z","times_seen":233,"resource_available":true,"data":null}},"time_used":1004,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":998,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/ID/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"172.67.191.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.726Z","timestamp":1790536997726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:33:20 GMT","end":"Sun, 29 Nov 2026 11:33:18 GMT"},"fingerprint":{"sha1":"86:5B:D5:86:78:1D:94:C7:7C:25:24:B2:81:87:D7:51:2A:A8:25:0B","sha256":"3E:C2:D5:AC:08:46:77:A3:EA:7B:9F:FA:F0:02:5B:B5:90:60:B4:C2:5D:1E:30:3C:52:90:44:17:EF:4E:63:41"}}},"request":{"raw":"GET /ID/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4z3SOGIC2e8CMbI4t%2BAN0gUVc0osWZK7LRi21CWuhhU0yuZidE67JX5QhQEWkHcJI8Lzzz6XmKdCQxeOx%2B0l1KRY9cVLNLpux%2B2mehYcO5n0opvfO3RSFd7XEypmtPA%3D\"}]}\r\ncontent-type: image/png\r\nage: 1251705\r\naccept-ranges: bytes\r\nlast-modified: Sun, 13 Sep 2026 07:41:32 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41ce1cbdcfc1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1041\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1041,"size_decoded":2000,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"1aec1d763d983673a455df5825bf435d","sha1":"8d6feaee2ea4cb3def9cfee97f3ce18123f7527a","sha256":"504118381b69be8167fe0bff2668b023c65be311231cee7fc715edfb883acd79","sha512":"f8f39d9c069eed294c16f3c67794fde1d2e8f57517953eedd5c82e74081f22e2610c663912f6811d0f01ebce0a8b77128ad0eeb3733fefdb2d06c5fc752abecd","ssdeep":"","tlshash":"fc11e592c5d2b62be5c8c6f8e11830780bae8d871728600e840ef07e0e201a38d580f1","first_seen":"2025-09-21T15:33:36.550561Z","last_seen":"2026-09-27T19:24:16.411681Z","times_seen":75,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/TR/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"172.67.191.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.741Z","timestamp":1790536997741,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:33:20 GMT","end":"Sun, 29 Nov 2026 11:33:18 GMT"},"fingerprint":{"sha1":"86:5B:D5:86:78:1D:94:C7:7C:25:24:B2:81:87:D7:51:2A:A8:25:0B","sha256":"3E:C2:D5:AC:08:46:77:A3:EA:7B:9F:FA:F0:02:5B:B5:90:60:B4:C2:5D:1E:30:3C:52:90:44:17:EF:4E:63:41"}}},"request":{"raw":"GET /TR/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yLC0NHQ9G4%2F9CWd4Ibvdwn1n7HIn6CpzeQA3h7oxZpTQU8c6n433TbkIBHdxwCovrpMdC1m9crTYfXqQucuGqTPnASuYRXRoiT3sOVs7gKY1rJ5qPwLD3GVi%2BKgeJIE%3D\"}]}\r\nage: 2618644\r\naccept-ranges: bytes\r\nlast-modified: Fri, 28 Aug 2026 11:59:12 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41ce1cbed0f1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2454\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2454,"size_decoded":3411,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"a61f4d5561474e64ed3f68976556b3dc","sha1":"850b0dd33787ece2782978648106834b3156eace","sha256":"10037b05b02ac6b6503d0912b5886b23d2086ebc717692889f7159d5b8fedab4","sha512":"77f20a2a9093ec6a890a53b5af7d30a64c9bb369a3c0ff279fd6df75da67ebabf03c505bb064ff5544585569d94457ab6dc1cf48048ab856034692ba0da65fdb","ssdeep":"","tlshash":"7a515d9a5554ddf9bd4c7af65cc43c04889f8dcb7ce20711666159348b8d46f527f301","first_seen":"2025-08-31T21:23:30.326375Z","last_seen":"2026-09-27T19:24:16.412513Z","times_seen":87,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Bricolage+Grotesque:opsz,wght@12..96,200..800\u0026amp;family=Lilita+One\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.758Z","timestamp":1790536996758,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Bricolage+Grotesque:opsz,wght@12..96,200..800\u0026amp;family=Lilita+One\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 27 Sep 2026 19:23:16 GMT\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1434,"size_decoded":1196,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f0125c9c609050e0335c15a9990865e2","sha1":"8992da57e99ad518e95d3aa6ae35e7be2ede92d9","sha256":"3154593bbddd5403b044c8843c251aed595509a16785af45568397dd424ef16a","sha512":"a838e364ff7cfb82b28dc4c2f790bd4045a05d63fb6d3f44cddcc8221eaf1db74c6e4217d1731d499c69c82d2525af663601922f84c80efe04e6cdb5e104ceba","ssdeep":"","tlshash":"d321c010503bd2806393ccca63da7d32de6fa1607088e5b8bffe189c9d66c12635274d","first_seen":"2025-11-21T07:46:34.394467Z","last_seen":"2026-09-27T19:24:16.413351Z","times_seen":10,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":33,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/FR/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"172.67.191.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.720Z","timestamp":1790536997720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:33:20 GMT","end":"Sun, 29 Nov 2026 11:33:18 GMT"},"fingerprint":{"sha1":"86:5B:D5:86:78:1D:94:C7:7C:25:24:B2:81:87:D7:51:2A:A8:25:0B","sha256":"3E:C2:D5:AC:08:46:77:A3:EA:7B:9F:FA:F0:02:5B:B5:90:60:B4:C2:5D:1E:30:3C:52:90:44:17:EF:4E:63:41"}}},"request":{"raw":"GET /FR/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ndssZBHym6NJS9MeqZhCsZeQ9rbIokse%2FCnUzU%2BQqu6UaFg0L3zsugsCBtH7m4%2BT8XYJbOF6Zxh6%2FKb5JXDsXUkRT4iOVLlUpwsu3OBspALMG9vpVcP3U%2FKsRqDXtoM%3D\"}]}\r\nage: 90811\r\naccept-ranges: bytes\r\nlast-modified: Sat, 26 Sep 2026 18:09:46 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41ce1cbdd031ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1563\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1563,"size_decoded":2524,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"35b23cb8a9ace025ac01e41ae8006d62","sha1":"ca90cfdaaa071586eb2235da81c7ec0c0a3eac34","sha256":"bc276a74281c1e02485a5946bcadf753999f8f5f53115b5d5fff77aa665c52ff","sha512":"561212651779129cd54e524f79fb62339ee356223f6cc4a538445599852de79ad809cd25266a756aa72e372f01d20a9b5a2f9362f2dff02e5b8ff868e10fb62a","ssdeep":"","tlshash":"ee31e79a57a2fdc4dae94294db1e28dca5bc713212c47b19e0a702f71fa060d6ba09c5","first_seen":"2023-06-04T08:01:57Z","last_seen":"2026-09-27T19:24:16.414755Z","times_seen":139,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/css/aos.css","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.207Z","timestamp":1790536996207,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/css/aos.css HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"65c5-6a13f15d-3318f31a24ae90b4;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1539\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26053,"size_decoded":1922,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-09-27T21:23:29.469029Z","times_seen":46648,"resource_available":true,"data":null}},"time_used":1284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1282,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/images/shapes/shape_ico_hero_section_bottom.svg","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.474Z","timestamp":1790536996474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/images/shapes/shape_ico_hero_section_bottom.svg HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"1bfa-6a13f15d-aa30959beea14666;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1797\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7162,"size_decoded":2165,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bab5d1db10ec874e31cf2688d943ab0a","sha1":"8a3b304de3f90375f60d9d0d42586ef2858b321d","sha256":"e63394e0c0076f20582049a18311329a5a1b5e537a71d75e6d50dc1a79394358","sha512":"733257f896fba19c5f66e8fa5817c350521015abdfcc4544f1218c1b7cb7dd82482c08e96e5a44209f9f6edde5cdd88938e4aed02f1f39084ee2832945042550","ssdeep":"96:23nzJDX2wo51wMSp9jdW6Shs/qNYhNY9NYzNYWPXNRhCqgPQ/9DAuS4+:inlDX2zmX5W6Shs/wc8MXuJYRAu4","tlshash":"b2e152f5966178f5fc71c75cfbc64481a12bf27689934754c0bda73e2812c88acaeac4","first_seen":"2026-01-04T15:47:29.5912Z","last_seen":"2026-09-27T19:24:16.416978Z","times_seen":52,"resource_available":false,"data":null}},"time_used":1384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/images/services/ico_service_image.webp","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.481Z","timestamp":1790536996481,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/images/services/ico_service_image.webp HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"4995c-6a13f15d-fc6b7570e32a42d7;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 301404\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":301404,"size_decoded":301734,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"80fabe2b54d50e0a5f93a6f816821709","sha1":"7b3be85d2e3267fecb509fe420754ed7030fd9b7","sha256":"d9de4bbdeb45fe935051c2c498e4a9e9e5bd888bac1fbe3509a325d4588689c1","sha512":"39b5ce2573e62583ae465feffa58d9fb16847b91d0291ad6b63313f53870f131602d50e36d6c5f7fa11976480cbaa605c68055e26fa99500544cb6753a791101","ssdeep":"6144:LTRb/R6YwlUA6ts/Wt+MUUBLvcuhpur7gl7iKjdKJTg:qvl16tzUKzcuhpY0l7iKjuT","tlshash":"be54233a5189d189c1be4ff495322721ca6c41af1f0e60e3ba2757e89b62176df1ed03","first_seen":"2026-01-04T15:47:29.587195Z","last_seen":"2026-09-27T19:24:16.418105Z","times_seen":50,"resource_available":false,"data":null}},"time_used":1822,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1034,"receive":788,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/icons/icon_bank_building.svg","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.484Z","timestamp":1790536996484,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/icons/icon_bank_building.svg HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"6a1-6a13f15d-dcec9888b523d542;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 640\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1697,"size_decoded":1006,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e4f5caa28d65ac31a02aa85d921d1d3","sha1":"eac4174d454f361bf107193e78af165f39708e51","sha256":"74b009e26e8805150022c42fc081c0e98056bd68d6f180c06a7cbde5371ef593","sha512":"5b0bd07e1a261c2097275326595308e159bcde8095c87801094b6ca1a5957694d59b0ffaf706f745572a5a4e987f801b07c95208bf4acec79e524cfa53bda1d8","ssdeep":"","tlshash":"5031cb019b1c462eb00850287518bc34a4ae88c1f9c8ede0d56a7f4b7575c8eacfd4cb","first_seen":"2026-01-04T15:47:29.61327Z","last_seen":"2026-09-27T19:24:16.41985Z","times_seen":50,"resource_available":false,"data":null}},"time_used":1044,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1032,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/gsap-scroll-trigger.