{"report_id":"6781942c-b695-4442-b485-a8c26331234c","version":6,"status":"done","tags":[],"date":"2026-01-07T10:04:42Z","url":{"schema":"http","addr":"bitcoin-hyper.xyz","fqdn":"bitcoin-hyper.xyz","domain":"bitcoin-hyper.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.209","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bitcoin-hyper.xyz/","fqdn":"bitcoin-hyper.xyz","domain":"bitcoin-hyper.xyz","tld":"xyz"},"title":"Bitcoin Hyper Official Website | BTC Hyper Layer 2 Presale","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bitcoin-hyper.xyz","fqdn":"bitcoin-hyper.xyz","domain":"bitcoin-hyper.xyz","tld":"xyz"},"ip":{"addr":"172.67.212.209","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-11T10:04:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"bitcoin-hyper.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"bitcoin-hyper.xyz","ip":{"addr":"104.21.53.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-04","domain_rank":0,"first_seen":"2026-01-07T10:04:43.237099Z","last_seen":"2026-01-07T10:04:43.237099Z","alert_count":3,"request_count":3,"received_data":12689883,"sent_data":1393,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Ramda","description":"","website":"https://ramdajs.com","common_platform_enumeration":"","icon":"Ramda.png","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bitcoin-hyper.xyz/ramda-0.29.0.js","fqdn":"bitcoin-hyper.xyz","domain":"bitcoin-hyper.xyz","tld":"xyz"},"ip":{"addr":"104.21.53.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5be90f3bdbab469ec246fdf3d6e6790a","sha1":"3680db748db544cc0167fc4a3a4b530e0352d956","sha256":"6a0f7c557bba4b04ef91f36f69feb37b79436201106fb6b0c341ea859ff317a0","sha512":"eb4c5e135e2f744c2e612b48ccedfb025510ca686d0ad098bd31fb7d67018e4f55987516deb7977006182cafed1a0163ab93ba41c98c9e813cf58ce2d0280384","ssdeep":"768:fnk+BcES7VV5DkV5DdRAo+D+99UZk3T/KjmUsHoo9Lqch9rlwXcnqYUK64izKPHB:wV5DkV5DdGD+Pf3T/QmUs5BPlo8d","tlshash":"4153c9da2806d0da9e6120cdd073f81af4680953ceadf063e6addcc5b81ef668457277","size":65752,"data":"","first_seen":"2026-01-07T10:04:46.3505Z","last_seen":"2026-01-07T10:04:46.3505Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-hyper.xyz/","fqdn":"bitcoin-hyper.xyz","domain":"bitcoin-hyper.xyz","tld":"xyz"},"ip":{"addr":"104.21.53.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8242598740b98c2e996ba89acedcc56b","sha1":"524fccd712caae344dba923da51bff968e3cd2c2","sha256":"c73f4524bfcaaa5d1b654a1b23e46ce73661423d8ca6ea71a3496e1b7849dd16","sha512":"beec20e1512d0e409cbd02843db86418260184b2e2db7ffe37de221b130f903ec48c6d80473b94892c0bba835e2ee27bb395d8156a33d3bde1c0ba766405898b","ssdeep":"768:mTc+xcG27VV5D4V5DdipmAK89nvu4G9wPCSSFBjSwjWcZRxRrUFcRqYU2G4izmP7:pV5D4V5Dd2mAK89nTG9wPOXdLtJf","tlshash":"7153b5d92816d0d99e5120cee473e416e4680e53ceadf163e67cecc0b85ef62849727b","size":62873,"data":"","first_seen":"2026-01-07T10:04:46.356549Z","last_seen":"2026-01-07T10:04:46.356549Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-hyper.xyz/baf4d04c-aa75-42ae-9147-fcbc563c2ba7","fqdn":"bitcoin-hyper.xyz","domain":"bitcoin-hyper.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-05-13T03:42:14.185593Z","times_seen":5084,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bitcoin-hyper.xyz/","fqdn":"bitcoin-hyper.xyz","domain":"bitcoin-hyper.xyz","tld":"xyz"},"ip":{"addr":"104.21.53.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-07T10:04:17.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-hyper.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 02:09:18 GMT","end":"Sat, 04 Apr 2026 03:07:54 GMT"},"fingerprint":{"sha1":"B7:1B:43:21:4B:02:39:91:E6:7E:CD:FA:EF:89:49:74:A2:41:A7:65","sha256":"EE:A1:D8:F0:70:01:66:1F:68:A7:E9:FE:36:79:09:7C:73:3A:A7:28:3F:90:ED:FC:4C:6B:BD:C6:AD:90:53:B5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bitcoin-hyper.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 10:04:18 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 04 Jan 2026 02:25:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SHPd6WGL3RiI0L0Uoh7oTPZQ%2BQVY9bCAwfM1fmCRZCiTLFP%2FXZ4%2BqVkj3lA%2FsRY3wW2AVR2WBiePKTFGx%2BNIwOVfcyZyVs8DmFYrhYAzQA%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9ba2a153aafe56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Ramda","description":"","website":"https://ramdajs.com","common_platform_enumeration":"","icon":"Ramda.png","categories":["JavaScript libraries"]}],"data":{"size":8540062,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (62059)","md5":"1e8197e1cb8770a71eada582e4e6eb7f","sha1":"bddd532078dffbc2d17a497453cdd26939085c0a","sha256":"4319bf24b2f8f11d678fc3f700167531fa042549fb496fa77c2089c138735fe0","sha512":"c67719ce9d7c28fea84abbfd5af99111442a26b584f8c2e07bf4c47fb2d45e14656f80093a058d5708ad486e789aee0f0edeeddf4f1c9f8395fdb814d0aed432","ssdeep":"24576:pL3MZfQ3wt/F8PwFvGrUbZzjAsE5HE/BU7vHE/BUP:aZfQ32CPwBuUbZVdF+","tlshash":"d02523b2e52578741eb49576b2de2e6e8f3408c981b675d6b00bf3c6138274053ee9ec","first_seen":"2026-01-07T10:04:46.347261Z","last_seen":"2026-01-07T10:04:46.347261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":103,"dns":81,"connect":2,"send":0,"wait":267,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"bitcoin-hyper.