{"report_id":"8ec2fd15-d65f-4884-8698-e64aea8793fc","version":6,"status":"done","tags":[],"date":"2026-01-24T13:44:48Z","url":{"schema":"https","addr":"btchyper.claims","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"btchyper.claims/","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"title":"Bitcoin Hyper Official Website | BTC Hyper Layer 2 Presale","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"btchyper.claims","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T13:44:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-01-18T22:31:43.238988Z","alert_count":0,"request_count":1,"received_data":849,"sent_data":1100,"comment":"","tags":null,"fingerprints":null},{"fqdn":"g10696554090.co","ip":{"addr":"34.120.31.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-07-22","domain_rank":105599,"first_seen":"2021-09-02T07:59:15Z","last_seen":"2026-01-21T16:12:25.204762Z","alert_count":0,"request_count":1,"received_data":783,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"btchyper.claims","ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-24T13:44:08.280126Z","last_seen":"2026-01-24T13:44:08.280126Z","alert_count":95,"request_count":95,"received_data":13298059,"sent_data":42590,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-01-18T22:25:45.99612Z","alert_count":0,"request_count":28,"received_data":56243,"sent_data":41448,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-01-18T22:25:45.907302Z","alert_count":0,"request_count":14,"received_data":8483,"sent_data":25374,"comment":"","tags":null,"fingerprints":null},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-01-18T23:20:15.877736Z","alert_count":0,"request_count":1,"received_data":6706,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"cdp-cdn.vizibl.ai","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":4527465,"first_seen":"2025-06-02T02:50:29.208744Z","last_seen":"2026-01-21T02:38:43.422488Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":430,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-18T22:20:30.851037Z","alert_count":0,"request_count":16,"received_data":5801394,"sent_data":7367,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"btchyper.claims/","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"31211be96e98e572ae1d750a43f8ab8a","sha1":"0ff4789f1f0bcbdb545ef34e9ff7471e11f45385","sha256":"cac3e6c2e8e91a94795bbd2907abb7618f7f9db3ac104ce16692d58e5abcf18f","sha512":"25878363bb50d50caf6f9b2014949a0396a95c68b0c37be97e4b9c19d50db46436179e4e5bc54339905a59fc3f7607fb97c79f07bdc67d2c8e8fb773482e4e4c","ssdeep":"","tlshash":"5df0acd9f29730008f22b6848f6e0910b0d4f0d06281c931fd3846ab98dadcaf84d987","size":593,"data":"","first_seen":"2024-10-26T04:24:11.557013Z","last_seen":"2026-04-25T02:06:11.517708Z","times_seen":220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/web-vitals@5.0.1/dist/web-vitals.iife.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e91e35b53216d67bae84f3aea08f382","sha1":"7f8f5cb5e91a14219677db53f1fed4fe78ab8dc9","sha256":"59232ad2436efe87cad2003f8aa6e04897645ac02c48348c2014d0ecfacab6a5","sha512":"7094d98db8f38157ece5121b21074fb8f5c1888669f0f49f8516625fdf0ed821d6a583bf64d0722ae67fcf56f3ad5343ca9dad2e2e4ba468e3e3d200188b8811","ssdeep":"96:wsNL9WNChZ/40G5BYdQKeTvq3G8/MO52SjXyiyZt5G6UHuVuMcY/A4/c/N40rjpd:wZNChRaK6V8/MOpjXyiIGNouMcjGQ40X","tlshash":"d1c199b15b42663c739ec2e7f070a3533b2655d4b54644cdd12cbf821d1698222aaf7a","size":5851,"data":"","first_seen":"2025-05-14T12:20:44.462979Z","last_seen":"2026-04-25T05:41:37.918863Z","times_seen":1907,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16835508600\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfe560430970a82ab6d641cdc08fa2b9","sha1":"9b24a62697160cc2efa877d073775bef11be7c5d","sha256":"134088a75da0ceb81c1129d74951dfba3a3263f6738361dcce4c9f60b2298b91","sha512":"6724d82207707eb0e7d6f1862c150af0ddf469edf0794da5d22430564ee8e385128123040fb8ec33b12b143ea35d56ff00066e561a17cad11d280be9061d13ab","ssdeep":"6144:YJmMvPgQAxJ508RYoeXDIItDmlFldbKKCY5dqmQi3I:cmMngQAxJ508RYPIItDIdq+I","tlshash":"307408cd77d6706683a3a478403f114ba17b6a92f44cc899f186d8e42e74aaa4177f3c","size":345390,"data":"","first_seen":"2026-01-24T13:43:29.385594Z","last_seen":"2026-01-24T13:44:59.957534Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"264f4dc495720a518c0506a87ddf16fe","sha1":"9b6f98694ca972189f6990d872768ed41917bd64","sha256":"55e11e5766f9d6f9203c2673bd74ed8b8893af024ba3d400ffaeaf22c35dfcc3","sha512":"2ba810af6e22d1d60be218aa9aa080882ce262a1655648f6f53535652de0124477e5b37a7bf253afa95fe5524bd73efae8f6343395b83df544b03d87f67e53e4","ssdeep":"","tlshash":"e0f0fff3a8c6221c9bb107eb5808e84ab09708cffeacf087a83a440074845370ab5a1c","size":633,"data":"","first_seen":"2026-01-21T02:38:48.727279Z","last_seen":"2026-03-29T15:46:36.859259Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"29a506eb60167c40bf2c25a7a793ff23","sha1":"e14c1f200bc3a50fad0c4453a13a9758f079e69a","sha256":"95a4b01a2c7fd9f4b19acada3e3f287ab860288a50c5b5b9756a9c9300014d09","sha512":"46d06dbf8177418adbddc0632ba37aeef4c37c081c40ef3600eab6c44e7aefee5049bfd6cb60083adf29b972dcdfc6b7fdf2922e03b7324a0dbdf73a81b7f0f6","ssdeep":"","tlshash":"5ef0a31eadc503a857a411c487f7de1db19b215c941ec665c3c5c8997105dd3582139c","size":448,"data":"","first_seen":"2025-10-26T00:58:59.30549Z","last_seen":"2026-03-29T15:46:36.864274Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-04-25T07:55:31.460319Z","times_seen":253242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-TPPZP8J6","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd8466282857f4e846058c6c49f31a6d","sha1":"b70dfc837896e29f6e8017daf2206b3c2c2dd3d3","sha256":"27ff0b570c65b5902e503da23ad97a469d0f8325acd006d95f56175122cb31dd","sha512":"da609caa39123817643aff7df98c655f1c943d33f116a18bb4cea1538a21bc01a26cc32396e6a6ccf757a98041705f1e5aa54b6b2b1b81c802b408237c27cf17","ssdeep":"6144:EvjKpRUlrJmQvKHQAxJ508RYoeXDIItDmlFldbKKCYvdq7wiDivE:iBldmQSHQAxJ508RYPIItDwdqYE","tlshash":"eea42acdb7c6747ac3a2a474903f114b663a29e2b54cd895f089cce42e745aa1133f7e","size":465330,"data":"","first_seen":"2026-01-24T13:40:10.994965Z","last_seen":"2026-01-24T13:44:59.916895Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16834301606\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"02cca74291c5b62cd0c72fbd48dd91fc","sha1":"fd019464121458c2a972689e1e79efda98e28dab","sha256":"f2b7e06ada8d38e040377621ef63ecd14d268a098a12c803d2015fb21337732d","sha512":"dea857f72cbf1970ea161487cc9647181d4ce6f1be8c097d21fcb25e87c5fd0f11de89309e1ed69a10cbce5bdfd224c5746c0a7f8b471275bd9636b07c2b81a3","ssdeep":"6144:OJmMvPyQAxJ508RYoeXDIItDmlFldbKKCY5dqmQ0e6:mmMnyQAxJ508RYPIItDIdqn6","tlshash":"a87419cd77d6742693a3a478403f114ba17b6a92f84cc895f186dce42e70aaa4177f3c","size":354744,"data":"","first_seen":"2026-01-24T13:44:59.909191Z","last_seen":"2026-01-24T13:44:59.909191Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"414b872b35a6403ce4d5d8084cd77859","sha1":"ad8744ef9c77f78de60df42685505ed4dfac3869","sha256":"6c1e94621eba1768237df909cbac41acc5e5ebfbd0abf55e5dea3105da894378","sha512":"a3aa2bc6288f0568b615baa8f7eb4cf009cdc9eb3f10a37aa64cc64c17e56052e4991fe222f98e82b120b43240da7ff091d8e39dc16d53684ad317041e17ad88","ssdeep":"","tlshash":"fee0f1ddb3433404ce72b4408f2f1510a4e4e09011024e23aa359d9b6819ccff0ded83","size":395,"data":"","first_seen":"2024-10-26T04:24:11.525535Z","last_seen":"2026-04-25T02:06:11.496536Z","times_seen":180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-EMMVCEKS5X\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c77c980cdb3d1ea105de54a17104c0b5","sha1":"5b5c8f1eba7017ff5c651d78f33cd01d23d87f88","sha256":"af38772eac993533702758bb977d3f06899e6e2fb2eac67ee2ae8b946d1531f9","sha512":"35f7e9ef36c4051c60c225ed14c89e2f6c57afdd9ae61ab693a70f5b259f79bd59033092c42f22a66ba24b93076876aad5d81a79f701d09cf088c7b370d4190e","ssdeep":"6144:7XJmMvkbBQAxJ508XYoeZlzlFldbKKCYTdqb0NqB7Xh:dmM8bBQAxJ508XYNljdq3h","tlshash":"c99419ce73d670269396f478502f118ba57b29a2b45cc89af1c9cce01e74a9a4137f7c","size":437645,"data":"","first_seen":"2026-01-24T13:44:59.908004Z","last_seen":"2026-01-24T13:44:59.908004Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16834084957\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c63b6612595ced5847d99f830f5cc53d","sha1":"7ecc59b25d5b9ab47a054054f8f31084976e6920","sha256":"e90425dcea6f6b2fcf75a5bc3f7218a6bdce8dfe775ff8517920c2cf23e8e966","sha512":"4cf1a0dabd024be793e200aea017020356b08f0e12bf81881f0e6f98ddc3799a568d9d9dd54691103592647e1d2f51bbe2b478ee52c57b951dc54f71ecdeaac3","ssdeep":"6144:AJmMvPgQAxJ508RYoeXDIItDmlFldbKKCY5dqmQi3I:UmMngQAxJ508RYPIItDIdq+I","tlshash":"427408cd77d6706683a3b478403f114ba17b6a92f44cc899f186d8e42e74aaa4177f3c","size":345410,"data":"","first_seen":"2026-01-24T13:44:59.892467Z","last_seen":"2026-01-24T13:44:59.892467Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16834013568\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ce47ec0795b12942d462693d7b4bb88","sha1":"0dea62a29bc9f229ce76aa1234fbe63120928c55","sha256":"7d23cf369858e20ddd207b7aca96f27fff5d550169d9f00a60da197b89749a35","sha512":"b1ea4e9d6fb28b854705f3f5542e2462a48cf534e0f3035c2f6b8cb7c7cd7c75c3cc9697309ce10aecc4d058d10b876947ddb416d456d2dca1ff0358dd76889a","ssdeep":"6144:XJmMvPgGAxJ508RYoeXDIItDmlFldbKKCY5dqmQi3I:5mMngGAxJ508RYPIItDIdq+I","tlshash":"117408cd77d6706683a3b478403f114ba17b6a92f44cc899f186d8e42e74aaa4177f3c","size":345416,"data":"","first_seen":"2026-01-24T13:44:59.901212Z","last_seen":"2026-01-24T13:44:59.901212Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-17159929999\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9d9fe0895e315ba2a61cfcbb2bb7852","sha1":"8efbaeacacfb425f802c76aca39a66f97af62441","sha256":"3ac69a8f91e16a4b7c8b14da500f91edf40fa68a2ae3e124f3db280b914842ba","sha512":"d81aa0cb24f4584e7726323fea2115d2d1bd0b7cc45f52a2f9887c51cc0d4aa1ddc2cd389baa11f0285174ff38d082fc079966fe786fff5bb31efaafa3ce0149","ssdeep":"6144:0JmMvPgQAxJ508RYoeXDIItDmlFldbKKCY5dqmQi3I:ImMngQAxJ508RYPIItDIdq+I","tlshash":"107408cd77d6706683a3a478403f114ba17b7a92f44cc899f186d8e42e74aaa4177f3c","size":345410,"data":"","first_seen":"2026-01-24T13:44:59.942964Z","last_seen":"2026-01-24T13:44:59.942964Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16873008334\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a76a2e9fe6070072c6a75dc0875b222","sha1":"921789f692a0f12c835012223b3238b66e28292a","sha256":"2b58f45a56c7395371e89ae8668ee4452483df5d84d4596d59417382bab05643","sha512":"abcdbfff5d95708b1ec3fe9f572a3f700b7f2a3bdb80dbbe8d2bd1630720db942bd73fa22e91f322f76520b1ad56eaa9a69001c87d27655cb6ffc09e9e3edd8f","ssdeep":"6144:kJmMvPgQAxJ508RYoeXDIItDmlFldbKKCY5dqmQi3I:4mMngQAxJ508RYPIItDIdq+I","tlshash":"847408cd77d6706683a3a478403f114ba17b7a92f44cc899f186d8e42e74aaa4177f3c","size":345390,"data":"","first_seen":"2026-01-24T13:40:10.923311Z","last_seen":"2026-01-24T13:44:59.917711Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1672e847a6eabb93b76775169a3f70b5","sha1":"6634a57c5dc1c7ed13f738b1d344cb532c9118e1","sha256":"c57d094d487f4dc0b44452e3951f8c137f1eb22e14dcf99414fc59ecf46a222d","sha512":"8032827da463edf0b45443e80d90e52c7e0468c29ca5b5b3eed01519f231c038b7c31e469dafc9949f88af260bd50034b1a71a5649d6318aab1b544e2e87e571","ssdeep":"","tlshash":"56f0590d9cc007a447b410c492bbef1db29f2158c82d8661c2c284857205a9398263d8","size":497,"data":"","first_seen":"2025-07-11T08:08:11.943184Z","last_seen":"2026-03-29T15:46:36.86249Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-17524131935\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e55d2bf81e9096686986f03ae807e2c","sha1":"7b88115be9e010d226bc1956dec4e382878aae1e","sha256":"a47549f5e73a2bc6b4ece285de03531ae8c21f88e87ddedc1dac326efdd2ccce","sha512":"5c15bcdc8a650ba89cdd1940549f9ea95dcb6406f33bfcc05e7325aa22ce65ef43b7b70e50408db8150bc9edc928905ae46461fc6ab4b3be6a0a747932b3143b","ssdeep":"6144:NJmMvPyQAxJ508RYoeXDIItDmlFldbKKCY5dqmQ0e6:bmMnyQAxJ508RYPIItDIdqn6","tlshash":"3f7419cd73d6746693a3a478403f114ba17b6a92f84cc895f186dce42e70aaa4177f3c","size":354693,"data":"","first_seen":"2026-01-24T13:43:11.330885Z","last_seen":"2026-01-24T13:44:59.928685Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g10696554090.co/gr?id=-ORtyZ4EX9WL6_BCPynV\u0026refurl=\u0026winurl=https%3A%2F%2Fbtchyper.claims%2F","fqdn":"g10696554090.co","domain":"g10696554090.co","tld":"co"},"ip":{"addr":"34.120.31.