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.455Z","timestamp":1790536996455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/js/gsap-scroll-trigger.js HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"9d5e-6a13f15d-98bbcc8f6364d7f9;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 16017\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40286,"size_decoded":16395,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40286), with no line terminators","md5":"656fa09a811b94f597bff00f110acc6d","sha1":"e39b3ab7943b0f4218439d798aaa1f95a9b53575","sha256":"682c02f2244438296b056b9b8f59eb8b464f79eaa76fdfb798eaa676154694ac","sha512":"2eb24a24a3537b241742a2a6038f78d48193c03ff74c6016a48b49ee45e49bb17c36dd87a21a10e542c56ca95cc5220f8ba1c885d79bc32ea4eb85659edad24b","ssdeep":"384:sBdfDFqm2m+W5A/uJJFffJH4ukQIVK7FV8ZdrVbrha4L9vWqOMMtSyV9MsR72QIz:8djYWJJRpnIw7FVA3x9ROMMtSQ79TFU","tlshash":"4d0308ce3245b07267ef62ba912f0206733614d9681f4028f625a4e93c7e57c877be9d","first_seen":"2025-06-29T00:34:56.041248Z","last_seen":"2026-09-27T19:24:16.42361Z","times_seen":73,"resource_available":true,"data":null}},"time_used":993,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":977,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/swiper-bundle.min.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.461Z","timestamp":1790536996461,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/js/swiper-bundle.min.js HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"22efc-6a13f15d-7836dc1ff56b4d9;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 38272\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":143100,"size_decoded":38650,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65277)","md5":"d642da1ac69e6c513f5e626d45806d8d","sha1":"a3378716746549469c7ded7fd21800270679ebcd","sha256":"a9470bbe71ea47bde6dcd9f3dc4970244904c2260badd66314550947b9fab9c7","sha512":"a3d678a7e6fc9cc3502ffb4b55c8c7d83c755cc27ae91958c7bec7b9a03a9c2b03ceea61f631e9781dd51079dc0f56938f9e0553dbd1524a67aa733b2b8b1083","ssdeep":"1536:qIJ8fGRELR8Nxb0LzGhd+IWzGolxUFnOk8+ILDX1ftgeQV9qDlUpf/arWcWXvQOF:RJjNqLz2vHnOk82V9SAXiTWXpk07jl","tlshash":"8ee3f8896220b57646e316db93e4c611b3b54540b80ac8f470b94c9f597ec9813feffa","first_seen":"2026-06-19T09:37:25.177097Z","last_seen":"2026-09-27T19:24:16.424917Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1042,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1002,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/odometer.min.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.465Z","timestamp":1790536996465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/js/odometer.min.js HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"2f71-6a13f15d-d9d1dafca2ff6666;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3693\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12145,"size_decoded":4070,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12122)","md5":"dc259ded1a84fccde97eed25b0f36fd7","sha1":"951884d82a2ab311e2719ff96d429082b48c4053","sha256":"45cd87a552a2962ecab5f977c381df31f82adc173512b492cb4a0bd555b2c567","sha512":"a8f21bb09901d6d0f61941dac83cb874b3c132ec4f4f5e163523e1e35705080e57866042de05d3c20c2a63d156769f755513b9cc9f8cc4b75a797ef51eb7518e","ssdeep":"192:x2vNkLkN/cBQiCmchU752Z/mE7hJrky6XHdKyXmaWZShW1Ik7IaB:8vokN0BQiX5y/m8XklHdKyXIZS8OiB","tlshash":"fe42451163e1273d9707e1a1aeef8d44b7b989296194808eb61cd4d9a831c348b7dff8","first_seen":"2023-03-11T22:43:23Z","last_seen":"2026-09-27T19:24:16.426219Z","times_seen":257,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/icons/icon_dollar_2.svg","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.483Z","timestamp":1790536996483,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/icons/icon_dollar_2.svg HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"72e-6a13f15d-404e45518fd73bce;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 773\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1838,"size_decoded":1139,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f0b7d1fd5116291266656c2f1eb31b8","sha1":"dd964dc0c00d9921bab498dcf217541322fc0a8e","sha256":"ce181ab7c8a3f25ca2e45ad4a190fb5d1a4b0ab0f8ee2b7e1fec410fdcceac76","sha512":"750fcc3144fc7ad5b1512162e3532c8f908e09ac2e6ecbe59772bcfee422efcc653f63b813e3856341b484900deeb6f4563a8b900ef65fd32c128ba07de02813","ssdeep":"","tlshash":"8531ad14832ec678f04614ac095cfc30d912999bbac7d5f091a52d171cb98fe1d6e6f7","first_seen":"2026-01-04T15:47:29.548447Z","last_seen":"2026-09-27T19:24:16.426748Z","times_seen":50,"resource_available":false,"data":null}},"time_used":1033,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1033,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Bricolage+Grotesque:opsz,wght@12..96,200..800\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.756Z","timestamp":1790536996756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Bricolage+Grotesque:opsz,wght@12..96,200..800\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 27 Sep 2026 19:23:16 GMT\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1434,"size_decoded":1196,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f0125c9c609050e0335c15a9990865e2","sha1":"8992da57e99ad518e95d3aa6ae35e7be2ede92d9","sha256":"3154593bbddd5403b044c8843c251aed595509a16785af45568397dd424ef16a","sha512":"a838e364ff7cfb82b28dc4c2f790bd4045a05d63fb6d3f44cddcc8221eaf1db74c6e4217d1731d499c69c82d2525af663601922f84c80efe04e6cdb5e104ceba","ssdeep":"","tlshash":"d321c010503bd2806393ccca63da7d32de6fa1607088e5b8bffe189c9d66c12635274d","first_seen":"2025-11-21T07:46:34.394467Z","last_seen":"2026-09-27T19:24:16.413351Z","times_seen":10,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":50,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/CN/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"172.67.191.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.708Z","timestamp":1790536997708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:33:20 GMT","end":"Sun, 29 Nov 2026 11:33:18 GMT"},"fingerprint":{"sha1":"86:5B:D5:86:78:1D:94:C7:7C:25:24:B2:81:87:D7:51:2A:A8:25:0B","sha256":"3E:C2:D5:AC:08:46:77:A3:EA:7B:9F:FA:F0:02:5B:B5:90:60:B4:C2:5D:1E:30:3C:52:90:44:17:EF:4E:63:41"}}},"request":{"raw":"GET /CN/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sb2kHDdUwS0%2Bx0lk9QbB%2FstTlIsvAMIbb99Ad4S6qzktLApPefeffMv3JWO%2BLbERQpNUG7ONXie2WnthrKEvrYE86pmaAzxcoiySbhW6NN8yn104UMOtdQqlne5GZZM%3D\"}]}\r\nage: 1407468\r\naccept-ranges: bytes\r\nlast-modified: Fri, 11 Sep 2026 12:25:29 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41ce1cbdcfd1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2109\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2109,"size_decoded":3068,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b2fa0be9affb84002363db5b7436e3c6","sha1":"ea92f5323ab3d637e8be03bddb8c66665232cf98","sha256":"bec1310a920bf50e32ec7769a0013c662594a9f83cab4142aca5f212a0f65fbe","sha512":"62ffbba24729727cff53f46363ec18d013d7d0f2058e9027bb3f1d54067355731ce0f822f63b30a62895c719260d29f96d284bb76d5852962ae32e0674b3eb10","ssdeep":"","tlshash":"a6413863c3650822ee1a2429581ce3677ee59817b52b36cfd0e36c762d61060e74ef13","first_seen":"2023-07-06T21:15:24Z","last_seen":"2026-09-27T19:24:16.427694Z","times_seen":149,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/IT/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"172.67.191.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.724Z","timestamp":1790536997724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:33:20 GMT","end":"Sun, 29 Nov 2026 11:33:18 GMT"},"fingerprint":{"sha1":"86:5B:D5:86:78:1D:94:C7:7C:25:24:B2:81:87:D7:51:2A:A8:25:0B","sha256":"3E:C2:D5:AC:08:46:77:A3:EA:7B:9F:FA:F0:02:5B:B5:90:60:B4:C2:5D:1E:30:3C:52:90:44:17:EF:4E:63:41"}}},"request":{"raw":"GET /IT/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ErUuFkwCGDk02sOIZxrQ4kBQdScMXs64iU7RZofjP9ujq4fvy1qyHmTadwQZHFejRn9XpGjqHAVqsNZtTRDXEF%2F%2BXsr%2FEZ319B6WboCPeFaJNtQKsOoKwjF1SoGSUeQ%3D\"}]}\r\nage: 2624830\r\naccept-ranges: bytes\r\nlast-modified: Fri, 28 Aug 2026 10:16:07 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41ce1cbdcfe1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1571\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1571,"size_decoded":2530,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b5a111f02c80d1380474c9a00b3c6ba2","sha1":"d38440c5d51b1da1926a723182dccbdb4490766e","sha256":"06706dfbcc2ad630aaba10ec426f9f550ecef1fd085ea5b2831f7f83c3a7c6a1","sha512":"e4a2fdc36e922238b005311783ebe9685006f4491abcd188779d0cfa3c60c1f8c243afdd2087d55366925f66559387304736013cdcbe5e80a82781633d3dd298","ssdeep":"","tlshash":"ac3107a1e714ed65af88238a247d34a2d6298d4c3ef4ba78f94c9bd50d0890e204023b","first_seen":"2024-01-10T13:52:24Z","last_seen":"2026-09-27T19:24:16.428557Z","times_seen":98,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/TH/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"172.67.191.