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-hyper.xyz/ramda-0.29.0.js","fqdn":"bitcoin-hyper.xyz","domain":"bitcoin-hyper.xyz","tld":"xyz"},"ip":{"addr":"104.21.53.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitcoin-hyper.xyz/","date":"2026-01-07T10:04:18.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-hyper.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 02:09:18 GMT","end":"Sat, 04 Apr 2026 03:07:54 GMT"},"fingerprint":{"sha1":"B7:1B:43:21:4B:02:39:91:E6:7E:CD:FA:EF:89:49:74:A2:41:A7:65","sha256":"EE:A1:D8:F0:70:01:66:1F:68:A7:E9:FE:36:79:09:7C:73:3A:A7:28:3F:90:ED:FC:4C:6B:BD:C6:AD:90:53:B5"}}},"request":{"raw":"GET /ramda-0.29.0.js HTTP/1.1\r\nHost: bitcoin-hyper.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-hyper.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 10:04:18 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sun, 04 Jan 2026 02:25:46 GMT\r\netag: W/\"6959cfaa-100d8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sdJvL3mhO6qZs3UqOhMw5G2XHcA5ZqO0yIB1q4yn3p%2BcQxX54pdf6GSh7RmV46tPYE471eOv1qBHYJtgI3Lmq2%2Bf%2FZcBKveRlJwowsBRBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba2a15668a956be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65752,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5be90f3bdbab469ec246fdf3d6e6790a","sha1":"3680db748db544cc0167fc4a3a4b530e0352d956","sha256":"6a0f7c557bba4b04ef91f36f69feb37b79436201106fb6b0c341ea859ff317a0","sha512":"eb4c5e135e2f744c2e612b48ccedfb025510ca686d0ad098bd31fb7d67018e4f55987516deb7977006182cafed1a0163ab93ba41c98c9e813cf58ce2d0280384","ssdeep":"768:fnk+BcES7VV5DkV5DdRAo+D+99UZk3T/KjmUsHoo9Lqch9rlwXcnqYUK64izKPHB:wV5DkV5DdGD+Pf3T/QmUs5BPlo8d","tlshash":"4153c9da2806d0da9e6120cdd073f81af4680953ceadf063e6addcc5b81ef668457277","first_seen":"2026-01-07T10:04:46.3505Z","last_seen":"2026-01-07T10:04:46.3505Z","times_seen":1,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"bitcoin-hyper.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-hyper.xyz/secureproxy?e=jscdn/getFile","fqdn":"bitcoin-hyper.xyz","domain":"bitcoin-hyper.xyz","tld":"xyz"},"ip":{"addr":"104.21.53.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitcoin-hyper.xyz/","date":"2026-01-07T10:04:19.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-hyper.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 02:09:18 GMT","end":"Sat, 04 Apr 2026 03:07:54 GMT"},"fingerprint":{"sha1":"B7:1B:43:21:4B:02:39:91:E6:7E:CD:FA:EF:89:49:74:A2:41:A7:65","sha256":"EE:A1:D8:F0:70:01:66:1F:68:A7:E9:FE:36:79:09:7C:73:3A:A7:28:3F:90:ED:FC:4C:6B:BD:C6:AD:90:53:B5"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: bitcoin-hyper.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://bitcoin-hyper.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"118aqk1szjfgq9hvitbd\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 10:04:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self', frame-ancestors http: https:\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8oEKYlcDGmnDB25gVnf8UHS0CFiE0GIxrQgqnIz7HcRozc%2F1EaepTy%2BRTqJjjeLrp4sntCQCVm0I%2FU4IX3nmhsXtNtVqp50NlpAhTKC%2BvSi7oQ%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9ba2a15fc8dc56be-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4081039,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ad218a557a8fe87c552b1c6c03891114","sha1":"7c3d98c807b9de956859386a39a1f1ee2c78eecc","sha256":"3bbef2013daf19e66ed5141695813668e7e6330052f6d0cce2d7b3b5ceb80d13","sha512":"38a3f9035b2b2b0441dd0188211b5500683592bc841417402d5c1c839c52ae042bcd0eb0b2e2c9a55ca8c3f279ab605848e0cf8d392749c2706c05896f20c424","ssdeep":"24576:Y2vgdfV/6oTD8qBHEAoTOiht6bHJ79AJPhP6InLy+0z:Lv8i4sOIGHJZAJPxt++0z","tlshash":"b82513c7606aa0c3725a483da6c11ed66c8bc0edbdc7467436c8e95460cdbf58aec7e1","first_seen":"2026-01-07T10:04:46.353843Z","last_seen":"2026-01-07T10:04:46.353843Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1054,"receive":461,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"bitcoin-hyper.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}