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"557e823b66d04d0f5c11b841ef2c661d","sha1":"c7f51ac61964ee96812691e47725da4c44d66b02","sha256":"0b0da5056417904856da4225a1dff25dc012a118530f86903061e7740ead7a64","sha512":"1276f0d37548a82bf7b4ed6820b06e4e30d39a02709afa1978c9669ed6807b256df484e1de6d6a358d9b9168394c4e8b5cc382bbe40d3940d379864e6144da7a","ssdeep":"","tlshash":"b1e048faf1e922117aa3550c2716d80628f39163350e11efd1e01369bdf47dcc1163ca","size":352,"data":"","first_seen":"2025-07-11T08:08:11.891862Z","last_seen":"2026-03-26T00:37:22.466624Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16872869822\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"79eb3a329f9179679e32dbe79344a295","sha1":"cc0b8b47522ba85480926408970b23abf024a7e6","sha256":"ca0dd593fa5cfa282294b623b508c2c802e7927541379de555c0def1b73d4a79","sha512":"c588120daba1fc53cfeeceffde5397c3c8775aa1d2306b61265447b619ad20bccd802f1b8f2d3601b3b894359b852d8f052d51987beb9758d2589be40c5dd6d8","ssdeep":"6144:XJmMvPgQAxJ508RYoeXDIItDmlFldbKKCY5dqmQi3I:5mMngQAxJ508RYPIItDIdq+I","tlshash":"cc7408cd77d6706683a3a478403f114ba17b7a92f44cc899f186d8e42e74aaa4177f3c","size":345390,"data":"","first_seen":"2026-01-24T13:40:10.953077Z","last_seen":"2026-01-24T13:44:59.933179Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5afea1031817eb191f7f440580cbcf31","sha1":"951e1d8064c5ba43c14409b7a95bdb3313e51182","sha256":"06d91423ee9a36cdd62ae0c54b7b01c2ebc2d1c4c9c74d5fdc8a817246d7fc8d","sha512":"b9158d9bd2ad743eaef1c0e6c5ff12a3fa2284d804f07b4d6ffb0079dd7bfab4400aba2e8902271bc0b62d72751bf8ab8a3bbfcc6485ddfaec8fdfee20f0abc9","ssdeep":"","tlshash":"fbf0270eacc103a897b411c493b7ef2db2af215cd41d8665c7c688967109a979822398","size":481,"data":"","first_seen":"2025-11-08T13:22:46.792576Z","last_seen":"2026-04-09T19:53:53.191142Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a74af2888d39b73fe06277f42cbeea08","sha1":"453e392ca1144ba9f6d85384de48aeb7ba85dd62","sha256":"3ae81bbd80123983f530762055102a706b5fc232b464ed2073ada458d9f04481","sha512":"f0d9c4cf3a15175cf3e6d87deb1a467c548922666b06c3e93c42a082d21d152d0d4b3c03a0d42be9d51352d44e9158f5100486a00081b75bc3e15c6503a0d433","ssdeep":"","tlshash":"9be06d44ba68e44192bb3514065f73110031254092015ca9c3f17c36a8f8fc6b1d77df","size":367,"data":"","first_seen":"2024-10-26T04:24:11.554525Z","last_seen":"2026-04-25T02:06:11.497137Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16846608297\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b88701cf3e631cd4115f9af10fa8a84","sha1":"f14d6188fc7a8c292a5093df4d6b86a428968686","sha256":"a29cfeac30564718a530c8f62d788b3c355320ff3a8e1dcca3c57141834f48fd","sha512":"0847c12b5bb0980fcd6924ffb945fb5551e3705ba81d85dbe9d8e4a623d99373d4af98490c6963b1a244351d37616e0f00bb5322308b204886d2ef7d5fd3023f","ssdeep":"6144:SJmMvPgQAxJ508RYoeXDIItDmlFldbKKCY5dqmQi3I:qmMngQAxJ508RYPIItDIdq+I","tlshash":"ba7408cd77d6706683a3b478403f114ba17b6a92f44cc899f186d8e42e74aaa4177f3c","size":345410,"data":"","first_seen":"2026-01-24T13:43:29.352263Z","last_seen":"2026-01-24T13:44:59.882445Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"btchyper.claims/c0df12a4-5801cf513ff3.js","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /c0df12a4-5801cf513ff3.js HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:41 GMT\r\netag: W/\"6952a7c5-15979\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pXZqQgkd9eoCkpInnJ3EHJmdqh1iyQDoFY3lagQbHESF1og2tYVNiE9xUCVzwWX%2FZYxKJYs%2B3WPBJ%2BSHys8wNl4pmFzrOAx71IL6iBs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e0db41b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88441,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ad03e39d8d2f725a43d8d8749a40d0f7","sha1":"2df00dc1696523a81c03abea5e5fec33018249be","sha256":"1f173e2018d6845d10c1703522f7543eda32a80ded0bfda252e5b8bef3e1f449","sha512":"820dd2ef6fe7f4154c11d47bdcc99aa9d691205b28303bf0e6870fed404685c1bebfcaece02f785d8d56f6ea600c844f3cb68dd8b16bb85111547e6fa6a52ba9","ssdeep":"1536:05sVosg1sVosgPlVAX1t/ZEDjJKw9mOrfKl1Xd0CT4fLDjw:05sVosg1sVosgPlVAX1t/ZEDjJKw9mOg","tlshash":"e28350d8990bd0e48e1522ded477ec05e4684923cdacf1a3ba2ceed1741df62848767b","first_seen":"2026-01-24T13:44:15.046251Z","last_seen":"2026-01-24T13:44:59.856011Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/card-image4.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/card-image4.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-6204\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4IdvAKnSoEyY%2BatCvTLJ2xtTdO9bCq8q2CPlHOE3erV4HO1GGJQUUD%2FugXQLguXHmTAkv%2FY1r3Z5jEZtt7kk7wfZptTg8lyO9LeFbls%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e12b5eb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25092,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a29cbe6c1857800e3fcc83d3fd780aae","sha1":"c612458108d791397cd252e49cd1b31e283098b3","sha256":"dd81a9bfad272b860bccad00c8f138488df9495e56d08df9ef151d9c00037683","sha512":"6786e74663a3e897ae138ed90d88a4bf4ce9dbbca3a6f0e0f3349e5122a9303b911a69213d53a404159706d493cadf0d75b2e41f56c1ea0cc9d56c12b23e82fe","ssdeep":"768:MneQ40L95yo1OhjQaoWc1+nXNAcjDvs8oJWAuD50X:MeQPyokhjjceXNvoJWAuD5u","tlshash":"5ab2d070a579e235a65344a69342159dd5bbf0691c28cd230cba60a4c5bc9ceafb0ff4","first_seen":"2026-01-24T13:40:10.941017Z","last_seen":"2026-02-25T19:29:10.015759Z","times_seen":8,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/spywolf.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/spywolf.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-8d4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5xpZWtaj9JInvf2gVF02gGhYcVJY8YyGoBN3bUpMVByXYTPhD4F4YZ4sBhIIpM2DmhWSMT4Zo3yx99ejZmG3V5V0gU7F0eNKy07613A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e0db44b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2260,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"76d119a66def0b8ea2585a58699a8e19","sha1":"440492712d2654aad1d01aa7b2a62a035481c9c3","sha256":"5d2f9f08164e0854f41f34ee63028b7bf90869314e42553b7bc41f31ddeda479","sha512":"2ebe89af1d5076e0f027e7e94de2d6bfb75f563bdaf7de705df2875104abc871c6af822b74846e324f0ec322dca917ccefd3d0e26e7d76d235c95fda3699eb13","ssdeep":"","tlshash":"19414cfe5110917ce40e1406096f3163fba6b0e01da96d8271a90deb0630e63d89f867","first_seen":"2025-07-13T15:42:46.523683Z","last_seen":"2026-03-30T19:18:20.885057Z","times_seen":35,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/speak.gif","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/speak.gif HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 19246\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: \"6952a7c4-4b2e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HSMNOQhXKAWVELtB%2BpR3u%2BRGYpPAgXy20k4ncHaOzHFdpSvxumTEZBhCwPA5lmEFpop8e1NBg6Ofs97easWUg1lX7%2BUa5NMhEqozxHs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e12b61b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19246,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 250 x 250","md5":"be53947779be5b2e5d164f886441be3d","sha1":"cfd0f7ac9a26e3972d3ae180c5127027f51d1ba3","sha256":"d4a8c3fcf58e8a1a551f31ba7379ac38f5861f3265dfb2827763c42858c0f38a","sha512":"16575ecb21403e476e76e1c7d65b844b978931826e8a25ab2f0a5482010784c9c835d94470380a84b322ed3a27c2e0b742be515cbf862c059939eeefc3a578fc","ssdeep":"384:JQNmnXA9NIAXUpFtbqREsPPw5QhYLuaY9NIAXUpFtb3prvYlJRnBxUh0:JkmXnAatEnw68uAAatzprv4JRByS","tlshash":"6a82cfeea0440505768c2a2e1ea20b42d342868e8cf7dd7af4f5e83b957dc3f8835587","first_seen":"2026-01-24T13:40:10.899389Z","last_seen":"2026-03-21T07:39:27.235936Z","times_seen":11,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/box_7.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/box_7.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-151f2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9JDjMPYNxNTIJN4G4eCeNeqXOAEy7Ygny76yQ2rj7cPN8%2BIM0Jff2cMjBs89eh9TFnhblJUJ1Omp0sfXirMSOJp5OIYg%2BTqgnKvdKRc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e13b6cb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86514,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"97eaa51d3ed628fd5e4f71b2c1399c44","sha1":"28ee1910150931be748ea06e7d513aa2ba4b0062","sha256":"4c205f4c0676c9f36247d44bdcf82be02d3f4417858bc31b3f85dac1f0f570d7","sha512":"f393777339b1ab360e47887cb65d7062af5071ae848aa99165e3b6cf2e125f21885f6b98b4b1f58eaf121c01a6cfc6b48ae8aed5fd2d07649ca6b99359fd9b80","ssdeep":"1536:r+7TK2Cu/kRUwUDpzIAcVB/VlGzeHORUtedtQxb6ZzweMRr8f2Hu4WlNdFDj29nB:VuQe6AIbl1OUtRqzwekAsWrd5MnmcZ","tlshash":"888312299d94d9c5e7db033be7368693051915acc4346bdc2f23a23a27ec740b86c7e5","first_seen":"2025-11-17T23:01:41.528275Z","last_seen":"2026-03-21T07:39:27.247885Z","times_seen":6,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":265,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/step3-bg.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:15.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/step3-bg.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:15 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-85e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xqTax5eiyQup2EZ5bXhB1DHK7qKHG7XkXEwbSvLcpn1%2F8MyOoi7pfhakDGU%2BcEga0cYBnMvHcKh1igeL5qrwQxIBDzCA49Bsm3sbLjU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e84bafb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2142,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"579c061075e7fae7a32749bc68cf5cae","sha1":"739120f50431a8d0a37b45dcd16395aa019965c4","sha256":"1763e791b76bb137b9f78e45ebe44c911664ca2876d3a5bd1c9c7cae0d0256e6","sha512":"24723b57d8dbff7c85b70e512e3c18c7cdcbc97977e79542070a940da54224285e5bc32b255e0696bf839e200f7053a551608d5d615eaef2f06bfc95c2ecd8d4","ssdeep":"","tlshash":"7041ea2e231e13b5f85c9df450903b2a93f89f55cb57212985c8c6d62768cccbcb9045","first_seen":"2025-06-30T15:15:01.984482Z","last_seen":"2026-03-30T19:18:20.870016Z","times_seen":54,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/js/chunk-X2BTKZYD.js","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:17.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /js/chunk-X2BTKZYD.js HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/js/main-B6NXVWFN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:17 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 49\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2ByP55QzYViXmml%2FFuVkyUH7mvoU%2Bj7UtUdGxeTMvbQWXRNVCKPed0CzanZwMNOCiAPaIZwb5Ci7XAclFx2sbIcH%2Bkdo3RLZ0SKqHKc%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c2ff6f3ac12b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/js/chunk-ZU6Q67UT.js","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:17.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /js/chunk-ZU6Q67UT.js HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/js/main-B6NXVWFN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:17 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 49\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2BrDhOoDeLJRbWPaGGwZ%2F0wRTlsMP8GO%2BN2UTQKzhBW2r6gTgOTsIJVwX4QRqe%2B0NGk9DROcEOstY2WsHcuxNvb%2B%2B8kxa%2B2kzaa4OWc%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c2ff6f3fc1fb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/usdc.svg","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/usdc.svg HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6952a7c4-881\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eMtjLDjsIBJDjAnglg%2BPfcXQeI3cKwWF4icIxikUOzpcSLCr9LFTJYslX7NzpWwkTxRuxbc%2BKfIjLpO35ZwlMke7tPWO528Wm1eIovg%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff6e0eb47b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2177,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da551bac8162f19b104cfa97b5aa6fcb","sha1":"a1e05a8f0b3898b25624a23d3413b7b9a9f2651f","sha256":"fc7e49558f80b7563f27c8645b6310acda76fc753d995390d884365460afa700","sha512":"46d3d640881df9c305e75f93817fabbff675b8e7ea39363da9684354ea66e68bf19c6e143e910e61a87700738ddcbf8d370451c2b5e3863347515709a0f19a38","ssdeep":"","tlshash":"0e419cde6799a1d0e14be359c230612976ee24fa7b3acf444255afc3f94300e845dcd4","first_seen":"2025-07-13T15:42:46.600462Z","last_seen":"2026-03-30T19:18:20.92682Z","times_seen":34,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/news_2.svg","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/news_2.svg HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6952a7c4-40bf\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8VRDNGLGJqk1BWlDfg9DMFv4EzvXDXxkUJBh2H%2Bd1w%2Fwd6VDv7ga%2BHc53Te9XWqWRryR1ZOjeZ75KbiK1%2BAQlwgFBQGRgBHYFifoPkY%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff6e11b59b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16575,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9eae094f39b8fc5bc3de999a76c2f4e0","sha1":"7501ca21996627b8f21932d9a0b962a16bd0d1ac","sha256":"f490eb87074513aa823ff6acf93b7ffa9f9c69aea12d0e7cfabcbed5f833ed32","sha512":"1f62516f688683dd1a2983e5be1585b70cb5a222c0d15c657503258d32010e4af246a23c40890e00101f04dff47aa4a3ba007f9967ae4abe2413dc8e0474a126","ssdeep":"384:CZ5hDyZov9BbmbtR6cmSjmTAWm2Vhx4rUcAZ1x:+hbI6pIfjQ","tlshash":"e17243bb6ad976e4a0449794d423c6a0374f687d3fc747b4c3a0d7b0b6298a4cf854e8","first_seen":"2025-06-30T15:15:02.00858Z","last_seen":"2026-03-30T19:18:20.879876Z","times_seen":29,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/card-image2.