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.740Z","timestamp":1790536997740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:33:20 GMT","end":"Sun, 29 Nov 2026 11:33:18 GMT"},"fingerprint":{"sha1":"86:5B:D5:86:78:1D:94:C7:7C:25:24:B2:81:87:D7:51:2A:A8:25:0B","sha256":"3E:C2:D5:AC:08:46:77:A3:EA:7B:9F:FA:F0:02:5B:B5:90:60:B4:C2:5D:1E:30:3C:52:90:44:17:EF:4E:63:41"}}},"request":{"raw":"GET /TH/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5t3I3nWsLQNv1WxDSsGL8oDWySxa4MX%2FBE72CmqaC7p08Ha0Ezao1rmqxvDF3hzUJbk1ErQmm9Ku1FizGD2BZ8nHBQtve4UK6GkVIcs4xF10uwnkp%2FqNnYYMyGMZyHE%3D\"}]}\r\nage: 1405290\r\naccept-ranges: bytes\r\nlast-modified: Fri, 11 Sep 2026 13:01:46 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41ce1cbed0e1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1468\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1468,"size_decoded":2425,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"19a895f515f9a71b7e9208c5a7852185","sha1":"3451e9e2091be26d2a23e58f8541740faeb8425d","sha256":"73f4717db8634048dc13ace303ddd67d8461cfb06af1aa33219f8c6e98e5e04b","sha512":"3c9457a22f48edf8e5ee5c6470dec14217d04863d8879dcf3bb24e98d84e3f8afd7d5cd7502e9b79272e664febbeddc394c9223978f27ff05778d11e928755b7","ssdeep":"","tlshash":"69311973fa95b2faef9b518fdc2a763c48028eb3051a206392e4010f110929166f77f3","first_seen":"2023-09-27T05:02:22Z","last_seen":"2026-09-27T19:24:16.429544Z","times_seen":112,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/magnific-popup.min.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.462Z","timestamp":1790536996462,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/js/magnific-popup.min.js HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"4ef8-6a13f15d-aec42e0e6a9bcf37;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 7043\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20216,"size_decoded":7420,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087)","md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-27T23:47:26.679686Z","times_seen":76472,"resource_available":true,"data":null}},"time_used":1046,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1038,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/images/shapes/shape_globe.webp","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.475Z","timestamp":1790536996475,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/images/shapes/shape_globe.webp HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"5ce0-6a13f15d-d10a19fbfb95a801;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 23776\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23776,"size_decoded":24104,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7b720af60f90c758d017d8fc67159363","sha1":"9d73d1d8bfc3059126e058eb3465252b546f897c","sha256":"029fbcb0d7cc28a4d75481acd3ca18f76a5dbdfdeb080fc5060a07edd18f30e9","sha512":"d1eb276a367279a53d7ca1d4d3e8d588fd0aef25e841447613d8bf797b47146d39e30d349fe5473c3244b9d56f44ac97b40447388c16c9f32136f0140f6c3d6f","ssdeep":"384:wFbwsjmyhuUnGNVue8nzcBH8reUo+IST8crE4xtjI+9sF3fVlZC9Q:OVmycUGNVueuoBHWeU2zcw1+9sZfP","tlshash":"73b2f2c74c5b637ed42846774656744e18b3c038c6c015bf25cb98b55f34a95ea13ace","first_seen":"2026-01-04T15:47:29.568214Z","last_seen":"2026-09-27T19:24:16.43152Z","times_seen":54,"resource_available":false,"data":null}},"time_used":1702,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1383,"receive":319,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/ES/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"172.67.191.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.717Z","timestamp":1790536997717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:33:20 GMT","end":"Sun, 29 Nov 2026 11:33:18 GMT"},"fingerprint":{"sha1":"86:5B:D5:86:78:1D:94:C7:7C:25:24:B2:81:87:D7:51:2A:A8:25:0B","sha256":"3E:C2:D5:AC:08:46:77:A3:EA:7B:9F:FA:F0:02:5B:B5:90:60:B4:C2:5D:1E:30:3C:52:90:44:17:EF:4E:63:41"}}},"request":{"raw":"GET /ES/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A8K5yPaJIZyo%2B835FviWthNMu4tVebQbf4Sod4fqKcFCpQwRZ%2BUA66YcqMCgCtPUhf2oL1aRU4iRdPd9nJ89Z9BeUgi%2BSTQ1qDj%2BNLoheVgCT5fvm1p%2BjKD8VZHmDT8%3D\"}]}\r\nage: 1837290\r\naccept-ranges: bytes\r\nlast-modified: Sun, 06 Sep 2026 13:01:46 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41ce1cbdd011ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2354\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2354,"size_decoded":3317,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"ee2ec7b1a2b3dbb0bed31634b09eb836","sha1":"2a47afdae9ba4971006d584275a730174b24234f","sha256":"b48ad16b412fa5dde7e063cb5ad07ef012fcf743e8289a8889f9cbfd30986ab2","sha512":"1bc009e9a89a761af600565e12fd96e04d8a3851808c47c07b00e83550a83e97dbf38cd65a1061378c7ec8c8e81173572c7b5206b8626e6403eeed3799da16a6","ssdeep":"","tlshash":"31413b86701f1cafcda7d08863d22890ce60e05d5b72335cc8fed47547a6bdcaa38211","first_seen":"2023-06-04T08:01:57Z","last_seen":"2026-09-27T19:24:16.432594Z","times_seen":120,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/UA/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"172.67.191.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.742Z","timestamp":1790536997742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:33:20 GMT","end":"Sun, 29 Nov 2026 11:33:18 GMT"},"fingerprint":{"sha1":"86:5B:D5:86:78:1D:94:C7:7C:25:24:B2:81:87:D7:51:2A:A8:25:0B","sha256":"3E:C2:D5:AC:08:46:77:A3:EA:7B:9F:FA:F0:02:5B:B5:90:60:B4:C2:5D:1E:30:3C:52:90:44:17:EF:4E:63:41"}}},"request":{"raw":"GET /UA/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=01ZpBe5ilaV0KcZI3tYEZbTD9IdMNVHp%2BmGuQQjDLQDFytxBVcR%2Bb0R29ZnNeraNmrwlz9dzd8XTXZ0OwCOsYPCM7lRWcS7kJZfxaPus59DmEkPX5qyv6Fr4c6zV%2FiA%3D\"}]}\r\nage: 2624830\r\naccept-ranges: bytes\r\nlast-modified: Fri, 28 Aug 2026 10:16:07 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41ce1cbed101ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1452\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1452,"size_decoded":2411,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"1ae9eac34a2d591af0daa430b6fb8a22","sha1":"66562abbc7e3d965881ff06d5914e0df1d0c9d87","sha256":"8c41d7064ca6ec032407b242e94b02d5665141d470136b530824345b9fe4b8a2","sha512":"16f18c3702be3ca9ca71fb1333fa2afe66889457caee9c4fd07f05ea72b0bdb9e568c7d07694009a05059713b8cdb447283093f7ff598b87cfb77f854dd13ed4","ssdeep":"","tlshash":"e0311997817b1e3cfa269834871e4817949f222b2ad1f2aa344ea22c51cc212bde3058","first_seen":"2025-09-21T15:33:36.553597Z","last_seen":"2026-09-27T19:24:16.433475Z","times_seen":71,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/bootstrap.min.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.448Z","timestamp":1790536996448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/js/bootstrap.min.js HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"ecdb-6a13f15d-be23504700ce8fa7;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 15984\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60635,"size_decoded":16362,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (60356)","md5":"4800bcc26467d999f49b472f02906b8d","sha1":"2c6c0a58345a09d3761230af823a4e4852b12643","sha256":"de040986d9a3ed89d5d5f9ad6d5727015e9e238c2cd13af8f1b55909386d0864","sha512":"ca4675410af4272ff8664bcabaa5a7e2217796a3d9ca28fd891bfab06a8b45d4cf918ebd617ebeef0bd51a6b1d05b8887cdffc39db08ec70018ef12893a668a5","ssdeep":"768:WkN++EvGHWyOOY/uwAxOlU5iBNY5XPxyvTPBVRKwi/C9rfz7uxk6yH8Xae53XC7e:W0xY+t/Nhho1d76KV2O9Ed","tlshash":"3043b6563244b9330ade84e68172430bf7195d98b547816cb5bcacde2b7dc827273bb8","first_seen":"2024-04-09T12:24:13Z","last_seen":"2026-09-27T20:07:04.45049Z","times_seen":4463,"resource_available":true,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":569,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/gsap-split-text.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.456Z","timestamp":1790536996456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/js/gsap-split-text.js HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"3b65-6a13f15d-aace18e31d29c577;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4878\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15205,"size_decoded":5255,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15205), with no line terminators","md5":"46699ffa70ff06a2af7723d329b89c76","sha1":"13fef23e00572d0bef4594ba4760931622369d25","sha256":"ae13acf4f5fff4c8d017d6f244bd9c2b9e6a8b236a92028aa1844e8543213deb","sha512":"16bd14a005a279b118aae00247186722e37dd16940482036e6951208803a3c6e26443f6cbaaf7b4f7678c8cbdd6ef127ac212b827a58057f77f3c2d4de0cfbaf","ssdeep":"384:erEawZ1w8LNjr4lQWszZus4/CaCKgiLEW:UwvRmj+aCKgiL3","tlshash":"a36295b010216f216172125399561b1ff0a8490be923db37dbacf0adb340935ebd7af9","first_seen":"2025-06-19T12:39:55.090542Z","last_seen":"2026-09-27T19:24:16.435056Z","times_seen":69,"resource_available":true,"data":null}},"time_used":1001,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":993,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito+Sans:ital,opsz,wght@0,6..12,200..1000;1,6..12,200..1000\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.760Z","timestamp":1790536996760,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Nunito+Sans:ital,opsz,wght@0,6..12,200..1000;1,6..12,200..1000\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 27 Sep 2026 19:23:16 GMT\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4288,"size_decoded":1388,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e738cefe258def043e941d6df22d5d6b","sha1":"585c2f466610f0d4c4cc4f02130630657aa5d1cd","sha256":"81d16eee3845774042b285c807e1882f8a66cf4651ed99589afabd5fb25e4e65","sha512":"dcfe12552adc7afae323ff09e7d6af88df626e9bb00223f47be4e58478948027c47ea8cc1f9ac3326872391a698eb7f3c26aee2566fe14c735021f2b2f3e2ce1","ssdeep":"96:kYgrMv+0YgrMvvFZO1YgrMvrYgrMvaJc+uBYgrMvlNxOrMv10OrMvLFZO1OrMvGa:tRv+dRveyRvURvSjRvRv1yvClvZvIIvP","tlshash":"6791f081003b90816643acc533cf7f38dd9ef16134528479abfdd469dcaac6aa271b0d","first_seen":"2025-10-30T11:04:09.948913Z","last_seen":"2026-09-27T19:24:16.436746Z","times_seen":17,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":33,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/fonts/RoobertPRO-Bold.ttf","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.584Z","timestamp":1790536997584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/fonts/RoobertPRO-Bold.ttf HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/landing/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:17 GMT\r\ncontent-type: application/x-font-ttf\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"28b70-6a13f15d-3fbff6cbc56c9fae;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 69514\r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":166768,"size_decoded":69893,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, 18 tables, 1st \"FFTM\", 26 names, Macintosh","md5":"81753df2d8f29007e8ff801bc985215b","sha1":"0509d3e084ea16bec954174a834273cad73c8a2e","sha256":"435226bd54191d812a6c136d7d8115162e10bedd0fc40a18610bc8797eb84b55","sha512":"978f4766b1252ec14f1a9b58a8a814ed703ae1e12be19fa10d8ed556d123cc0f001297b001f44ce00ba7e355b01dd27f3dd4d6af18400029c9b4f1de51a15762","ssdeep":"3072:dttyUcdjDIucrc1SXZS7YAA7H6FAN/Limlgamgeqlq8WS55Fa/:dttyUcd/c4/EW05i","tlshash":"59f35b17f7898702c5165d7c5eb8d375a366f8223e4d820fb1b12e59edca0c41e2279e","first_seen":"2025-04-17T19:00:52.900977Z","last_seen":"2026-09-27T19:24:16.437996Z","times_seen":66,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/KR/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"172.67.191.