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/card-image2.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-bc08\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oe31nLA2vWMc17marzDzyn5eJkL2a7W7YkU2p%2Fg5yaV4vHQ210eFx5Rg3m7JdzQr5JgTrfSGMqC%2B41Cqb3qBo4dDQ4NPhdHMzAww2i4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e11b58b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48136,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e22e38f9796304ef46d01ba5966639a8","sha1":"f78f444a777471474fe652cc29ba1cab8f599d45","sha256":"5b22da369e0715d02230909773f07fe9930d5722c367ad37e67349d8a138b90b","sha512":"5ceaee143b8ea56f8185bb34627fb4676aadf2450e4fd4a109700320f92dcb436ca00af2064b780d4cffc29823906998b17373f30e3349a8fd65b16e2e00ae52","ssdeep":"768:Q3oruhYjbZZCrpIftJu8Xgy7q4dDCAN2FdBuX7H27TLtoEs63UMD+Yw+Qe09u:Q3Bw+1SuMtq4dOAodBSHKo/631+Yw+RV","tlshash":"5823018cdd38c944e09f6640e3a8178d7a97c4132a6c4895633f121504b58efbdfe9bd","first_seen":"2026-01-24T13:40:10.961089Z","last_seen":"2026-02-25T19:29:10.004239Z","times_seen":8,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/blog4.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/blog4.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-13e60\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y5RZ5MMHsjZ1ZPycOsxt85oslXY%2FLUXsOEVVISzionNRUPBNap2VHuBXFCSiyGzSrHPkpo%2FWVH2Zi6zJrBfVNAjABmhBHgpy5OyhP9M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e13b71b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81504,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1ce44256ffff6d590238c64e75cef0f6","sha1":"069ca9996945b7e57f1eea7845efb076d389d283","sha256":"a70a22bb3ef4c2a7e9ec64ec5eb4e67b4d542790e8872853cc273b20710c2206","sha512":"153e5d195c55f24ce75b5ad9f4739374600845f0b3450f42e0e166473ba81f26f4cd2fa15ff3cc346526eb5898cac21b324a9f8b90c67020185b7a6a790ccc7c","ssdeep":"1536:eW25CgPhqp/Qc+A0R6ociaaciDfvmc0sfLkNDWg6H/SSj+UiOXN2bw:bUXx61i9z7mGYD76H6Sy2N2bw","tlshash":"448301697c7c0e42cf038e745a4be664b06c4b4923c9539a8d4f027920df3ada91dd6f","first_seen":"2026-01-24T13:40:10.991558Z","last_seen":"2026-03-21T07:39:27.308621Z","times_seen":10,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":249,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/common-box-star.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:15.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/common-box-star.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:15 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-7d58\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7aJ3PEYSKR3zRmS2XlQobd3SjmEsLNYTcPL3M4tp%2B8WU%2FxHVutsvD2SEuQe5XFAunpCgBN8iNVzcUDmAf5wc4asGISxqYrZWvwmDA8U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e85bb2b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32088,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"716b4df0167ec533e2e1358cdc38cf98","sha1":"9295654db93e72532fc2264840b0005d79ac5e1b","sha256":"eeccaaa34cb2e80b7f104a27a328c00814793a54d4b24ff673552b5e3549c548","sha512":"a5eb4fe56dff94cc596c3b3da3c0ef7b97ab0fdaabea56b3e85fbe9ef272a7354809f3995e20daa8f1721f92a99fd4d91946fc18c6ebd999dfd8b0fcc7398fa2","ssdeep":"768:yueQDV+FS70w2oEw+bLrrErwgeGFk7GXlFnfixdiNYk23DsdcP:yueQDVfImEw+bLwwm4Ynfk0NYkmsS","tlshash":"f5e2f2c18132a4cc38656534e0359311ef5fc7281af76afeda409ae9c4a11697cf26f1","first_seen":"2025-06-30T15:15:01.990398Z","last_seen":"2026-03-30T19:18:20.896096Z","times_seen":46,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-835852369\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:18.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/destination?id=AW-835852369\u0026cx=c\u0026gtm=4e61m0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 24 Jan 2026 13:44:18 GMT\r\nexpires: Sat, 24 Jan 2026 13:44:18 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 24 Jan 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 123765\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":354937,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5882)","md5":"e601881aaaf5f98bd12fb0dd42782655","sha1":"8d4e8ce74cc8303b3555ba023dc7c9c0abb32bef","sha256":"b33760466cab7e1ac1ef9bcffcafb6b592444bec9b5b4c6cc1889e81760224ba","sha512":"4e0e8a67041133684c60b281fde1d7b367584c8c2f179745f693478a0c5d176ac6d70eb0c957d877ff6df52bf9ebecd15b41f101fa23c54e45d63285f4c56920","ssdeep":"6144:FJmMvPyQAxJ508RYoeXDIItDmlFldbKKCY5dqmQ0e6:jmMnyQAxJ508RYPIItDIdqn6","tlshash":"9f7419cd73d6742693a3a478403f114ba17b6a92f84cc895f186dce42e70aaa4177f3c","first_seen":"2026-01-24T13:44:59.867556Z","last_seen":"2026-01-24T13:44:59.867556Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/fonts/UcCo3FwrK3iLTcviYwY.woff2","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:15.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /fonts/UcCo3FwrK3iLTcviYwY.woff2 HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:15 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 72920\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: \"6952a7c4-11cd8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oiT%2BEYevyLW4T%2FijU8zFDpErhmE%2B0D0q8v9ma2EPnoHXXu9qMZiPt3kk6JO3F387TRrT5QNnSLX5BQ7DXzRPLmKbwnXxiNslnKmpl8g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e9bbc4b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72920,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 72920, version 1.0","md5":"4b73e2ff3024784eca66d2120a9bcb22","sha1":"2870bcb8ece10145e089262bb6634d18ac85bec6","sha256":"2c295d99e26dcf357d4d01bcf270fd6924b600c9a13dd8c363ef114f4c6976fa","sha512":"9ebe0b2cc7ed7298d931fc246732ed90881f0252b957afbf14f390c75c1da3fddf1b3fbb00be8d489cbb7b5a18f9dbda17a24e18594d44ebba4b7ca3f50bb10a","ssdeep":"1536:MO6PxhqwEppt5fUo8w4d+X5JlhLzcua67BYePELa:M3qh7VdDf8GPH","tlshash":"f0630245820ba35ee09d4a79d27481f61fc2cb5c2bbf5c27538289ab5f57dbf6410134","first_seen":"2025-06-08T12:34:02.525952Z","last_seen":"2026-04-25T05:27:39.185697Z","times_seen":1001,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/16834016496/?random=1769262259957\u0026cv=11\u0026fst=1769262259957\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v9225624967z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104573694~104684208~104684211~105391252~115616985~115938465~115938469~116185179~116185180~116682876~116988315~116992598~117041588~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=JiweCJXEv9IaEPDpits-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=2~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:20.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"POST /pagead/1p-conversion/16834016496/?random=1769262259957\u0026cv=11\u0026fst=1769262259957\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v9225624967z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104573694~104684208~104684211~105391252~115616985~115938465~115938469~116185179~116185180~116682876~116988315~116992598~117041588~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=JiweCJXEv9IaEPDpits-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=2~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nOrigin: https://btchyper.claims\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:20 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\nlocation: https://www.google.com/pagead/1p-conversion/16834016496/?random=940841381\u0026cv=11\u0026fst=1769262259957\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v9225624967z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104573694~104684208~104684211~105391252~115616985~115938465~115938469~116185179~116185180~116682876~116988315~116992598~117041588~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=JiweCJXEv9IaEPDpits-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=2~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXgUZArxRPerkhLJfKzcLeV1_XCczvrEQvg\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdTekW4DJ7ZSfxnaYziim3SWKKIs5TpcJZuuzlUZvoh5r3iVRhgYSv4aAgXY\u0026pscrd=IhMI5IWoxKekkgMV-EaRBR0YOB9AMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NiR2dXNDJCbFdhQjFhckZwNU9xcGxGT3RhSlVOQWlsOEk0NkYyc3p0OTdxUlRGYkpsRkhvaVp6DAgJYggIABAAGAAgAA\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fbtchyper.claims%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=2764512.1769262258\u0026dt=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026auid=1350480568.1769262258\u0026navt=n\u0026npa=1\u0026gtm=45He61m0v9219080431za200zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115495939~115938465~115938468~116682876~116992598~117041588~117223558~117223565\u0026tft=1769262258100\u0026tfd=4429\u0026apve=1\u0026apvf=f\u0026img=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:20.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"GET /ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fbtchyper.claims%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=2764512.1769262258\u0026dt=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026auid=1350480568.1769262258\u0026navt=n\u0026npa=1\u0026gtm=45He61m0v9219080431za200zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115495939~115938465~115938468~116682876~116992598~117041588~117223558~117223565\u0026tft=1769262258100\u0026tfd=4429\u0026apve=1\u0026apvf=f\u0026img=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 24 Jan 2026 13:44:20 GMT\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/pagead/1p-conversion/17424319534/?random=329306280\u0026cv=11\u0026fst=1769262259678\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115938465~115938469~116682876~116992598~117041588~117042506~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=-upqCKnBzf0aEK6IyPRA\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=1~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXhfYfDClfmtebl8jS_jLMp0Erlp7dGMvyY\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdTklobPYupzS6VGEYBtX9QAvnURXPb02uMBhl6_xwL1nkqvBLlIYpMaArcT\u0026ipr=y\u0026pscrd=IhMI8bSIxKekkgMVMM07Ah0XlxXqMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2Nid1lJQnZuN3FOb25OUGNZUDdDMlFyQ3B2U3RwYTJpOU5zNW9DM21lVktrbXdCQS1BR3I1UTl6DAgJYggIABAAGAAgAA","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:54:04 GMT","end":"Mon, 23 Mar 2026 19:54:03 GMT"},"fingerprint":{"sha1":"79:6F:61:ED:85:71:D3:03:AF:65:A2:06:5F:BB:34:EA:21:15:9F:B6","sha256":"4B:DF:16:AF:B7:35:08:DF:0B:C5:AF:B6:BB:CA:F4:32:78:1C:B7:4B:BE:2D:E3:AE:55:3D:F5:3B:E0:D2:A6:AB"}}},"request":{"raw":"GET /pagead/1p-conversion/17424319534/?random=329306280\u0026cv=11\u0026fst=1769262259678\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115938465~115938469~116682876~116992598~117041588~117042506~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=-upqCKnBzf0aEK6IyPRA\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=1~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXhfYfDClfmtebl8jS_jLMp0Erlp7dGMvyY\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdTklobPYupzS6VGEYBtX9QAvnURXPb02uMBhl6_xwL1nkqvBLlIYpMaArcT\u0026ipr=y\u0026pscrd=IhMI8bSIxKekkgMVMM07Ah0XlxXqMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2Nid1lJQnZuN3FOb25OUGNZUDdDMlFyQ3B2U3RwYTJpOU5zNW9DM21lVktrbXdCQS1BR3I1UTl6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-25T07:55:31.332314Z","times_seen":818678,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/box_12.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/box_12.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-3405e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dalhx7l2YJ6ZAFxRKtJ397scEjcHMN7dbWyAXXawfDf8Qbb6lPMkJSPNaExfE9qYplKJvb4fwjU7r%2BeAwnJoTqe30mKXHph52VLYVzc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e13b65b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":213086,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8f92b1a0517b1bca6c1d1e20bd093899","sha1":"bc1fa09ade50434498fbcb9cc4215ab0998bddae","sha256":"c4c7d1c74c77b0faddab09f00d226f91377954ad99d5d6dce51c7a865b961973","sha512":"d3c6af6f453b81db914f1386a48fe6b6649e015d49f3906c58007f31d1011f367e7d26cba1540b0ee170147d424a8590dae52af8634c1ce769d0fc9c06014a0f","ssdeep":"3072:X7G83a06aj+qj0yNy4SyXXicrqmfZkZKNNo+hsIuvGc/7CfgDmemNbgHPbOmHsw:XKgSajtUyHRqkNo+hsICGk7EGmkHPJR","tlshash":"642413b7432c91fecbcacb695fded437730d1edbe59b53b8c11a2e00b2656141aa6420","first_seen":"2026-01-24T13:44:15.042253Z","last_seen":"2026-03-21T07:39:27.2732Z","times_seen":5,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":392,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/blog5.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/blog5.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-9692\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AiW3PyzF0ZFjbwpExeQPZ4UWqBoUE5Wc5dpRoeKXKlkG2JSmyOFvQ302K8fXKHDsBF%2FgLFl7p8q%2BRT0dTY32yvR4BUmhWs%2FuWLixRrE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e13b72b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38546,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"69db1b6b1a5d7d0cf1e6d72ebc61ab2d","sha1":"5f4b1dee1c964002ed0f64204507699e41cebd20","sha256":"9669869c6b6d972ec22548e3a3ba210f44eddbbf41c6fce9876816b9ddb64006","sha512":"10e4f216979e73b12767b1cd841bfa253f383a363c24172f6f6b4fd6bc5e9261ef6aced751e86996cfe5a19bc712dc7354cd94997f59098bdee7d7c97cfe511f","ssdeep":"768:EOZkkb3/dDX0vygv1m4DjxZOjsyXcrCRzfJbPv3yFjJOeS8dUE0F6agDGn:Hb3FDX0KsdxZXy6G5CFjIeoF6c","tlshash":"1803f1883115f989e2b49130bf8d29a8ca52ec4e9f8045535e9e1ddbc7087b626db383","first_seen":"2026-01-24T13:40:10.986037Z","last_seen":"2026-03-21T07:39:27.323828Z","times_seen":10,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/media_bg.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:15.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/media_bg.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:15 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-27a5a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LO7SYWyFZmX8FSRgVd7mNW1nZqIViyqCZ0NToxl6K4K6plqyi57wPntw%2Bas8i%2FzrEIJ%2FGvq3%2FcFdqwMfWksfmfzNPlh58vQKRylK%2Fy8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e8bbbbb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162394,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7c6bc8d349299f668a52f1a4fd55039b","sha1":"da86cac934fd7b8b32aa7acdd5b1db1457442f47","sha256":"9bdc9b8f244a927ae5ebcaf698804aab13317a723428f47cc931de651ccd4c39","sha512":"9ed669926e2c3f00a646b5a673a099f4b112a02f7538877f81089b63769bf6b75544392a4359b1652ace4db812b2194d7b4397b4d7c4853e1fe5bd6f4cb73d07","ssdeep":"3072:qDP8lFCfJcOJvmW7qLi9u/EcPoTD0EQGcX167fcYlq//89AcpKRkBdvMBMXFtsA:qOcfJTwOu/3PoH0rGcEDcYl8sPvL1CA","tlshash":"cbf312fbc350f086544c9b2d4283375bc3926fead3bad9007a9e32d12c775da69a1d14","first_seen":"2025-07-13T15:42:46.602916Z","last_seen":"2026-03-30T19:18:20.840484Z","times_seen":43,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/web-vitals@5.0.1/dist/web-vitals.iife.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:18.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /web-vitals@5.0.1/dist/web-vitals.iife.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:44:18 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9c2ff6fb5985dfec-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 20581\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 24 Jan 2027 13:44:18 GMT\r\nlast-modified: Mon, 15 Dec 2025 14:20:40 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:WSMq0kNu/ofK0gA/iqbgSJdkWsAsSDSMIBTQ7PrKtqU=:\r\nfly-request-id: 01KCH651JJHYVY5ETPBBZ899HW-arn\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":5851,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5850)","md5":"8e91e35b53216d67bae84f3aea08f382","sha1":"7f8f5cb5e91a14219677db53f1fed4fe78ab8dc9","sha256":"59232ad2436efe87cad2003f8aa6e04897645ac02c48348c2014d0ecfacab6a5","sha512":"7094d98db8f38157ece5121b21074fb8f5c1888669f0f49f8516625fdf0ed821d6a583bf64d0722ae67fcf56f3ad5343ca9dad2e2e4ba468e3e3d200188b8811","ssdeep":"96:wsNL9WNChZ/40G5BYdQKeTvq3G8/MO52SjXyiyZt5G6UHuVuMcY/A4/c/N40rjpd:wZNChRaK6V8/MOpjXyiIGNouMcjGQ40X","tlshash":"d1c199b15b42663c739ec2e7f070a3533b2655d4b54644cdd12cbf821d1698222aaf7a","first_seen":"2025-05-14T12:20:44.462979Z","last_seen":"2026-04-25T05:41:37.918863Z","times_seen":1907,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":34,"dns":5,"connect":4,"send":0,"wait":18,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16834016496\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:18.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/destination?id=AW-16834016496\u0026cx=c\u0026gtm=4e61m0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 24 Jan 2026 13:44:18 GMT\r\nexpires: Sat, 24 Jan 2026 13:44:18 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 24 Jan 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 123641\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":354772,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5882)","md5":"a43166be3fcc046b8d7869a26250f606","sha1":"0ca879ab6458133e8852c86894887ef89437d23c","sha256":"75bb2bf5ff7256f1a0f233df43fc2ff2549c694f5ec8f570f1a70285d7e8dfa6","sha512":"34df4fd4c54ae528cafb5b76b0fca324777f2633ab7751cd04087df055673f91f407ed5b34e8b0dd32f19736c72ae598a0c3a1148fdaba11eec19e6c2094ce8f","ssdeep":"6144:zJmMvPynAxJ508RYoeXDIItDmlFldbKKCY5dqmQ0e6:1mMnynAxJ508RYPIItDIdqn6","tlshash":"9f7419cd77d6742693a3a478403f114ba17b6a92f84cc895f186dce42e70aaa4177f3c","first_seen":"2026-01-24T13:44:59.875618Z","last_seen":"2026-01-24T13:44:59.875618Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/16835508600/?random=1529283939\u0026cv=11\u0026fst=1769262260626\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115495939~115938465~115938468~116682876~116992598~117025847~117041588~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=_MN7CM6szNIaEPjy5ds-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=8~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXgifmGZ8Z67JQr8rWqaKeIdNmHXZwAnVxs\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdTIfgkmCZYyYkLnF30Vy1SeNQBMeV9cDykTef85D_dnNQ1yRVN17g8aAry0\u0026pscrd=IhMItanFxKekkgMVq0qRBR3l7wHXMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhZ3VJdzkzVGcyUnJDY0I3Y1M4R1BLZ1ZGMGZHbF8tVDRjd0lYZnZNX2dvdmo2Q2E3dVhVYmR6DAgJYggIABAAGAAgAA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"GET /pagead/1p-conversion/16835508600/?random=1529283939\u0026cv=11\u0026fst=1769262260626\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115495939~115938465~115938468~116682876~116992598~117025847~117041588~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=_MN7CM6szNIaEPjy5ds-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=8~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXgifmGZ8Z67JQr8rWqaKeIdNmHXZwAnVxs\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdTIfgkmCZYyYkLnF30Vy1SeNQBMeV9cDykTef85D_dnNQ1yRVN17g8aAry0\u0026pscrd=IhMItanFxKekkgMVq0qRBR3l7wHXMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhZ3VJdzkzVGcyUnJDY0I3Y1M4R1BLZ1ZGMGZHbF8tVDRjd0lYZnZNX2dvdmo2Q2E3dVhVYmR6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlocation: https://www.google.no/pagead/1p-conversion/16835508600/?random=1529283939\u0026cv=11\u0026fst=1769262260626\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115495939~115938465~115938468~116682876~116992598~117025847~117041588~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=_MN7CM6szNIaEPjy5ds-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=8~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXgifmGZ8Z67JQr8rWqaKeIdNmHXZwAnVxs\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdTIfgkmCZYyYkLnF30Vy1SeNQBMeV9cDykTef85D_dnNQ1yRVN17g8aAry0\u0026ipr=y\u0026pscrd=IhMItanFxKekkgMVq0qRBR3l7wHXMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhZ3VJdzkzVGcyUnJDY0I3Y1M4R1BLZ1ZGMGZHbF8tVDRjd0lYZnZNX2dvdmo2Q2E3dVhVYmR6DAgJYggIABAAGAAgAA\r\ncontent-type: image/gif\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/16846608297/?random=380942967\u0026cv=11\u0026fst=1769262261064\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115495940~115938465~115938469~116185179~116185180~116682876~116992598~117025847~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=bWt6CJmy-IgbEKmvi-E-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=13~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAgiC3rEC\u0026cerd=CgSUwL0t\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXjcolHtYzkCf9ro4az49LSwWe-e7Quh7U4\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQK1H2MtTTTYkV7SUqUxEXgAgNqH-RejoygGA8qj_aY5OndH1i5orgaArCY\u0026pscrd=IhMIjNjaxKekkgMVFHaRBR3UdCoHMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhbkRoTGZTNW81d3NRQmg1aTdqQTdES1JlZ0U4d3h4aXBZcDNucFRiN1FsamRPdFNkellIVXp6DAgJYggIABAAGAAgAA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"GET /pagead/1p-conversion/16846608297/?random=380942967\u0026cv=11\u0026fst=1769262261064\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115495940~115938465~115938469~116185179~116185180~116682876~116992598~117025847~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=bWt6CJmy-IgbEKmvi-E-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=13~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAgiC3rEC\u0026cerd=CgSUwL0t\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXjcolHtYzkCf9ro4az49LSwWe-e7Quh7U4\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQK1H2MtTTTYkV7SUqUxEXgAgNqH-RejoygGA8qj_aY5OndH1i5orgaArCY\u0026pscrd=IhMIjNjaxKekkgMVFHaRBR3UdCoHMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhbkRoTGZTNW81d3NRQmg1aTdqQTdES1JlZ0U4d3h4aXBZcDNucFRiN1FsamRPdFNkellIVXp6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlocation: https://www.google.no/pagead/1p-conversion/16846608297/?random=380942967\u0026cv=11\u0026fst=1769262261064\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115495940~115938465~115938469~116185179~116185180~116682876~116992598~117025847~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=bWt6CJmy-IgbEKmvi-E-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=13~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAgiC3rEC\u0026cerd=CgSUwL0t\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXjcolHtYzkCf9ro4az49LSwWe-e7Quh7U4\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQK1H2MtTTTYkV7SUqUxEXgAgNqH-RejoygGA8qj_aY5OndH1i5orgaArCY\u0026ipr=y\u0026pscrd=IhMIjNjaxKekkgMVFHaRBR3UdCoHMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhbkRoTGZTNW81d3NRQmg1aTdqQTdES1JlZ0U4d3h4aXBZcDNucFRiN1FsamRPdFNkellIVXp6DAgJYggIABAAGAAgAA\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/feature_2.svg","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/feature_2.svg HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6952a7c4-23c0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lHBQLAmqqJS930kY296NbpWzL5zq229WzQmgneqBmB265Hq6lfrYRjgbWzq0SPzIugbGhCOAKR5FicruCNBtG48HdodyGMFt9eFi1yk%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff6e10b4eb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9152,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c5a8b1d6f6d2677471cfe2c75942130f","sha1":"f841a00acd660f04edce17c15e50dd5845c5bad6","sha256":"af3d90ada134ceba45371be12397e5194c7d03abb4c5be0eed4f2767cc751949","sha512":"d01be943ac9fc73f0e3b02b77d3f1e559f03e2325fbbbb694b32725d76f800b2bda061f23ddecc09c819908f80f165d3b8aa18a0f28b540f4addbdac59124c90","ssdeep":"192:m+qVWzkAnceu/HUMd+xCHmg/aQVYdbdiMSVqBucp2deslqgrNkhyfZCgp19cL9EM:mAkscZPN/aQUdiMSVqBucp47ruhyfZCh","tlshash":"841287ea97f062f8f843fba0c8174666b95e28ff6792c75cc2141d542766078ce9cc98","first_seen":"2025-06-30T15:15:01.995798Z","last_seen":"2026-03-30T19:18:20.868035Z","times_seen":48,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/blog1.