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.730Z","timestamp":1790536997730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:33:20 GMT","end":"Sun, 29 Nov 2026 11:33:18 GMT"},"fingerprint":{"sha1":"86:5B:D5:86:78:1D:94:C7:7C:25:24:B2:81:87:D7:51:2A:A8:25:0B","sha256":"3E:C2:D5:AC:08:46:77:A3:EA:7B:9F:FA:F0:02:5B:B5:90:60:B4:C2:5D:1E:30:3C:52:90:44:17:EF:4E:63:41"}}},"request":{"raw":"GET /KR/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HcUqRVUSJpP6gO6eBv6vA27iDIy%2BxoF4Ii%2B0dX3fPEJKJKWIKBYwiFIsTaYLZNBDTL4G1Iqugbv3k6XRw9oeUDTJ%2Ftqhc6pylTqobUzAmUne2kM7Mu2qd9mlnDDhMh4%3D\"}]}\r\nage: 74270\r\naccept-ranges: bytes\r\nlast-modified: Sat, 26 Sep 2026 22:45:27 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41ce1cbdd061ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2899\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2899,"size_decoded":3856,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"836125a3c0979ad0505b5534ac76a241","sha1":"92f3ef90348e323246b18c72a79dec6df9e28a65","sha256":"42cd9dbc89e6bed0b392f2051cf40fe3d7a913041bdfbcd4a9153cf20597f0b8","sha512":"c48a3acf823895a161515da15a223021af022cd699b0f8e70e24dede6503545e67cc1953fa841169758fae709c8be966971a8de08dae741f38d1912c9f94e261","ssdeep":"","tlshash":"2a514dc1231546902d63e5cfa2f5a6a3c0d8eb05af7c7b740b5f735a6303a0dc08ad8a","first_seen":"2023-09-27T05:02:22Z","last_seen":"2026-09-27T19:24:16.439069Z","times_seen":123,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/PL/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"172.67.191.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.736Z","timestamp":1790536997736,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:33:20 GMT","end":"Sun, 29 Nov 2026 11:33:18 GMT"},"fingerprint":{"sha1":"86:5B:D5:86:78:1D:94:C7:7C:25:24:B2:81:87:D7:51:2A:A8:25:0B","sha256":"3E:C2:D5:AC:08:46:77:A3:EA:7B:9F:FA:F0:02:5B:B5:90:60:B4:C2:5D:1E:30:3C:52:90:44:17:EF:4E:63:41"}}},"request":{"raw":"GET /PL/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kHMErBoIjLSNXrlOpsV0hBSkRxbwq2LD685YT90EWaKNX3fuuW0Yx0auvF5sLb4G54Zwlwwx50wR0zSEvi1eQhCBTou92bg5C%2BoA3sP%2BGns2iFV7m9aAsJ0BOW6Rlak%3D\"}]}\r\nage: 2431793\r\naccept-ranges: bytes\r\nlast-modified: Sun, 30 Aug 2026 15:53:24 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41ce1cbdd0a1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1486\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1486,"size_decoded":2443,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"71640cdb14bcad7af1a73269125716e4","sha1":"e52f0a80e8d2e44c1e1f2b1d173b83f861942bc2","sha256":"9fc37085d361c5e8a25b60a7a45e8659fee7e9789524d29fb23603c7cb5bcd3e","sha512":"d38e70d2079b3548c5b6d13285bcf2d50844c0ec3e5d23bc8b4554754c973c94504e9fdb90a0eca79e62fd9b3f5a32a02a1be856dbf4d661f4cfa8eae60dd519","ssdeep":"","tlshash":"3231f747e2502a668aa91943d72aa8a192a09241b23321dd7306b9f30e29e143b8e464","first_seen":"2023-05-09T23:35:11Z","last_seen":"2026-09-27T19:24:16.440106Z","times_seen":95,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/SE/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"172.67.191.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.738Z","timestamp":1790536997738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:33:20 GMT","end":"Sun, 29 Nov 2026 11:33:18 GMT"},"fingerprint":{"sha1":"86:5B:D5:86:78:1D:94:C7:7C:25:24:B2:81:87:D7:51:2A:A8:25:0B","sha256":"3E:C2:D5:AC:08:46:77:A3:EA:7B:9F:FA:F0:02:5B:B5:90:60:B4:C2:5D:1E:30:3C:52:90:44:17:EF:4E:63:41"}}},"request":{"raw":"GET /SE/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z%2Bdj3gsWAOOLit7dTePrNc6lfL0QuAodcJz8erC%2FrTg60USOkHkjKSHVJS2hz%2FEkRnGv57Ajsi6UqgWa%2FvprY6tpNSUTqBsd6uB8S68jxbPD%2B1YvQM3M0lkE5cFcNVE%3D\"}]}\r\nage: 2640765\r\naccept-ranges: bytes\r\nlast-modified: Fri, 28 Aug 2026 05:50:31 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41ce1cbdd0c1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1758\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1758,"size_decoded":2721,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"24c3c4c457f0d31c1fc69b1a477f7c3e","sha1":"056436cef84508cb2d36a2d494d891056925508f","sha256":"25710ee8ec0a1211648a4529a3e0b70fbe7c5e0d4b8f5207e29d8ebbec304afc","sha512":"7434d5eae9cdc4b68bcd70239b556ba4218503cc6f3b2bfc1206ac160abc3dd26cae024eb4e510e4c4a29610d4608570494bf7e4ee5d394890bbd130760e4adf","ssdeep":"","tlshash":"f93108c2dfb22978c09a95501c8f8591c464ae2d9c5c0a462a7fcd593b4ef09ccc10a7","first_seen":"2025-09-21T15:33:36.547319Z","last_seen":"2026-09-27T19:24:16.441309Z","times_seen":103,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/smooth-scroll.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.457Z","timestamp":1790536996457,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/js/smooth-scroll.js HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"59fe-6a13f15d-4d3dc7119a80fe67;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 6535\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23038,"size_decoded":6912,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"83b875e128da852fc445d67cadd009cf","sha1":"548def8d903e36120d0f66112d78aecf0fc48ad3","sha256":"401ad2d9a585405cefcee3c5dbba8b545e567cfa9c63eecb3cd403d41c1a1d6c","sha512":"42944a22bfd434efa21af9cc701f1fe9252384f2fdd0e97bb3d0b1141fc62f35f6256227c74b1f02ff2eb022fc6a616564b7f97618019a75d0e7212d51fd85f6","ssdeep":"384:aTF73DPRPKB443CLMacPMb89wuo/ao0ZmgGAeplFvtVbJ0+CFRqz6A:apDS445Pu89bo/o8rrblPmLMz3","tlshash":"b0a2b69955e32c6116af613e979f92c633744053120ad925380ebf982f8ca7453f3fea","first_seen":"2025-08-29T11:52:54.213434Z","last_seen":"2026-09-27T19:24:16.444567Z","times_seen":64,"resource_available":true,"data":null}},"time_used":1001,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":477,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/icons/icon_gift.svg","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.489Z","timestamp":1790536996489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/icons/icon_gift.svg HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"1f7b-6a13f15d-41003171aed11186;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2529\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8059,"size_decoded":2897,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"57e550e37bb9e51b282b9274b66aacee","sha1":"79bf76673aee98f171154ad17565822b3d5a14a1","sha256":"af417cd7e26259ce08aea30679d6d7af4544776ea81755696a0cb620efceec36","sha512":"f6c8fcf6b6ae770a296d9df47f2c221d14a312c1d728d031edfa64bc79ed796c237c015e9cbdd9d133de45c3ce21d0361010b824738d1d52845e20583afacd92","ssdeep":"192:w7UYXTPRByeU/+SZ/h2o/DI3LPMz2Lzhog3059KrsytPuWfehV:LTP3/DI3o2LqgQ9KrZPuWfKV","tlshash":"69f1730ad3b65bacf109b3fc8553d865a6c2af943d01d841d7d51c07e8e50ac1e6adcb","first_seen":"2026-01-04T15:47:29.64153Z","last_seen":"2026-09-27T19:24:16.445669Z","times_seen":50,"resource_available":false,"data":null}},"time_used":1038,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1029,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Dela+Gothic+One\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.754Z","timestamp":1790536996754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Dela+Gothic+One\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 27 Sep 2026 19:23:16 GMT\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":112305,"size_decoded":31016,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1981)","md5":"2f1ead62e0cc02775b77d1bfcad0fbf4","sha1":"86ee91e130f9d034e876594efb1baa8511f5b1cb","sha256":"a68b6d8804909ffd35664022b765adf6b71c5bed8d35ce5609df7df483bb3218","sha512":"1581afa2764951740684db8a2227f9dfec409205130b160e8e4309d207332f64f0c3a5a013cb0194c0b170464b5271ad292205246d90ff69bf0fed84cc905481","ssdeep":"3072:ZhlSLE9yvrk1b71sqD4/gig8EPgToYpcFHcBZkNBziKnyeSCz4Hd3mt8P9H/cx4P:ZhlSLE9yjk1bZsqD4/gig8EPgToYpKHI","tlshash":"0db32f90550749cffee32ca342dee924fe9960bcf981882d56f555c3ac1a09ad0c7b8d","first_seen":"2025-11-04T15:06:56.069895Z","last_seen":"2026-09-27T19:24:16.447781Z","times_seen":255,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":2,"connect":28,"send":0,"wait":40,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/BR/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"172.67.191.