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/blog1.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-10f54\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FzYjk7kykqfLGHKhbplU%2BKX56lcIK7oqLeAsAh2udE0nvTsx4pGePtmxBFRHiXZ09%2FxySrTxR1avh3dGg%2FTRV92BBgRUeVtzzt76Sv0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e13b6eb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69460,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"76555246cf5ea39fa678ab2d693979e7","sha1":"ce5eca6c2989717803b8bb257e3da5f2bc929662","sha256":"3aaf6be0bb15c415b526471598ed702fa6f5987a823a3fabf2854c6e0cfe57fe","sha512":"f4f32242c523ee0467046a25d18dec321aba385c3c411a3fb6b704fa9a1a625e13e82c7e7b23a3a509aafd9c7d97a3ca42214470deb960d7878d79cac52c7191","ssdeep":"1536:L9chH3aV7EY6zBIP9YDDv4qnYZIVjNqeAQ16sD1To8XsbIQj:qJqJEsl+xYZIFN/Aq6shTx8d","tlshash":"49630264d3c16fedeba7af309c3179db83782a65d1d02e28017e6671e153c309265ca7","first_seen":"2026-01-24T13:40:10.99734Z","last_seen":"2026-03-21T07:39:27.307959Z","times_seen":10,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/faq.gif","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/faq.gif HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 66722\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: \"6952a7c4-104a2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FL9L4jsppS65CwdOz0UN1jRN279dDs9yF26ZrQgjKhTCBfQYj7ZS1CxkGtHNdY1AmmXtFIG%2FBHaxvkrqluRHeko8ld74Usqb8XzVxgA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e14b73b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66722,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 564 x 1500","md5":"d8d5890611a73c650111c6d3f3dd3497","sha1":"a8e13d85f85eb360749804cfdd53dd3c2cda4557","sha256":"e1065d9f8a557621a2a43ea87ccc98f6a087ac99ad08154d4ffecea53ba785fa","sha512":"66b392b6fb8c94da5440a4db0e78f1ebad5d61eb9f7277087a99152915a7f63e87264cb5f2f51391ea5c13549d7509f0d438752addf544731d824cec4292ef3e","ssdeep":"1536:mwhZQx2FHOJnu7Qetjh2dXAMzmXTUahFa:8EHbZXaQMzqXhFa","tlshash":"1463010fdf89c648be5aea78019a739d6b09cc2312285f46fece761852b597c3cc4545","first_seen":"2025-09-21T08:02:59.248825Z","last_seen":"2026-03-21T07:39:27.253413Z","times_seen":13,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16846608297\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:18.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/destination?id=AW-16846608297\u0026cx=c\u0026gtm=4e61m0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 24 Jan 2026 13:44:18 GMT\r\nexpires: Sat, 24 Jan 2026 13:44:18 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 24 Jan 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 121168\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":345410,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5376)","md5":"8b88701cf3e631cd4115f9af10fa8a84","sha1":"f14d6188fc7a8c292a5093df4d6b86a428968686","sha256":"a29cfeac30564718a530c8f62d788b3c355320ff3a8e1dcca3c57141834f48fd","sha512":"0847c12b5bb0980fcd6924ffb945fb5551e3705ba81d85dbe9d8e4a623d99373d4af98490c6963b1a244351d37616e0f00bb5322308b204886d2ef7d5fd3023f","ssdeep":"6144:SJmMvPgQAxJ508RYoeXDIItDmlFldbKKCY5dqmQi3I:qmMngQAxJ508RYPIItDIdq+I","tlshash":"ba7408cd77d6706683a3b478403f114ba17b6a92f44cc899f186d8e42e74aaa4177f3c","first_seen":"2026-01-24T13:43:29.352263Z","last_seen":"2026-01-24T13:44:59.882445Z","times_seen":2,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/16872869822/?random=2040094078\u0026cv=11\u0026fst=1769262260473\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115616986~115938465~115938468~116682876~116992598~117041588~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=GCYJCM_Rv9IaEL6fzu0-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=6~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXggU-YTBXcFllSJS5ozhbbt-KQ6D2VQD04\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdROcL-d2Olq9Tv-SdBjbE3V_v8NWqYoIKJJTqpX4G4t-p57PItnsrsaAsD-\u0026pscrd=IhMIxJzFxKekkgMVvQ2iAx1VfSQoMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NiaUNxaHl0eXotQ3diN0R4QXpzSG9XaEd2ajhVS25FQjBYUnlLbzhSOElMTXlPWllaT1d5YUJ6DAgJYggIABAAGAAgAA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"GET /pagead/1p-conversion/16872869822/?random=2040094078\u0026cv=11\u0026fst=1769262260473\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115616986~115938465~115938468~116682876~116992598~117041588~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=GCYJCM_Rv9IaEL6fzu0-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=6~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXggU-YTBXcFllSJS5ozhbbt-KQ6D2VQD04\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdROcL-d2Olq9Tv-SdBjbE3V_v8NWqYoIKJJTqpX4G4t-p57PItnsrsaAsD-\u0026pscrd=IhMIxJzFxKekkgMVvQ2iAx1VfSQoMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NiaUNxaHl0eXotQ3diN0R4QXpzSG9XaEd2ajhVS25FQjBYUnlLbzhSOElMTXlPWllaT1d5YUJ6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlocation: https://www.google.no/pagead/1p-conversion/16872869822/?random=2040094078\u0026cv=11\u0026fst=1769262260473\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115616986~115938465~115938468~116682876~116992598~117041588~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=GCYJCM_Rv9IaEL6fzu0-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=6~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXggU-YTBXcFllSJS5ozhbbt-KQ6D2VQD04\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdROcL-d2Olq9Tv-SdBjbE3V_v8NWqYoIKJJTqpX4G4t-p57PItnsrsaAsD-\u0026ipr=y\u0026pscrd=IhMIxJzFxKekkgMVvQ2iAx1VfSQoMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NiaUNxaHl0eXotQ3diN0R4QXpzSG9XaEd2ajhVS25FQjBYUnlLbzhSOElMTXlPWllaT1d5YUJ6DAgJYggIABAAGAAgAA\r\ncontent-type: image/gif\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/pagead/1p-conversion/16834013568/?random=268863216\u0026cv=11\u0026fst=1769262260797\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115616985~115938465~115938468~116682876~116988316~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=kR3sCO6z-IgbEIDTits-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=10~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXhirtVeH2XxFfnr7QhkpwqDDpNfKnolzbU\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQCDjELsoOQBSICPgtdz2It36bdLzu-V081xCbpoeQzGhxBarab7QYaAmKH\u0026ipr=y\u0026pscrd=IhMIx-DMxKekkgMVt907Ah1koh0wMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NiZFQtVEtjcDE0YUJDRGtORG5VUWU5Y1JOcC1rb3Jybi1QMVVyOUxuc25TXzhhSE1CaUpxcjB6DAgJYggIABAAGAAgAA","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:54:04 GMT","end":"Mon, 23 Mar 2026 19:54:03 GMT"},"fingerprint":{"sha1":"79:6F:61:ED:85:71:D3:03:AF:65:A2:06:5F:BB:34:EA:21:15:9F:B6","sha256":"4B:DF:16:AF:B7:35:08:DF:0B:C5:AF:B6:BB:CA:F4:32:78:1C:B7:4B:BE:2D:E3:AE:55:3D:F5:3B:E0:D2:A6:AB"}}},"request":{"raw":"GET /pagead/1p-conversion/16834013568/?random=268863216\u0026cv=11\u0026fst=1769262260797\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115616985~115938465~115938468~116682876~116988316~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=kR3sCO6z-IgbEIDTits-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=10~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXhirtVeH2XxFfnr7QhkpwqDDpNfKnolzbU\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQCDjELsoOQBSICPgtdz2It36bdLzu-V081xCbpoeQzGhxBarab7QYaAmKH\u0026ipr=y\u0026pscrd=IhMIx-DMxKekkgMVt907Ah1koh0wMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NiZFQtVEtjcDE0YUJDRGtORG5VUWU5Y1JOcC1rb3Jybi1QMVVyOUxuc25TXzhhSE1CaUpxcjB6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/pagead/1p-conversion/835852369/?random=423711207\u0026cv=11\u0026fst=1769262260236\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v894086075z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115495940~115616985~115938465~115938468~116185181~116185182~116682876~116988315~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=PIZ6CKbRvtIaENGwyI4D\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=4~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXh3aVs1nR_PCEOwujZJmOI6GQlYzSmFT-o\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdTWad7mj_-wR4Pbzcx-I4dnsDD1hLUB_ijf8mDWzwej-7o5ol1o4uAaApf6\u0026ipr=y\u0026pscrd=IhMI1oepxKekkgMVefU7Ah208RS9MgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhbU42Z2Zya0JLb0lBVld1QmJScDlEUWJzZHVwSVZBZHVlRkwxR3RvXy10dWlqblFMUUdGTnF6DAgJYggIABAAGAAgAA","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:54:04 GMT","end":"Mon, 23 Mar 2026 19:54:03 GMT"},"fingerprint":{"sha1":"79:6F:61:ED:85:71:D3:03:AF:65:A2:06:5F:BB:34:EA:21:15:9F:B6","sha256":"4B:DF:16:AF:B7:35:08:DF:0B:C5:AF:B6:BB:CA:F4:32:78:1C:B7:4B:BE:2D:E3:AE:55:3D:F5:3B:E0:D2:A6:AB"}}},"request":{"raw":"GET /pagead/1p-conversion/835852369/?random=423711207\u0026cv=11\u0026fst=1769262260236\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v894086075z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115495940~115616985~115938465~115938468~116185181~116185182~116682876~116988315~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=PIZ6CKbRvtIaENGwyI4D\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=4~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXh3aVs1nR_PCEOwujZJmOI6GQlYzSmFT-o\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdTWad7mj_-wR4Pbzcx-I4dnsDD1hLUB_ijf8mDWzwej-7o5ol1o4uAaApf6\u0026ipr=y\u0026pscrd=IhMI1oepxKekkgMVefU7Ah208RS9MgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhbU42Z2Zya0JLb0lBVld1QmJScDlEUWJzZHVwSVZBZHVlRkwxR3RvXy10dWlqblFMUUdGTnF6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/eth.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/eth.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-594\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QdxsdWZjkNwDSMJ0EqzLZhWTlWykGcMsagXoYrKCx3jSbOzVAYK7m6vbnxMiz2xeuamzDaxxzp5%2F%2BKe0ETYwvfF1jo%2Fjv2kFiPAR17c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e0eb45b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1428,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9005879009fa34fc717f1b82c1774ff3","sha1":"0adc2e4492aaa6e0ea67439f6c395f067987e5bb","sha256":"081cfb855163c7d6fa28fab97f54c3aa8cdb217936ce7c8bda9ae8f8bdfb749c","sha512":"4055f953014647e12163d325cd97a185b14bd7d9b02d4d7befe2862e16f756e92f4fa3d9e17ffd40e6bc25a8003f94c012487f9941f55efb1eb55a90541daacc","ssdeep":"","tlshash":"9721e91e2a5093c1d0aaa4c005d7ce6332df3d356803a83d56a8ebd0b828452d8729a5","first_seen":"2025-07-13T15:42:46.650614Z","last_seen":"2026-04-14T15:14:08.396855Z","times_seen":37,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/trust-bike.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/trust-bike.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-83e8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kt7ecGbhpvP7v6E379quGIrJQdIhZJmPKqzVW3dp%2BXsw3v6XRCOuRT9lia4hs8YXHXu57b4v2JwO1XTNLvMr1ZDlP%2BN6WZTxMTrWzOM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e12b60b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33768,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5cb31ef3a11e5dc0861f90b5387c4410","sha1":"bc27c90d2fab1d6a7ad22eb67c341109ed38f37a","sha256":"bd10c3d4f2dcbc5f197941cb67469e7038843bfcdd594c408a4bb348af8548f8","sha512":"dfaeb35bda076db1c4101a9a319be79a5634a12e7273de38eda1eed9b5d039d04547c29b28f64bfad607203c9d6549d1124509e3adc535957e51f40cfc0b64a5","ssdeep":"768:woOCGKvCuiknOzQiIexQkAhvXd+OwOrXy4BaElxmn5MfLzNpEf:6/KKknWI3x1BwOu4B7A5Mf4f","tlshash":"6ee2f133ac36a56421454d1780eb326fb33e94fc571a0b6a07cf94b46869b01c4eae66","first_seen":"2026-01-24T13:40:10.887776Z","last_seen":"2026-03-21T07:39:27.328247Z","times_seen":11,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/js/chunk-QV7AMSUB.js","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:17.