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.737Z","timestamp":1790536997737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:33:20 GMT","end":"Sun, 29 Nov 2026 11:33:18 GMT"},"fingerprint":{"sha1":"86:5B:D5:86:78:1D:94:C7:7C:25:24:B2:81:87:D7:51:2A:A8:25:0B","sha256":"3E:C2:D5:AC:08:46:77:A3:EA:7B:9F:FA:F0:02:5B:B5:90:60:B4:C2:5D:1E:30:3C:52:90:44:17:EF:4E:63:41"}}},"request":{"raw":"GET /BR/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PYnSuOA18U9tSkAjpd%2B1jKKjLD70Bbhvpx%2BONkCNasyC38SVK7sNlrWSVtTsK6%2FzITz8T7FW9ytRM%2B9qCGL9JiXoN3HZZBKXcOjuo7AdmXAJor3JEcVuvSKQqmQ27e4%3D\"}]}\r\nage: 1405298\r\naccept-ranges: bytes\r\nlast-modified: Fri, 11 Sep 2026 13:01:39 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41ce1cbdd0b1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3759\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3759,"size_decoded":4720,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"e26854e067d5b925f28a739f3097b9f5","sha1":"28defe9f7e2a03d40a3fabba6baee95223ef2506","sha256":"12067b005e7b54bb7dd68774dd90bb3cb419721bf4a05444713eb5caf679eb2c","sha512":"fa193f3cebbf980bfd84b022e6cb0a54b7237977a58dc4d0a29d0e4c9b8146c21ccc4dfd248fad4ec07a66b4f17c8f1803c20a97538722d41767ce9d9abdaecf","ssdeep":"","tlshash":"2d717ca9ebaf4d389cefc884b36e33d388f8a4607e294488850415575f9c1e6d077123","first_seen":"2025-08-13T10:25:19.490899Z","last_seen":"2026-09-27T19:24:16.44847Z","times_seen":71,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/countdown.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.459Z","timestamp":1790536996459,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/js/countdown.js HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"2732-6a13f15d-1bb2b8568857ca0b;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2800\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10034,"size_decoded":3177,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"0f6c5dd8bbfb6c6210f57d60996cdfbf","sha1":"b1f5b082e85f170b76bf80a29cc26e350457af55","sha256":"2e7ecf3488ec14b0fddd6a05766d507906cfb20fcc91e280639082cf4f1a6ef6","sha512":"4110ace34fb80c0384fdb538ecc6b33651e40cdca36b6213e2716a33e11d91b34489624ad0b302db8fc6c78ae4dbe6f626de32b274f5f4da55e33bf8cddeba77","ssdeep":"192:fQHe5prdiuBGpy4hiNey+SCGByoibvbrakjyPdebeDZnmHqvSsk4JmSXqSG95fqs:fTYpTvr9uDYqvSsk4JmSXqRpxUeMQZ","tlshash":"45221e0cb7f71191956b71290fae00082236d24ba48add597ceca3c82f2587c55fbfb9","first_seen":"2026-05-15T00:34:12.919088Z","last_seen":"2026-09-27T19:24:16.44963Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1003,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":471,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/images/shapes/shape_poligon.svg","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.479Z","timestamp":1790536996479,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/images/shapes/shape_poligon.svg HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"40d-6a13f15d-3bccf293bd21b713;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 551\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1037,"size_decoded":917,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b0f7074692c8514cd456fe0bc0e82fc8","sha1":"261525a9ee4990bee0e436be64f78e17ee25b5e9","sha256":"8e860805c2b295c4eb5230274c987cbc1b916f51a365e54b7db551a77640e68c","sha512":"82ba68d5a0187d0a532429b88c36c8b38ef92ebba5f2eaf6e76111bed6bc8d95469d0b1278481940f5cd2e7f8b39dc44e17b74c3cbcca5c81f77e5cec58a6c8f","ssdeep":"","tlshash":"5d11289d4364293ceaedd5ddd9700819e02d589335c4c3c8c5bb4e2d5f49481ed59eb1","first_seen":"2026-01-04T15:47:29.592314Z","last_seen":"2026-09-27T19:24:16.457713Z","times_seen":50,"resource_available":false,"data":null}},"time_used":1033,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1033,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/icons/icon_scan.svg","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.488Z","timestamp":1790536996488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/icons/icon_scan.svg HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"9a2-6a13f15d-f44529be0012e38;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 840\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2466,"size_decoded":1205,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9551bfa937e69e08f705b047d1e1f14b","sha1":"5452668c2f4618062d21af31fc58e9360c2102dd","sha256":"a5a222473ffd99892fdf9221a2b1d6ac182a517ffe4d88c7a1bc1a8b1fe917d1","sha512":"4d3f5946da889816e3af8fefabcf73aa3e0ef9ad0baa8e8f4191b5e6ae858e653906a9d66fed79b2917c2d2ab5d5cb6f7f4c8e4ad79534ee6276b1a8c0ca89bc","ssdeep":"","tlshash":"6851c074a62d823ca948237f3c34bc74884988cd96c5e5a4c092fd677de3c6e6da95c3","first_seen":"2026-01-04T15:47:29.64377Z","last_seen":"2026-09-27T19:24:16.462595Z","times_seen":50,"resource_available":false,"data":null}},"time_used":1030,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1030,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/icons/fa-solid-900.ttf","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.590Z","timestamp":1790536997590,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/icons/fa-solid-900.ttf HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/landing/css/fontawesome.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:17 GMT\r\ncontent-type: application/x-font-ttf\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"dc714-6a13f15d-26030901f08f4b6a;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 349307\r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":902932,"size_decoded":349687,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, 10 tables, 1st \"OS/2\", 22 names, Macintosh","md5":"e0edc621e4ffaa368d2e0677d3f137e6","sha1":"e374bb44d1834cf6eb688eabe1820aa5f7c827d3","sha256":"13da46f8e9749704bfff6b6f51a202c87facf593280dfde4127e5858c28aaeaf","sha512":"d60643fe87788d76dcf1cd941002ceef18390cac5eaa683bce2e2dbeaba684b6fd656a94187379b71105333590412d65b3466cc9c37cdaada7e009c1c9f8435e","ssdeep":"12288:ubjDzI8Psju4mzEetRorWpuJl48nnMtu9sHj3i8W0:urzDn4etRoqC4OMu9sHj37","tlshash":"eb15e6c7a3ec5e8fe4113d3883806d0e32d6663896a58265ffc7595ec0b88e4c765fa1","first_seen":"2023-12-24T21:26:10Z","last_seen":"2026-09-27T23:15:27.667864Z","times_seen":578,"resource_available":false,"data":null}},"time_used":636,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/css/magnific-popup.min.css","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.210Z","timestamp":1790536996210,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/css/magnific-popup.min.css HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"161a-6a13f15d-263f94e7ed33b4e8;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1452\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5658,"size_decoded":1835,"mime_type":"text/css","magic":"ASCII text, with very long lines (5658), with no line terminators","md5":"fa7b637b2e4db9da796d3743adb3be10","sha1":"fcee93aed608e27cb7fea3241826f77718da302f","sha256":"5bbb2011bb8aeb248b452130bf35325e2f2d66801922f46a4d81883f2fd15f1c","sha512":"8d2fd47014a1a89b226185d67a646a179e1dfb739040b6fc17c9f17fb5768b487ff4ced6832bca817ce1c123b02379280d6f352a0032c85781e63e1156c87ffc","ssdeep":"96:1+ASvI4RSTNbnPbtqtMaHMoB4hoFaZkV2CnYk:1+Fw4RSTNbPbtqt/ckaZkjnYk","tlshash":"0ec165d17b513129de26edaab1939b191327512bf30310efdbd36809c7cf488066b6ca","first_seen":"2023-05-03T11:45:41Z","last_seen":"2026-09-27T19:24:16.466288Z","times_seen":197,"resource_available":true,"data":null}},"time_used":1281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1279,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/main.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.467Z","timestamp":1790536996467,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/js/main.js HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"2667-6a13f15d-97d7fc26c596f5a9;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2491\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9831,"size_decoded":2868,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"69913065cf2522429d70236c535e7498","sha1":"5b3b241e864c8fd43018cd565525da9e3c724364","sha256":"56ba7352e2f66af261d31de8f7c895f91d0648250795619fce120a27ac96658c","sha512":"6e70b4752973530bff982f0028898d8feaea08680aa5df74fa0aa5a65bd8510fd44a7d82cee05478952502c850aee0701098b4640b41f5ccd5c886651d6405e6","ssdeep":"96:SdSoaku0CGJSW3rmn6zEK/mgFtyDYLDrZydPrxCwlaw+C7IfrQOGhjEYPLnXRsnx:Sooao8R6zCcDdyd9tI0d373W","tlshash":"451221092cbb207218b7f5b95b9f6200fa76500bad0add6175df01841f8972c91fe9eb","first_seen":"2026-09-27T19:24:16.46828Z","last_seen":"2026-09-27T19:24:16.46828Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1041,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":502,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/IL/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"172.67.191.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.745Z","timestamp":1790536997745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:33:20 GMT","end":"Sun, 29 Nov 2026 11:33:18 GMT"},"fingerprint":{"sha1":"86:5B:D5:86:78:1D:94:C7:7C:25:24:B2:81:87:D7:51:2A:A8:25:0B","sha256":"3E:C2:D5:AC:08:46:77:A3:EA:7B:9F:FA:F0:02:5B:B5:90:60:B4:C2:5D:1E:30:3C:52:90:44:17:EF:4E:63:41"}}},"request":{"raw":"GET /IL/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MQEifzuro%2Fp0njMb7VkJB1cyfH%2Bh%2Bb%2BNDW0HXzg1p%2BDgKhIIfNfiCESNx3XR%2B8DPrS754YGUrC2AuxsI7vNZu0EIedlXran7xiopZBGS6KJ9PZHy3RM%2BTrEqjewZ1eU%3D\"}]}\r\nage: 1405291\r\naccept-ranges: bytes\r\nlast-modified: Fri, 11 Sep 2026 13:01:46 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41ce1cbfd141ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1882\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1882,"size_decoded":2849,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"6f3395cbe433f80c4ec8feb871c1d039","sha1":"543c99a9acf757613db1d9d4c0c0f012beab1722","sha256":"bcdd419ff416ab7c99024a6e1618dcd5089c24e418a7e3b4ed43df648732e366","sha512":"0edb5a382b58be835dcbdda2584f10f8cb3c9726318ed7339632f3ca0f62b853bd0b22b39990295eea53881386f8f1acf0d6b3a350902a46fe64d883ae1f8a42","ssdeep":"","tlshash":"de4119422605fe7ec604b73174386ce8a9d75734aa881302edc9f5f96ac3d889d236d5","first_seen":"2025-09-21T15:33:36.590068Z","last_seen":"2026-09-27T19:24:16.470735Z","times_seen":83,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/css/bootstrap.min.css","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.198Z","timestamp":1790536996198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/css/bootstrap.min.css HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"38d7f-6a13f15d-70bc69c8f3b5d8f3;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 28351\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":232831,"size_decoded":28736,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"01d39a3c9cc8fad6c8a0494f0085ad3d","sha1":"3527a7e5451d532918834242b5b1bcf94ddb05ab","sha256":"0abb0459e4c6fec1425164816b32c797d83e552029dd8dd454824219882063c6","sha512":"7c7d8af016bb7ade213ad31a9d5c6ae4980553d7ac076519782a0b3e3806e1733d903a4256b73c340a6d11fe335fd0dadbc6cd0473ac4a633b78039ca4342290","ssdeep":"1536:O9YnIWbn98fdRfvO5wlP77O9P3EV98IsYRElV6V6pz600I41r:RnIw98fxV986I6V6pz600I41r","tlshash":"383482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2025-11-13T03:59:14.632044Z","last_seen":"2026-09-27T19:24:16.472221Z","times_seen":11,"resource_available":true,"data":null}},"time_used":646,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":323,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/css/swiper-bundle.min.css","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.209Z","timestamp":1790536996209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/css/swiper-bundle.min.css HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"4813-6a13f15d-9bd34a99b607531b;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4499\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18451,"size_decoded":4882,"mime_type":"text/css","magic":"ASCII text, with very long lines (18192)","md5":"eb21d0f0053cd0b33a1e2107e95156d2","sha1":"715460aed84071944bc26b7cb1e565f3ed107221","sha256":"79a42e24b867ff52d9e4d766b96d8882c83f18e7442408a41c4b09a043dffccb","sha512":"515f6e8f2331c98b9b3929026bcf8e1b3927275122940d7d58f8a63ec7b231c65a188a0ef25ee2369843d0cabfd11fe5364cc11fbd1a8b7b66babc405b4336c3","ssdeep":"192:UImUJbiKneSJTLdKSme+jeF474nQ7p/l2GZb0Q5RfufKDvAYfg5faeesedOJxX/A:UZUbeSJndKW+Sa0ni24tnWfz4cfQ","tlshash":"a88255a45350182753274f374bb1cbb9e97444c24f9389ae91c0ee58d7facb9132f2a9","first_seen":"2023-09-28T20:09:46Z","last_seen":"2026-09-27T22:55:49.043996Z","times_seen":5056,"resource_available":true,"data":null}},"time_used":1283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1281,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/icons/fa-regular-400.ttf","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.588Z","timestamp":1790536997588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/icons/fa-regular-400.ttf HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/landing/css/fontawesome.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:17 GMT\r\ncontent-type: application/x-font-ttf\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"fd648-6a13f15d-6ac8ccb45e456c58;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 426086\r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1037896,"size_decoded":426466,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, 10 tables, 1st \"OS/2\", 22 names, Macintosh","md5":"ea17b87c8b1e1b8375c946e7fbc08b2f","sha1":"f60919f77a3acf3ea49b93179b5655c072925728","sha256":"125529a32dde30a4f3a4fd484e2623d502cb70e994f43f50729c357e92149f57","sha512":"9d9a83862c222c690ab39775c1994364630327c4c61f96b7695fd7e9f09cfb87c382301143c6df11d9ad4bb3248566e96753bdf113df0856a7cdbd2c57da7a9e","ssdeep":"12288:7bjSKLtWScRCQk1DtvZnzBqaHXmNMGYgFcrVSq6CtVnNbKYiKXj9PFx6PF8W0:7plxnN33m0rrVSq3tJN+PKz16I","tlshash":"2425188263ed5e8fe8257d3882802d0e3395252c92a58373ffcb695dc1bccd58765ba1","first_seen":"2023-12-24T21:26:10Z","last_seen":"2026-09-27T19:24:16.39919Z","times_seen":177,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":214,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/NL/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"172.67.191.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.732Z","timestamp":1790536997732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:33:20 GMT","end":"Sun, 29 Nov 2026 11:33:18 GMT"},"fingerprint":{"sha1":"86:5B:D5:86:78:1D:94:C7:7C:25:24:B2:81:87:D7:51:2A:A8:25:0B","sha256":"3E:C2:D5:AC:08:46:77:A3:EA:7B:9F:FA:F0:02:5B:B5:90:60:B4:C2:5D:1E:30:3C:52:90:44:17:EF:4E:63:41"}}},"request":{"raw":"GET /NL/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2FIvSpwLgY1j2kOcuCfnHsfpy33oZygeQKwIPq7XzlLQ4KTqusFg5MFtM2Feu4lwlkvV1ueXOjhS%2F3UgF602ONqyTqEUJfEyVbzdBgqQjiaE6tLbQ4MugSBn439ZAEI%3D\"}]}\r\nage: 2612835\r\naccept-ranges: bytes\r\nlast-modified: Fri, 28 Aug 2026 13:36:02 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41ce1cbdd071ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1445\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1445,"size_decoded":2402,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"ed888c322fad6761169a4366cc5bc23a","sha1":"aba971fc23f8b42974fdb42739d0fd2444124ac2","sha256":"37afb8f75ec621dbe4fd2bbad826640607adc0f736f76dcbb729af25900d78a5","sha512":"08a7780de2c077cec1edb91e571165ae53aa46a63e7248771c2c12833ec877948184b39c41891d1a854d532e4ca33609611c42c5a8930b52f1b6c9b6683f5e55","ssdeep":"","tlshash":"d831b9d782ea2ebddd5fd07849e734401da7dbf4f98d90a2d3725461e1207509148f1b","first_seen":"2023-07-06T21:15:24Z","last_seen":"2026-09-27T19:24:16.474211Z","times_seen":87,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/NO/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"172.67.191.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.734Z","timestamp":1790536997734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:33:20 GMT","end":"Sun, 29 Nov 2026 11:33:18 GMT"},"fingerprint":{"sha1":"86:5B:D5:86:78:1D:94:C7:7C:25:24:B2:81:87:D7:51:2A:A8:25:0B","sha256":"3E:C2:D5:AC:08:46:77:A3:EA:7B:9F:FA:F0:02:5B:B5:90:60:B4:C2:5D:1E:30:3C:52:90:44:17:EF:4E:63:41"}}},"request":{"raw":"GET /NO/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BIxEKexF1YPe1PmD4tdMfxOuGWdKWfIGCbyqIqY9TzFB0IJLylbybbUfiZUcthdRQr9EIps3P2H3JARTCmEXS33X1ulV23uMRjSJR%2FdEGtDjfemlxwJF%2BNc240Ml4qQ%3D\"}]}\r\nage: 2551111\r\naccept-ranges: bytes\r\nlast-modified: Sat, 29 Aug 2026 06:44:46 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41ce1cbdd081ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1794\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1794,"size_decoded":2753,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"3dbe8de9a3ca4913aae01c04ffd448f3","sha1":"d2a32f5096705a129c09761e45e853a13ba05c12","sha256":"b2cadbfb405df91709ec0aabbe1dbe20f29d72458b3788496631a812449359be","sha512":"ee5b7cd504b35d1e8706a8579f249139190fcb2e4957748c26421e684160421e9202169ec5b4299e66398ec757fa30560c54f700f924a9fa5fdbd9adbe77463b","ssdeep":"","tlshash":"cc3109f917876856805abc2080857f59f1416cf323a19d8ac414af208b72674cb8f586","first_seen":"2024-02-01T03:47:08Z","last_seen":"2026-09-27T19:24:16.475367Z","times_seen":217,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/css/odometer.min.css","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.211Z","timestamp":1790536996211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/css/odometer.min.css HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"cfa-6a13f15d-10797aca11df2bc7;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 409\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3322,"size_decoded":790,"mime_type":"text/css","magic":"ASCII text, with very long lines (3322), with no line terminators","md5":"118873996cbbf7b1ff839ea78e6f8a6e","sha1":"f9648d7019bbe4e571cef69d34c3359e426e01c7","sha256":"6187a45d59805c9dcb970e0c4428e9f685202b6af87749bb0fa0aaec6840403b","sha512":"45200d1b41a544d9ed108cf5147eab5eb62044a4c2969c405695fd52d69e8d9f8e49874de4c1cf1021ee3f87d5a7c77de2e9cb606720e8a76fd9d6b347bdb959","ssdeep":"","tlshash":"546126291f60132863367406b6d91761fefcf9616223e59db31aa44bce03db9c399b07","first_seen":"2025-05-07T21:42:09.694284Z","last_seen":"2026-09-27T19:24:16.476042Z","times_seen":150,"resource_available":true,"data":null}},"time_used":1280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1278,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/jquery.min.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.445Z","timestamp":1790536996445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/js/jquery.min.js HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"155ed-6a13f15d-7240c14e39fdf32b;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 29739\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87533,"size_decoded":30118,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-09-27T23:44:19.603296Z","times_seen":197024,"resource_available":true,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/bootstrap-dropdown-ml-hack.min.