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /js/chunk-QV7AMSUB.js HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/js/main-B6NXVWFN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:17 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 49\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DLXDgdnxXFrUgp3Fwov8QKNq3IxIKrCbtAOSMwXkPMO5Tqn3TT2MtC064yD%2FabhdbFwze%2FejQ%2FMhZFPQoWOQLJX1TQO4T8yjKRu%2BQos%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c2ff6f43c25b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/pagead/1p-conversion/16846608297/?random=380942967\u0026cv=11\u0026fst=1769262261064\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115495940~115938465~115938469~116185179~116185180~116682876~116992598~117025847~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=bWt6CJmy-IgbEKmvi-E-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=13~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAgiC3rEC\u0026cerd=CgSUwL0t\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXjcolHtYzkCf9ro4az49LSwWe-e7Quh7U4\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQK1H2MtTTTYkV7SUqUxEXgAgNqH-RejoygGA8qj_aY5OndH1i5orgaArCY\u0026ipr=y\u0026pscrd=IhMIjNjaxKekkgMVFHaRBR3UdCoHMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhbkRoTGZTNW81d3NRQmg1aTdqQTdES1JlZ0U4d3h4aXBZcDNucFRiN1FsamRPdFNkellIVXp6DAgJYggIABAAGAAgAA","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:54:04 GMT","end":"Mon, 23 Mar 2026 19:54:03 GMT"},"fingerprint":{"sha1":"79:6F:61:ED:85:71:D3:03:AF:65:A2:06:5F:BB:34:EA:21:15:9F:B6","sha256":"4B:DF:16:AF:B7:35:08:DF:0B:C5:AF:B6:BB:CA:F4:32:78:1C:B7:4B:BE:2D:E3:AE:55:3D:F5:3B:E0:D2:A6:AB"}}},"request":{"raw":"GET /pagead/1p-conversion/16846608297/?random=380942967\u0026cv=11\u0026fst=1769262261064\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115495940~115938465~115938469~116185179~116185180~116682876~116992598~117025847~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=bWt6CJmy-IgbEKmvi-E-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=13~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAgiC3rEC\u0026cerd=CgSUwL0t\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXjcolHtYzkCf9ro4az49LSwWe-e7Quh7U4\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQK1H2MtTTTYkV7SUqUxEXgAgNqH-RejoygGA8qj_aY5OndH1i5orgaArCY\u0026ipr=y\u0026pscrd=IhMIjNjaxKekkgMVFHaRBR3UdCoHMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhbkRoTGZTNW81d3NRQmg1aTdqQTdES1JlZ0U4d3h4aXBZcDNucFRiN1FsamRPdFNkellIVXp6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/coinsult.svg","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/coinsult.svg HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6952a7c4-28dc\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kAoq373TbIFPjeTGqse%2BE2GKsJewbzq%2FA0Orfs%2Bl4%2F5cClmfOZaV8ZzK3Xh0mqhbikFjB8%2FtRbXiw6lvZi%2Fh4aEaFFUy4nUi5nDUZUU%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff6e0db43b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10460,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"42ad09d1cf47b26fc146c54780e55777","sha1":"1ff8fa6481728ba6136e6f5e6ecc1a2ab4902244","sha256":"1a7fc9826f2ec16fac2467f8b14c1d5a46bf0d5c88848e28209fef453fadcaab","sha512":"200525b7d47458f317bff92b481f7c4c32b9e232967b5fa7c5b8c1f901333540f6a8074783d3af73fe30597bedef5acac78250b27e87abe8c7ee6b543df7f530","ssdeep":"192:crNkH67Adc0ygfL0/7qMG0PfFiSSGPksNMJPtPZc8DMJ93511Rmth0K:ENkHy0ccfIyAbJ1iJPbtDGBr3e0K","tlshash":"8822d7e52399d2e4e902fba4d822a161adaf3cf5ffc583ddc150ae90766506d8d48cc1","first_seen":"2025-06-30T15:15:02.007192Z","last_seen":"2026-03-30T19:18:20.892159Z","times_seen":47,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/card-image3.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/card-image3.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-7478\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FxtxhjNM29u0rPvrxJINWcC%2BkxUTXMSEGNyyD6560bPqR4ODrTAIxgPftZL0lf6QNRLF%2FMJflKIXLuH0VHNpMRyz6%2FWdQ%2B5mQAESIXY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e12b5cb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29816,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e0f6be892658f8c1c7f5abdeb54571e7","sha1":"c154d7b3147274f16241fca28095f1cc7cfc8cf4","sha256":"b4ed7efd9f33be5d88bc4ccfd1952082f5d88a21cb6a40acd3cb4ac0a9f8615e","sha512":"7ae47a3e29627483d1323f39d4c44a8924bb55bc2bfbcdb21e8cd1fbd7e3f20cbad9d85424708b7f6987e669482bd5032f2c169875e4cf4ddd7150f09af5c1a8","ssdeep":"768:4wxLvCpwx32dyBBWt+gENFy7v6cnVv/+8zXNLyRtQj4NfohfE:FKpwxwyWEgEfClnVvG8zXN2tAgl","tlshash":"64d2d0381ab94d8b70662b5a23d80d5b5589fc731fd98b67f02d1c0eda3a845ef76310","first_seen":"2026-01-24T13:40:10.921512Z","last_seen":"2026-02-25T19:29:09.916293Z","times_seen":8,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":142,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/js/chunk-DATZCTIA.js","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:17.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /js/chunk-DATZCTIA.js HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/js/main-B6NXVWFN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:17 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 49\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9q6BiY5P1FFyftRg8mB0i4de6%2F4rSWFHSO63NgK1jfDD8R3pGLVViscAC%2BLSv33KXfwqZ%2F3oUGVUxbBnwtWiB%2BxzA9jhYwo7AaFy4bc%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c2ff6f42c23b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/16808619681/?random=1769262260128\u0026cv=11\u0026fst=1769262260128\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115938465~115938468~116682876~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=BqiwCP2PoLUbEKHd_M4-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=3~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=7","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:20.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"GET /pagead/1p-conversion/16808619681/?random=1769262260128\u0026cv=11\u0026fst=1769262260128\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115938465~115938468~116682876~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=BqiwCP2PoLUbEKHd_M4-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=3~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=7 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nOrigin: https://btchyper.claims\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:20 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: https://btchyper.claims\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: gzip\r\nserver: cafe\r\ncontent-length: 985\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1510,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"ASCII text, with very long lines (1493)","md5":"510430f47db5d40e0481bb37fe4c4c86","sha1":"cbd2dc577889b321b31a374065c9cf4edfb67aa6","sha256":"9c57bbba35df61d9a0243c8b0a72425d3a00228d01362ee252c987f92a7a56b7","sha512":"8dd28806303e3ce154f868ffa471875992ec9977031817d2437054a0f0b8b035a2851129455f285ccc9a59dff52bac2f29746dc093b55f0f00b68d27a79eeb6d","ssdeep":"","tlshash":"8931c7fe56271fab6713b90421a2eb0a3f6370bb24b0db9cf4d54c5725517197428ae0","first_seen":"2026-01-24T13:44:59.888015Z","last_seen":"2026-01-24T13:44:59.888015Z","times_seen":1,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/16873008334/?random=1589214048\u0026cv=11\u0026fst=1769262260705\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115938465~115938469~116682876~116992598~117025847~117041587~117042505~117099528~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=FsgLCPXCzf0aEM7Z1u0-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=9~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXiNlGXzEJx89xMQo0mcT2rw4MIg29uITU0\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdRsW2FL8rAbJPQhKuFgNvOhCUouWtoWzOAsDEOKltmCgSyAfklYCqsaAm61\u0026pscrd=IhMIu9fGxKekkgMV9dU7Ah0FdSNrMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhTE5qOS1MZy1tN0V4bXQwRU9lNXVteGx3Tk5RdGRqNDBZc2pTcnZqaGoyZjJBazJWYnVNMUZ6DAgJYggIABAAGAAgAA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"GET /pagead/1p-conversion/16873008334/?random=1589214048\u0026cv=11\u0026fst=1769262260705\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115938465~115938469~116682876~116992598~117025847~117041587~117042505~117099528~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=FsgLCPXCzf0aEM7Z1u0-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=9~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXiNlGXzEJx89xMQo0mcT2rw4MIg29uITU0\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdRsW2FL8rAbJPQhKuFgNvOhCUouWtoWzOAsDEOKltmCgSyAfklYCqsaAm61\u0026pscrd=IhMIu9fGxKekkgMV9dU7Ah0FdSNrMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhTE5qOS1MZy1tN0V4bXQwRU9lNXVteGx3Tk5RdGRqNDBZc2pTcnZqaGoyZjJBazJWYnVNMUZ6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlocation: https://www.google.no/pagead/1p-conversion/16873008334/?random=1589214048\u0026cv=11\u0026fst=1769262260705\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115938465~115938469~116682876~116992598~117025847~117041587~117042505~117099528~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=FsgLCPXCzf0aEM7Z1u0-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=9~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXiNlGXzEJx89xMQo0mcT2rw4MIg29uITU0\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdRsW2FL8rAbJPQhKuFgNvOhCUouWtoWzOAsDEOKltmCgSyAfklYCqsaAm61\u0026ipr=y\u0026pscrd=IhMIu9fGxKekkgMV9dU7Ah0FdSNrMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhTE5qOS1MZy1tN0V4bXQwRU9lNXVteGx3Tk5RdGRqNDBZc2pTcnZqaGoyZjJBazJWYnVNMUZ6DAgJYggIABAAGAAgAA\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/pagead/1p-conversion/16834301606/?random=764186652\u0026cv=11\u0026fst=1769262260975\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v9221964488z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391253~115495939~115616985~115938465~115938468~116185181~116185182~116682876~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=bMbECI3dzdIaEKadnNs-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=12~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAgiC3rEC\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXhUVmrwaz3dj8t4Knsixl4sM4jiJ03yYaU\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQesMOixXNTTfyuHJD9rScInjsXtgJxc9x1K3EO_jbxCX2jZ8kjUjYaAjcn\u0026ipr=y\u0026pscrd=IhMIio_VxKekkgMV0Yj0Bx1f2QgEMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhZnRueWI1cGtoLUpxdTlmWFotVnludEVSMFVnS2VucHRORlNWUUZKYzU0U3ZFeFJOdENHT0R6DAgJYggIABAAGAAgAA","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:54:04 GMT","end":"Mon, 23 Mar 2026 19:54:03 GMT"},"fingerprint":{"sha1":"79:6F:61:ED:85:71:D3:03:AF:65:A2:06:5F:BB:34:EA:21:15:9F:B6","sha256":"4B:DF:16:AF:B7:35:08:DF:0B:C5:AF:B6:BB:CA:F4:32:78:1C:B7:4B:BE:2D:E3:AE:55:3D:F5:3B:E0:D2:A6:AB"}}},"request":{"raw":"GET /pagead/1p-conversion/16834301606/?random=764186652\u0026cv=11\u0026fst=1769262260975\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v9221964488z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391253~115495939~115616985~115938465~115938468~116185181~116185182~116682876~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=bMbECI3dzdIaEKadnNs-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=12~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAgiC3rEC\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXhUVmrwaz3dj8t4Knsixl4sM4jiJ03yYaU\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQesMOixXNTTfyuHJD9rScInjsXtgJxc9x1K3EO_jbxCX2jZ8kjUjYaAjcn\u0026ipr=y\u0026pscrd=IhMIio_VxKekkgMV0Yj0Bx1f2QgEMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhZnRueWI1cGtoLUpxdTlmWFotVnludEVSMFVnS2VucHRORlNWUUZKYzU0U3ZFeFJOdENHT0R6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-25T07:55:31.332314Z","times_seen":818678,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/card-black.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/card-black.