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.450Z","timestamp":1790536996450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/js/bootstrap-dropdown-ml-hack.min.js HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"45d-6a13f15d-a9a1317c0bc59ab2;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 379\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1117,"size_decoded":754,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1117), with no line terminators","md5":"c898a23d06bf74e00839925781d2fb73","sha1":"8e9a0dc8a71408c3624aaa2e83881fe2b6d047ef","sha256":"0a409a8b0d90bf9ea2f5e4237171b7a141e2bb68a0877f131090fa9e6a774c9a","sha512":"4a5b53580cad8e509bfc3687649002329bd1dee480b130f4bc09484f13485f1eb1796c2180f106017acaa96e44d9dc8c14c271baff26df73e10e51975e7f1e93","ssdeep":"","tlshash":"99219bd8f35426ba01eb66ba16a756857ba768c8b04081383035cdde3b945ca2205ffd","first_seen":"2024-08-19T19:51:47.85669Z","last_seen":"2026-09-27T19:24:16.477364Z","times_seen":145,"resource_available":true,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":599,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.753Z","timestamp":1790536996753,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 27 Sep 2026 19:23:16 GMT\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1641,"size_decoded":1110,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"53febd1c7538061997231870f5c7c820","sha1":"48e8d3ae94114e5604d5721b6fcbfb7b34c9faae","sha256":"fa250da7727ec8c7fdf1e237845210bfa3c46b9301d2eae60ce8c11e1c06ef20","sha512":"c5a624baf633cc7a11b6d0f54df65a6dcb9879c2d583c184ce7aadd9eac322262af822da9fcd880f59f8c39d28d27cd2283fd56a2e52926d78e9f03d3eb938a8","ssdeep":"","tlshash":"f031fe81083bb054a79329c122ce7d32df0fa1d064446c74bafe2898fc66c6e5371b4d","first_seen":"2025-09-12T17:42:30.88715Z","last_seen":"2026-09-27T19:24:16.478029Z","times_seen":131,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":34,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/images/site_logo/favicon_1.svg","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:18.339Z","timestamp":1790536998339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/images/site_logo/favicon_1.svg HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"238-6a13f15d-330c8285f287d46b;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 301\r\ndate: Sun, 27 Sep 2026 19:23:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":568,"size_decoded":667,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2df59f89f6618f94fbda4d9434df0138","sha1":"3b90593d33aa624f65f11a1d02ecd628560a438c","sha256":"45e6b36f74aa4c1712feedd8f75c2a14b3dd6bb28a013e3fddc8b8ffc79c1dc3","sha512":"9b014cd31519646ff19da7518426f1edfb25d27999bd565b73a152336752c944036184ba44fc9e788d18f8416c59f38205a1c5eaba2a982aacc6a00f1a5796c3","ssdeep":"","tlshash":"a9f08b39d16ed49de90e80149b647476675c81e752848832b08eea682b188839d0baf8","first_seen":"2026-09-27T19:24:16.478713Z","last_seen":"2026-09-27T19:24:16.478713Z","times_seen":1,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/IN/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"172.67.191.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.722Z","timestamp":1790536997722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:33:20 GMT","end":"Sun, 29 Nov 2026 11:33:18 GMT"},"fingerprint":{"sha1":"86:5B:D5:86:78:1D:94:C7:7C:25:24:B2:81:87:D7:51:2A:A8:25:0B","sha256":"3E:C2:D5:AC:08:46:77:A3:EA:7B:9F:FA:F0:02:5B:B5:90:60:B4:C2:5D:1E:30:3C:52:90:44:17:EF:4E:63:41"}}},"request":{"raw":"GET /IN/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cUWYO26kToDO4azim6OOePSaHnjznT5NSgUXyhHoM8gweSoA%2B0PiALTvyA2XaA%2B6P%2BujXoIzxZHWRROy76oyUeKVwdiuBmSAtxET%2Fn0Eq1BpCSB2nNe%2FmuWhFFx61C0%3D\"}]}\r\nage: 1405296\r\naccept-ranges: bytes\r\nlast-modified: Fri, 11 Sep 2026 13:01:40 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41ce1cbdd001ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1992\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1992,"size_decoded":2955,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"0dcd490e639eec6657d6f1f7c1de7bc4","sha1":"ebb577ad52bb17bbea4e894eca614a39e4a0ecad","sha256":"e271e69b57ae9e9d548a8a885319943fe807ce4e3b61cc047d4fef46e082b382","sha512":"610e3c7d8cbc92e2929eb378459618569fefef9e6595fa3386064b46f1a77722f119a747612d8aac1f134adfd8896baa4d2d8336afe199360f1b95bbb9f743cc","ssdeep":"","tlshash":"18412a66103efef6a19e662029412740c9f8d94416aa34622c7074a11db2f5ebba674a","first_seen":"2023-08-04T15:07:23Z","last_seen":"2026-09-27T19:24:16.481526Z","times_seen":113,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/images/site_logo/site_logo_1.svg","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.606Z","timestamp":1790536997606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/images/site_logo/site_logo_1.svg HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:17 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"331-6a13f15d-391e6cc4fb39e7db;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 442\r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":817,"size_decoded":808,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b9ddfbf274bb9f93afc92f7d51642810","sha1":"04e1f8f9fd590d65c06f620ab2b9657994b332f8","sha256":"7c4f4cb59ff61a9bda26584b3911d9922ce4f0c073057e5615bdd7ccbb875198","sha512":"3ab99596749f188e6af071c9b936b2b410ad193c7db7b88a38a2897823bf682bef04584b889d3f311d06e3c8c4c335cf7109f87d1d9ad3efdce5564fc60fd760","ssdeep":"","tlshash":"ba014139d25d441cdb1a04149764357663bce9eb5a40cc30f04daa292b044c79d8bfd8","first_seen":"2026-09-27T19:24:16.483276Z","last_seen":"2026-09-27T19:24:16.483276Z","times_seen":1,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/css/style.css","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.439Z","timestamp":1790536996439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/css/style.css HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"2ec8c-6a13f15d-e4973303efc11e50;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 25418\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":191628,"size_decoded":25841,"mime_type":"text/css","magic":"ASCII text","md5":"aec8de151e5d6ccd9a05d71615f3f13c","sha1":"ac85b150e152bb98917f5ede5c7c87af5b129bd5","sha256":"0c35e4fde3304194891f78ae187660bc8c5356de28b7895e213d7b813b246ce0","sha512":"2eb192883c8a4c66a90b2a90ced1dab7cdb47144144b1fe9db3624efcba07f84ea89f7062680c85f191204eb9844b9540533fd8c9d52d2975426e218713bb134","ssdeep":"1536:4IaLnZqHaVG644h4Oc8owCoAmXz0n3RCcK+VOmbiEEi82Y82j2iNkgatBK467Myx:4I+G4hcnOD52R1iyyQaT9","tlshash":"9614839a91b151443927ed242bd91f6533688013d60eddf6baef204c8fc6be855a33ce","first_seen":"2026-07-27T05:01:38.583513Z","last_seen":"2026-09-27T19:24:16.4865Z","times_seen":4,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/cursor.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.452Z","timestamp":1790536996452,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/js/cursor.js HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"90503-6a13f15d-e8b18a65cd27d6e2;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 145836\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":591107,"size_decoded":146216,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (591)","md5":"44a0bcd846d78e4233e4efd71d22e704","sha1":"918045d5a50bf5b5c5255526b470cbbc6bf8eb51","sha256":"e40b7a5039dd2b3581b6bacc06b5f7899f7dd415b5b435992323e04fbf14430f","sha512":"8b6f3aacd9bab7e651edc910a030f32ae1d2c67a8dcc493bf52c759ab415a29efb7d3e017d3f41579cc94b8ad794628a8c739dc04fc2bdc5b3b198bf08223d9c","ssdeep":"12288:E6DsSqy+k3g5TJpL0JoWcK/NUGbIPN9yl9FcxwoD3NVyY7pv8M1iPKtUO:E6DsSqy+k3g5TJpL0JoWcK/NUGbIPN9J","tlshash":"05c4b6897ee611264623b1799fafa145f639c0131509ed48bc4e93942f9483882ffff9","first_seen":"2026-09-27T19:24:16.488574Z","last_seen":"2026-09-27T19:24:16.488574Z","times_seen":1,"resource_available":true,"data":null}},"time_used":946,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":349,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/gsap.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.454Z","timestamp":1790536996454,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/js/gsap.js HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"114c8-6a13f15d-c6604fc93c16b93c;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 26993\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":70856,"size_decoded":27372,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c2ef3c39a4b4589bd7282fc0daaccea3","sha1":"45ca3f3c7378d73434d33194859e1cc2504df732","sha256":"e3170dab622cbd411128e0d8c927c2697c98e052c938582a44bfd948a5e2b95b","sha512":"b591741e741d69d82efe848c612b774a56bd02e6c250c3752f7cf2046b46d977b04247c84e4550c835cd0921f185c2aa4143328b9e7c8ad56edab80edc71274c","ssdeep":"1536:i1BwKyDBpQvvtMOeqZ085JjhBhWDs06WPewGanr6:6wNQPC8vjhBhLLWPepE2","tlshash":"2663f9dd3292b42343565161447f0a0bf33ba998640f0918f269e5ce7d3c99d42bbf7a","first_seen":"2025-03-30T04:22:37.532333Z","last_seen":"2026-09-27T19:24:16.490923Z","times_seen":80,"resource_available":true,"data":null}},"time_used":978,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":945,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/js/appear.min.js","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.464Z","timestamp":1790536996464,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/js/appear.min.js HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"4f6-6a13f15d-4db772c88c0394cf;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 550\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1270,"size_decoded":925,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1270), with no line terminators","md5":"a5562f4c5ee9be56af4f1476f3ab847a","sha1":"dae0c59843bc215b0e194642c92961d569e6af36","sha256":"084fc308e9fbbf4b63b2b829f86d01f2cd391043794a15b56273a1e6396f9283","sha512":"0c28c749c77ccaab08e9ec3fe5d9b7d816143832f2082f7e165eea1a12cf01b46a773b27b702b4964de3f52c383b3166ec199a3ebef047ab0cd3428b1c9e1da0","ssdeep":"","tlshash":"7c21bbca79c6bca183fb702c562b72411171953f824249a36ceecdbc3aa6c513d23e5c","first_seen":"2023-07-29T22:13:26Z","last_seen":"2026-09-27T19:24:16.499993Z","times_seen":216,"resource_available":true,"data":null}},"time_used":1045,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1045,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/images/about/about_image.svg","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.478Z","timestamp":1790536996478,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/images/about/about_image.svg HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"c7bfc-6a13f15d-9b63fa84fcfd333d;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 609953\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":818172,"size_decoded":610324,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8c54cec57c62416f47664db321d8c3f2","sha1":"c3208d9e4376d88b32370990550abecc1c0f10f6","sha256":"615065dfc5ab575f809ca9959c6acbc54456b8bc8a80be235d4ced9674a90728","sha512":"f2b6aa93b110da6eb18d83f87fc7e98f8d37e54180524185756ea3cd9e6aba073de7d74de81e8fae0d0508c04d23f2550cf1b448def5581f23af382e27138ac2","ssdeep":"24576:PvtnYUV/BLwMBz7LIYEr+calGVj9ztDH+r:PvFTVJxmypkjZtE","tlshash":"f00523705a5fff3d81981d02e02b4d1833b89e86d8e6e0bda6cc624247bda505d6b4f7","first_seen":"2026-01-04T15:47:29.649178Z","last_seen":"2026-09-27T19:24:16.501114Z","times_seen":50,"resource_available":false,"data":null}},"time_used":1858,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1034,"receive":824,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/DE/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"172.67.191.