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-2e4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uGpraBfqxH4NG2RXpcUQgKSkh799T46AkdK0L35Bv8scOqEbz8tadfhOtshLoW9JdpWIaB9fbaRs5RXEAMr4LtkxB3CYfi44PSD7%2Bj0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e0eb49b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":740,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5042a9663f3ef6a815b61d12828ac2ed","sha1":"0f385e8633461760e50110238c9a5083de136091","sha256":"87b5b4e462b740e21f4b24474154658485242238b41ba431a8fbacecaddaa0e2","sha512":"03505185b38b8848cb502270dc5b86ff5bca667a566fbc4956aea4dc971d03bc09bbe2f9620f2c85504e81b3a5a5a428a553042a107640a2e038c1c7ec157157","ssdeep":"","tlshash":"6501650ae3467d33ee2e2e7236d052a3a1c307020fa51636410b258344b83a1181942d","first_seen":"2025-07-13T15:42:46.63665Z","last_seen":"2026-03-30T19:18:20.844655Z","times_seen":35,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/union.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:15.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/union.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:15 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-14ac\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L8E4I8URMexK6tnoY4y7yGdLoWw213hkR2qMWelBMd%2B4v27KGmFYbLVY%2FWSlt8RB8NkPldxe7p1izHGzX98ijORUxxD0%2FNeYwQ0iZBQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e82babb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5292,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c74ec3b620336dc2873f8a1d50b0bb62","sha1":"1f778cd2ac7157f7f7646b6e44bb1599978d46b2","sha256":"10a1935fc82680eca7c59fb241c75dee5ef937fd92acab0017a723bbd59ca897","sha512":"01636316748e00b9b7d79fd222a70c6120f51962f8cbe79fd23e9e33a5b600cc8b42f960e624048f5e41776fb16fe40a70c4a0150e59d25935348ecafd9b8b27","ssdeep":"96:txXXfOAi5R2gbDq8mTQ8MzYekjT/FTGKjYlbKCnMrBGGG4+QkDRzbRCQVmRZP6:DXXf05Igi8cZMzMT9bUEkDRzVky","tlshash":"30b14a938dc41d12447236f04e46869f2bfdbd40b92edfae6661f772b0a493242ed431","first_seen":"2025-07-13T15:42:46.615186Z","last_seen":"2026-03-30T19:18:20.885922Z","times_seen":36,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/tokenomics.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:15.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/tokenomics.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:15 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-49fc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1qnS5Uuh7TTws8GIFz3N9p0k6tDq0lW5TdsS%2BiON5ifZf%2BnBCAVgNGlnimFK35a9o0njYSVFwxLhXew0cuIfbTgWO9F5H4k7pEVttBY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e8bbbcb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18940,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f222f25d27821cca4bd242ae26bb48ca","sha1":"278f60d543832a07d36aae84191e7f1fb7da878b","sha256":"8a653d07617beaaaa570e0d9e12c1927a91d2a2cc0f10d27078e229c2f72fa4e","sha512":"f4387ad1cfc222a6a35f9c46b0511d06bedff2e1875a7e4ab74281b52623a8fc934bdcee5aa97c214ecedcf1014beb7709c4f2e3ca2f461903df914775791658","ssdeep":"384:vldNpzwjWdmdQA5VvcM8hMjllll8z1gH/yYBzia+b:/fSWsqOVvcHMjllll2gH/rzia+b","tlshash":"6b82c0274fceb179ebd00cb1265795055bf09974661d4cc8a3b04eece64df1d2464cad","first_seen":"2025-06-30T15:15:02.004218Z","last_seen":"2026-03-30T19:18:20.860582Z","times_seen":49,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/js/chunk-KUZSGAGC.js","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:17.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /js/chunk-KUZSGAGC.js HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/js/main-B6NXVWFN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:17 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 49\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dKRTHpQSAdjzc9mqrvA2a%2BEFNjn95mV4ijmla59D7L%2BsiTpCNquqSvOwDvT0AY9xdXxGxy%2F%2BndXp4PA93JDVo1xCM53AuG2YF8dkdcw%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c2ff6f48c28b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16834084957\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:18.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/destination?id=AW-16834084957\u0026cx=c\u0026gtm=4e61m0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 24 Jan 2026 13:44:18 GMT\r\nexpires: Sat, 24 Jan 2026 13:44:18 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 24 Jan 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 121166\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":345410,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5376)","md5":"c63b6612595ced5847d99f830f5cc53d","sha1":"7ecc59b25d5b9ab47a054054f8f31084976e6920","sha256":"e90425dcea6f6b2fcf75a5bc3f7218a6bdce8dfe775ff8517920c2cf23e8e966","sha512":"4cf1a0dabd024be793e200aea017020356b08f0e12bf81881f0e6f98ddc3799a568d9d9dd54691103592647e1d2f51bbe2b478ee52c57b951dc54f71ecdeaac3","ssdeep":"6144:AJmMvPgQAxJ508RYoeXDIItDmlFldbKKCY5dqmQi3I:UmMngQAxJ508RYPIItDIdq+I","tlshash":"427408cd77d6706683a3b478403f114ba17b6a92f44cc899f186d8e42e74aaa4177f3c","first_seen":"2026-01-24T13:44:59.892467Z","last_seen":"2026-01-24T13:44:59.892467Z","times_seen":1,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-17424319534\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:18.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/destination?id=AW-17424319534\u0026cx=c\u0026gtm=4e61m0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 24 Jan 2026 13:44:18 GMT\r\nexpires: Sat, 24 Jan 2026 13:44:18 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 24 Jan 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 121211\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":345390,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5376)","md5":"059aac11bd3e1de00aa545c12830cac2","sha1":"81b9ba13a31dde5af34e102da8a2a3684f35e97f","sha256":"cd546088377da06b12ca28c48a27336ca8127dae461027cd3e6303e242a3b911","sha512":"fb1d2c4610779b6f64c4b35d246ffeac8c9318a6afdc30acfaadb64b459de1718aa2d00b7d566ee329129eb9442fa0b16116adb5c7feaefe08c7f678fe2be3ee","ssdeep":"6144:EJmMvPgQAxJ508RYoeXDIItDmlFldbKKCY5dqmQi3I:YmMngQAxJ508RYPIItDIdq+I","tlshash":"af7408cd77d6706683a3a478403f114ba17b7a92f44cc899f186d8e42e74aaa4177f3c","first_seen":"2026-01-24T13:43:11.352775Z","last_seen":"2026-01-24T13:44:59.893848Z","times_seen":3,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":139,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-EMMVCEKS5X\u0026gtm=45je61m0v9219467817z89219080431za20gzb9219080431zd9219080431\u0026_p=1769262254068\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=2103141181.1769262259\u0026ecid=2098782552\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGA\u0026_s=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391253~115938465~115938468~116185179~116185180~116682876~116988315~116992598~117041588~117223558~117223565\u0026dr=\u0026sid=1769262258\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fbtchyper.claims%2F\u0026dt=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=5013","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:19.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-EMMVCEKS5X\u0026gtm=45je61m0v9219467817z89219080431za20gzb9219080431zd9219080431\u0026_p=1769262254068\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=2103141181.1769262259\u0026ecid=2098782552\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGA\u0026_s=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391253~115938465~115938468~116185179~116185180~116682876~116988315~116992598~117041588~117223558~117223565\u0026dr=\u0026sid=1769262258\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fbtchyper.claims%2F\u0026dt=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=5013 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nOrigin: https://btchyper.claims\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://btchyper.claims\r\ndate: Sat, 24 Jan 2026 13:44:19 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:170:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:170:0\r\nreport-to: {\"group\":\"ascnsrsggc:170:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:170:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":565,"timings":{"blocked":66,"dns":2,"connect":7,"send":0,"wait":396,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/16872869822/?random=1769262260473\u0026cv=11\u0026fst=1769262260473\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115616986~115938465~115938468~116682876~116992598~117041588~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=GCYJCM_Rv9IaEL6fzu0-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=6~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=7","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:20.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"GET /pagead/1p-conversion/16872869822/?random=1769262260473\u0026cv=11\u0026fst=1769262260473\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115616986~115938465~115938468~116682876~116992598~117041588~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=GCYJCM_Rv9IaEL6fzu0-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=6~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=7 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nOrigin: https://btchyper.claims\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:20 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: https://btchyper.claims\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: gzip\r\nserver: cafe\r\ncontent-length: 983\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1514,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"ASCII text, with very long lines (1497)","md5":"381df0bd8eef90f140a30cbbeda109d6","sha1":"1dbc02b053f5adee4c89a5368f2695022eb99142","sha256":"51ee8249340cbcec5eb34b0df9b789ce92ae2c2ad9065706c887594cd4e50460","sha512":"2d97de97034bae79d466677ef99c4e2e520640ad53e2d8bef4ffcd1380a146011c6dc6cb3f687d6694a7eab7238e5a54f7983ffb5312f14830ed4c596865f3b3","ssdeep":"","tlshash":"1131c9ff56530f6b5313bd4025b4df053f12717b7aa08b5cb499486b15a232e7528ad0","first_seen":"2026-01-24T13:44:59.89454Z","last_seen":"2026-01-24T13:44:59.89454Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/box_1.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/box_1.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-3b58a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2LUyEyNw70%2BfHSYiz6Saggx6MKVz%2B78la%2F%2FVA%2Bz1HJn2635fjYC9NNRKl4Asj%2BKWkh%2BgorPFaqHxSYqmxtiaXqZlE6gc075XFoXlG9w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e13b68b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":243082,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cb51ced710ead1789f0dd1791d996a07","sha1":"f30aa0421ef41611f68714bae43e3c781d45e3de","sha256":"51bffa1f5e3d5c805e07d20816ca8e9e09c1205138d40cc53c97c8860fece7f4","sha512":"8dd13d824a9bdff0c234ef10feb99f2673237ef4ff8ced67668062440890203bb283b3d647f412883b35d4b08c4651a6ff026fd740e1f45559b5c17192161658","ssdeep":"6144:2CgoHMEjkKDERkY3ghOeZDJGH7pezK6Nv071Lu9HAeW:2S3fgkHOelJGNs0xLu9HAeW","tlshash":"3c3423c352abcf8cff08da7dafc610c97de2c30409f66527851a8d6e7142a19d4b6b54","first_seen":"2026-01-24T13:44:15.078254Z","last_seen":"2026-03-21T07:39:27.249897Z","times_seen":5,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":400,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/widget-bg-bottom.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:15.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/widget-bg-bottom.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:15 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:41 GMT\r\netag: W/\"6952a7c5-1112\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R3CsE%2BTZ51gBd%2FeND5EiDNLZlOCuq4y8qD4aBpBV7qplz5N6wQOU1baeMbq87h1I6mGy4XvOTPtQYUBTqMGyORVby5NidTlZSkguJFA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e82baab4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4370,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"de89fd84db48ea5c26aaa29ae5b84dec","sha1":"d6e190327da9394fc3756050d1fba66036726073","sha256":"2e329d4180a2ab2ff24da89653c9da4bd061b23a8232bf8ca691921c913b0b71","sha512":"86d8616828535bef21c4f819c025689f85ed7775cb28c515bb2bcdd41f1e7c973a1ad8ad427c2b8e1054c0649d97f3967417de36e9b4c166ff2f986451199c56","ssdeep":"96:ryje6fs2BW5OCJtW4444YGT8Rri0lmdlqe45QkWov:rue6fs2Y9tZ1iymdlN4mgv","tlshash":"b491185d68318085cbadaf7b72e04ff32e4d1b1f8a7a206c759092bb44ac18c5f1e54e","first_seen":"2025-07-13T15:42:46.573249Z","last_seen":"2026-03-30T19:18:20.893464Z","times_seen":36,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/js/chunk-VJGTFA6C.js","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:17.