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.714Z","timestamp":1790536997714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:33:20 GMT","end":"Sun, 29 Nov 2026 11:33:18 GMT"},"fingerprint":{"sha1":"86:5B:D5:86:78:1D:94:C7:7C:25:24:B2:81:87:D7:51:2A:A8:25:0B","sha256":"3E:C2:D5:AC:08:46:77:A3:EA:7B:9F:FA:F0:02:5B:B5:90:60:B4:C2:5D:1E:30:3C:52:90:44:17:EF:4E:63:41"}}},"request":{"raw":"GET /DE/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qEiJi5Cd1g1SlMTzB%2B9Dj104D12pcTTWeMp1JpqObWKU1oTIyxAul2pVAAMCvR8f%2BGpbIqkvc7lgtS%2BNHAS6sXKqTiDWrU2J3t4fCMHSLsBE4%2B3%2FgFgPYsxq9mrSvV0%3D\"}]}\r\nage: 2530660\r\naccept-ranges: bytes\r\nlast-modified: Sat, 29 Aug 2026 12:25:37 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41ce1cbdd021ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1430\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1430,"size_decoded":2393,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"c9610f0d2105dc26c2fc25fa4c41d190","sha1":"4daf82c03116497631bb4766f839f94943181394","sha256":"cd4d67344da86b113caf4fea73553dccf46be7ca0ffa1b4a72797ed01f195923","sha512":"15f0c6ff56595b0551185c3dcd7028aecc3dca07d0ee63261e91503dbdb01feae95dba567102a3f6c580b64cd1350479ef77259ecca24af91c86aceb759f13cf","ssdeep":"","tlshash":"7a21e9a697b41c792ae31a52633729ec8432cd1630260b6ee5090cbeba364da5f40273","first_seen":"2023-05-30T02:21:34Z","last_seen":"2026-09-27T19:24:16.503086Z","times_seen":262,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/FI/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"172.67.191.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:17.739Z","timestamp":1790536997739,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:33:20 GMT","end":"Sun, 29 Nov 2026 11:33:18 GMT"},"fingerprint":{"sha1":"86:5B:D5:86:78:1D:94:C7:7C:25:24:B2:81:87:D7:51:2A:A8:25:0B","sha256":"3E:C2:D5:AC:08:46:77:A3:EA:7B:9F:FA:F0:02:5B:B5:90:60:B4:C2:5D:1E:30:3C:52:90:44:17:EF:4E:63:41"}}},"request":{"raw":"GET /FI/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 27 Sep 2026 19:23:17 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IIus%2Bd3rxDeX5mHTwfkq30Twg8WoniqP1EU2lZ4T4vI2CI2TYJlZpbP%2FHYZL8JfhoQYspOhaT4Bz9UxD0r9dI4ZZwsRl2fKvJXJGP%2FjDNkAKY7jxI43eK5kY59xd6Jk%3D\"}]}\r\nage: 88213\r\naccept-ranges: bytes\r\nlast-modified: Sat, 26 Sep 2026 18:53:04 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41ce1cbed0d1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1190\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1190,"size_decoded":2147,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"47bde97962c0d30df66fc0595e561ef0","sha1":"894246008571aa056f93041daf1869084064a323","sha256":"d57e450eaf26c5f017ed95a0a10bfd59936aed144dd759d88beb95d63a7e11ac","sha512":"eda7ae025f67a81f6b6fb9d6c36823d0c38bb849abcb1aaaaf44ef7c4a19364662a262b5304590907702fed2d5ef91051dca55e84f1496d30d46b9fc2093eece","ssdeep":"","tlshash":"c821b4e332434db19d2e88322b3ad4416472c9b693986054cb289a6282e83d5aba718d","first_seen":"2025-09-22T18:33:21.474742Z","last_seen":"2026-09-27T19:24:16.505597Z","times_seen":66,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-27T19:23:13.693Z","timestamp":1790536993693,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.2.30\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; expires=Sun, 27 Sep 2026 21:23:15 GMT; Max-Age=7200; path=/; samesite=lax; secure\nbatarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D; expires=Sun, 27 Sep 2026 21:23:15 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-length: 4048\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Sun, 27 Sep 2026 19:23:15 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-27T21:23:15Z","raw_expires":"Sun, 27 Sep 2026 21:23:15 GMT","max_age":7200,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; expires=Sun, 27 Sep 2026 21:23:15 GMT; Max-Age=7200; path=/; samesite=lax; secure"},{"name":"batarpay-session","value":"eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-27T21:23:15Z","raw_expires":"Sun, 27 Sep 2026 21:23:15 GMT","max_age":7200,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D; expires=Sun, 27 Sep 2026 21:23:15 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}],"data":{"size":20696,"size_decoded":5278,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (855)","md5":"e7a789835558c32bd637b8915e52c014","sha1":"d8aca1fef5661d85c1fa9d04cf79d0094c6f35ea","sha256":"d4cc36bb12068765de1105bcdfba7ad1921b56b05d6d7895a814dd3afba5034b","sha512":"7cf3c1390e8ef0f471409bb78e8fa726a8f8e85b1bfb496c83c9515415a2c0a5bf5f73877e43b6c397ed6af1a695a104d4eb0d245e481f7f3d7a9629e7bc86bd","ssdeep":"192:ZtUPUpDVdmpCEV6u0Zn0PUOewryu0Yn0PUOewrKHPt5BlLt5cqlX:LO4LYuSU7wuzU7w+7rJ","tlshash":"a69256b3a4f5b1b20143c2e39a252b0dbea6a117d556d4c1f1ec0ad86fe1cebbc13914","first_seen":"2026-09-27T19:24:16.509636Z","last_seen":"2026-09-27T19:24:16.509636Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2330,"timings":{"blocked":-1,"dns":931,"connect":323,"send":0,"wait":740,"receive":0,"ssl":335},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/css/fontawesome.css","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.200Z","timestamp":1790536996200,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/css/fontawesome.css HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"9e327-6a13f15d-49d88144d21936f9;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 98727\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":647975,"size_decoded":99112,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"cd278c0ed2172c8125b72a8b9e6d78ea","sha1":"0bf715641c5bbbf370a0433d8beb28e4e148365c","sha256":"5adeb90bdfac657c4ac67a5fdfe31038c49beaf2281b13c3c97060356dfa32da","sha512":"f16b9e79c5f8fd78ac11dfe538c1cf373c24abc9f643a83059fe817ca758f2e4f4697e80795c3e9c6caec3c4dc3082ee384b538ee46c2a3e1cc26c3e6a4ee423","ssdeep":"3072:R/B7WqlpQhVEtwjl4BeuHnk7GIhUf4uUbTbW07voSbp2NJCudEp1VXTY9IBZCqEb:jgRRjrVDY9IKqkEO","tlshash":"0cd473e850fd3898834ab1de1503f160fb7d736e98474d4992e56dde69f2b088082bde","first_seen":"2026-06-19T09:37:25.174672Z","last_seen":"2026-09-27T19:24:16.511516Z","times_seen":6,"resource_available":true,"data":null}},"time_used":1291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":967,"receive":324,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batarpay.com/landing/css/cursor.css","fqdn":"batarpay.com","domain":"batarpay.com","tld":"com"},"ip":{"addr":"160.30.208.13","port":443,"asn":965,"as":"WEBHOSTINGHOLDINGS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://batarpay.com/","date":"2026-09-27T19:23:16.201Z","timestamp":1790536996201,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batarpay.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 09:31:52 GMT","end":"Wed, 04 Nov 2026 09:31:51 GMT"},"fingerprint":{"sha1":"39:56:78:0B:41:21:28:76:47:71:06:4D:64:86:C3:48:E4:46:92:57","sha256":"B2:6E:29:F6:35:02:BB:7D:3D:3D:9C:23:ED:13:7C:41:CC:F0:37:6B:47:40:4E:35:DE:45:78:21:0F:3B:BC:BE"}}},"request":{"raw":"GET /landing/css/cursor.css HTTP/1.1\r\nHost: batarpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://batarpay.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkI3TDRUazF5VTQ4L2xYL01JNDdEN2c9PSIsInZhbHVlIjoiTlMrWER4ajE5V1FFZUJndHMrZUFlWWpzeG9ES1V4UFpSeUNKUDlXeVl4SHFpTFBmdllnbWNXSlRhZjlZVWZMU3BlREU0a3pGaVpBSWhCMlhPTDVxSG02em5WQmtuQU1Ic2s4R0VHcmlpVzRwdy9yZDYxSEppSVJNUW9SdEV5WDIiLCJtYWMiOiI4N2I5N2VmMGM4YTdmZTAwOWVlNDAyN2Q4YWY4MDdhZDJlNTY2MDFjMjA1YjBjMTRkOWE5Y2YzZTdlNjgxMTFhIiwidGFnIjoiIn0%3D; batarpay-session=eyJpdiI6InJ6SGZ3cFlaVHQ2VDRQUTd6ZHI5UWc9PSIsInZhbHVlIjoic3QyUWxJTTlYYkdyVG45M3RrMFJjNGtYZnRPQXJ0QU94STlvb0d0WExzOUZjZy9TaXQxRXhnVUk2dlJpS2pSUXFwTjQ3ejB4aS9zWVpVRjQ1ZkNJWmdPR1NoWUFabDJJR2swQkt5NU9CR2szWFQwV005Z0tKUm1XNWFNamozczIiLCJtYWMiOiI1ZjY5NWVmZjcxNTBlNThkZTUxNDYwZDk2MjBlNDcyZTA1YTY5Zjc2Y2E2YzNlMjc4ZGI0Yjk4MDFhOGFjODdhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 04 Oct 2026 19:23:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 25 May 2026 06:51:09 GMT\r\netag: \"1b69-6a13f15d-1eec575ade5b16d9;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1143\r\ndate: Sun, 27 Sep 2026 19:23:16 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7017,"size_decoded":1526,"mime_type":"text/css","magic":"ASCII text","md5":"598a51d4efc48730d6a2b5c066c37a4e","sha1":"1ae33ad71e7ce94cd6d44de8043662fdf258fc7f","sha256":"c7b04061367a0b1c9cad4df79ac2c16e0f8b85f44a03eae055ae92fcfb8d42bf","sha512":"33b63b087d2bff94e55cd281b43e2d14d7aab70436dcf081405a9b36f5e0bc269a1d92ac4577b5326894d292f63aa3dc90ae9f0d78d7cf15bb380341919197cb","ssdeep":"96:x7SWUDnQ5CGdCJ3UpBbgFQEY5CSFT5ju5+es:eDn/tJ3UpBbgFQEHG","tlshash":"b8e18cb85a060185b53b980863ca6b25537cf113a547cdef7b83598d9fe37ac10d2763","first_seen":"2025-11-04T07:43:31.469419Z","last_seen":"2026-09-27T19:24:16.514656Z","times_seen":64,"resource_available":true,"data":null}},"time_used":1290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1288,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}