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /js/chunk-VJGTFA6C.js HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/js/main-B6NXVWFN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:17 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 49\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2BIc0BmurcwbVkPY3K3MEF1ar%2By4jgpdE30w8bCh3CheWE9a3bpQr0%2FhJ7PMQWydtkzidyNkihA2h3Rj1j9old6CQOMuKl50WADYRUc%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c2ff6f3dc19b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/16873008334/?random=1769262260705\u0026cv=11\u0026fst=1769262260705\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115938465~115938469~116682876~116992598~117025847~117041587~117042505~117099528~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=FsgLCPXCzf0aEM7Z1u0-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=9~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:20.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"POST /pagead/1p-conversion/16873008334/?random=1769262260705\u0026cv=11\u0026fst=1769262260705\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115938465~115938469~116682876~116992598~117025847~117041587~117042505~117099528~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=FsgLCPXCzf0aEM7Z1u0-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=9~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nOrigin: https://btchyper.claims\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:20 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\nlocation: https://www.google.com/pagead/1p-conversion/16873008334/?random=1589214048\u0026cv=11\u0026fst=1769262260705\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115938465~115938469~116682876~116992598~117025847~117041587~117042505~117099528~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=FsgLCPXCzf0aEM7Z1u0-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=9~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXiNlGXzEJx89xMQo0mcT2rw4MIg29uITU0\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdRsW2FL8rAbJPQhKuFgNvOhCUouWtoWzOAsDEOKltmCgSyAfklYCqsaAm61\u0026pscrd=IhMIu9fGxKekkgMV9dU7Ah0FdSNrMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhTE5qOS1MZy1tN0V4bXQwRU9lNXVteGx3Tk5RdGRqNDBZc2pTcnZqaGoyZjJBazJWYnVNMUZ6DAgJYggIABAAGAAgAA\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/logo.svg","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/logo.svg HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6952a7c4-60e18\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LsCPXsbv9aLYtabaAw%2Bj%2BWGV2%2B%2BkBTbxeVuUtQcHtuNVv%2FucwipPuILw4O9QRIt5hMI%2FU0t7BLkb4nJsigrbJZ4P3%2BrX9E8PUyxZ2m8%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff6e0db42b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":396824,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"68c9f5c96863e64bff1ceb51262b74c0","sha1":"57feb0648ef26e3f187ae42ed9bf858345fb8b87","sha256":"b282ea58285d187860dcdae2e94c74ddd4856c40bb7966fe91e6986e330d2289","sha512":"f7911dc0372f68906c6ac698b7b4b8c02fbc1bde662f2d6159ae5da59d7fa69fe040362cc3f5aff4f069c81da1a59ca3dc130a2bb6516549f859991e83909b10","ssdeep":"12288:QsIU6rAA8MQk0QwW7kCdvayIZ49Rjt41i:wUkATMQGOC4yxt41i","tlshash":"ee84cf68a46daf6cb7a5494cef11183eac9578dea301c6cf740f72ecd3bb594490ad20","first_seen":"2025-06-30T15:15:02.012864Z","last_seen":"2026-03-30T19:18:20.874457Z","times_seen":50,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":445,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/js/chunk-ZKJSKFQC.js","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:17.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /js/chunk-ZKJSKFQC.js HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/js/main-B6NXVWFN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:17 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 48\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f6nrEsbUlWvfd8t10u5brwzB1GRyt0YzO6NI%2Bbdw6Xyp2Bu089MYerZPtcQ0O5%2BzpeOAv7n4h%2FnRHh2v6zlEjxa94bsbZ7nTZqSPg98%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c2ff6f3ac14b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/bsc-black.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/bsc-black.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-732\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VRcQkr7JHTQMUr23fqQRW3KJSPFqPT8gvVPNm2IfihpD7sA2Sq82255UQp2nLHxwbpN98RRH0hSelP8UhE8mI7KKuneoRBlskSbEAtk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e10b4ab4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1842,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e96444119cca578264ca9366fa3ec06a","sha1":"e82bf88f735b747458d9dbde466066a21a6013bd","sha256":"c3434cbea3a86d294bdbe072a80060aee8bfd0ebdb2e30b7a731a4244017298b","sha512":"1166ad7070a4b4e4a00a631758a5aac6524a445c228c6802b050b8beb0fce0659958ec9bd589fea862e3f066271acd1227403393c1ab79c808bcc7a1ca225fb4","ssdeep":"","tlshash":"35311988e154858bcf14f9017bd7b34c6326c88e859bf88bc4a1aeb541bd4f831334a1","first_seen":"2025-07-13T15:42:46.577395Z","last_seen":"2026-03-30T19:18:20.879083Z","times_seen":35,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/feature_3.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/feature_3.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-2120\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=64uDgWnqZ9y4lKY5b%2BLQufJw0Ll2fmdXcypV53TPLs2DUxIM71uelNwnAJkKilGNy5nDH8zSLfXLBnu31s5gU6ceHcTguF2Mt4WFNXw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e10b4fb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8480,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a292e391e4dd6863b713a26046b7a639","sha1":"0f67691bb8665539b965f8f80d9b00f9bfb02c52","sha256":"357290b7a03fd31e8e60b6bc79aa06fbee7d255ac103d67574b14de59a284f50","sha512":"962a1af7ead4a3b49efd45686a54efef152586054b894140eb89ec38ebce591d17159b874ed132b91e7094959f6c344c43ce3d74a2c119e40c12a9e08d7b429a","ssdeep":"192:oeLRSZTxClijwlqGVwfSfqjPy21YjtU4fG0EVgjmet+G//E:nu5kOP1Y55uVVIme4","tlshash":"3902c0b4a3a8c8808cd1d9d66319537839c85dc790fd48f2ae422d7cb6e626594cb98e","first_seen":"2025-07-13T15:42:46.591062Z","last_seen":"2026-03-30T19:18:20.920265Z","times_seen":36,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g10696554090.co/gr?id=-ORtyZ4EX9WL6_BCPynV\u0026refurl=\u0026winurl=https%3A%2F%2Fbtchyper.claims%2F","fqdn":"g10696554090.co","domain":"g10696554090.co","tld":"co"},"ip":{"addr":"34.120.31.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9508048080.co","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 11:56:55 GMT","end":"Fri, 24 Apr 2026 12:50:09 GMT"},"fingerprint":{"sha1":"39:78:85:0A:96:D8:9A:5F:96:FC:C4:6D:FA:AC:E0:1A:C2:70:1D:74","sha256":"74:26:EF:52:B8:17:C6:C6:95:46:D5:2D:1E:11:E5:34:71:12:26:EF:60:E3:CC:48:1F:8B:46:AA:46:8B:A7:F5"}}},"request":{"raw":"GET /gr?id=-ORtyZ4EX9WL6_BCPynV\u0026refurl=\u0026winurl=https%3A%2F%2Fbtchyper.claims%2F HTTP/1.1\r\nHost: g10696554090.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: Express\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: private, no-cache, no-store, must-revalidate\r\netag: W/\"160-x/Uaxhlk7paBJpHkdyXaTETWawI\"\r\nx-cloud-trace-context: fc1b8f15d654f1080d25e7da20df9d61\r\ndate: Sat, 24 Jan 2026 13:44:15 GMT\r\nserver: Google Frontend\r\ncontent-length: 352\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":352,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (352), with no line terminators","md5":"557e823b66d04d0f5c11b841ef2c661d","sha1":"c7f51ac61964ee96812691e47725da4c44d66b02","sha256":"0b0da5056417904856da4225a1dff25dc012a118530f86903061e7740ead7a64","sha512":"1276f0d37548a82bf7b4ed6820b06e4e30d39a02709afa1978c9669ed6807b256df484e1de6d6a358d9b9168394c4e8b5cc382bbe40d3940d379864e6144da7a","ssdeep":"","tlshash":"b1e048faf1e922117aa3550c2716d80628f39163350e11efd1e01369bdf47dcc1163ca","first_seen":"2025-07-11T08:08:11.891862Z","last_seen":"2026-03-26T00:37:22.466624Z","times_seen":10,"resource_available":true,"data":null}},"time_used":1382,"timings":{"blocked":554,"dns":2,"connect":16,"send":0,"wait":60,"receive":0,"ssl":746},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16834391571\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:18.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/destination?id=AW-16834391571\u0026cx=c\u0026gtm=4e61m0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 24 Jan 2026 13:44:18 GMT\r\nexpires: Sat, 24 Jan 2026 13:44:18 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 24 Jan 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 123700\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":354953,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5882)","md5":"9cd11b12113b2df7240e574b4680855a","sha1":"90366b5cd83558ed215d5449cc81d6fe0a6497db","sha256":"369417b4af36e34d421be60d3d3be99e34529dd91deaac8c6863916004e126bc","sha512":"2a8efb17973fc61ace5bb416e9ba5bd8e2336ced55a2ebbad569d66c4e6794906b177db21cc1ecace8301cafec786f4fcbab8cde7c3cf75707734460b742b83f","ssdeep":"6144:r4JmMvPyQAxJ508RYoeXDIItDmlFldbKKCY5dqmQ0e6:r8mMnyQAxJ508RYPIItDIdqn6","tlshash":"c97419cd77d6742693a3a478403f114ba17b6a92f84cc895f186dce42e70aaa4177f3c","first_seen":"2026-01-24T13:40:10.932704Z","last_seen":"2026-01-24T13:44:59.900593Z","times_seen":3,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16834013568\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:18.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/destination?id=AW-16834013568\u0026cx=c\u0026gtm=4e61m0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 24 Jan 2026 13:44:18 GMT\r\nexpires: Sat, 24 Jan 2026 13:44:18 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 24 Jan 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 121156\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":345416,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5376)","md5":"6ce47ec0795b12942d462693d7b4bb88","sha1":"0dea62a29bc9f229ce76aa1234fbe63120928c55","sha256":"7d23cf369858e20ddd207b7aca96f27fff5d550169d9f00a60da197b89749a35","sha512":"b1ea4e9d6fb28b854705f3f5542e2462a48cf534e0f3035c2f6b8cb7c7cd7c75c3cc9697309ce10aecc4d058d10b876947ddb416d456d2dca1ff0358dd76889a","ssdeep":"6144:XJmMvPgGAxJ508RYoeXDIItDmlFldbKKCY5dqmQi3I:5mMngGAxJ508RYPIItDIdq+I","tlshash":"117408cd77d6706683a3b478403f114ba17b6a92f44cc899f186d8e42e74aaa4177f3c","first_seen":"2026-01-24T13:44:59.901212Z","last_seen":"2026-01-24T13:44:59.901212Z","times_seen":1,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/W3P_White.svg","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/W3P_White.svg HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6952a7c4-68a2\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aziXfVYK4B44l9jDJPN6STIuUW%2FWK6xXBCn2p%2BoWnRgsE0JpDB%2Bj%2F4xZJlrTQuIdMhhFourYKXyMhwSh4fcWTwt6wCBbjAg5rs4ijHM%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff6e10b4db4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26786,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"af474db9e473c491010b6c0ce313d153","sha1":"57dd64ce4ff73f3da0189c5fa64f6cc7edacd2ab","sha256":"cc6dc9edd56326d7b47ed6d43254267480b0676f86fa77ccac2cd4e2294c7eed","sha512":"173711d1b2eaa4f49f65564eb59da0871879f879aa034ab6622f2c26d2950a3cfd11e6682f575173ead14502b3130d70a52448ebf9f16f1ab4e0e9e2f5842ec0","ssdeep":"384:8AWjX04yULMjd4sJkvUIKhKffpAfad0TKCEz1h24OTAneMWZKl0+pn375kzjmR/:ZEFMjd9PIKgpAfBHExh2vTAnYOptki","tlshash":"d1c284ed6b600dd4cdc8c7c7bf1295a97a1ba13f5d65cb28c22cdba83442c5dd912e82","first_seen":"2025-07-11T08:08:11.920617Z","last_seen":"2026-04-14T15:14:08.419501Z","times_seen":50,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/step4-bg.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:15.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/step4-bg.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:15 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-87e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gsJPvpUfZq7hRAK4fSv%2FccTfKBXi1UxSg0ibxpkpHi3JEtCwGl13z1h4gnCyTpW83Gsd9dYxPP4aCHR1s4IUASjvp1HROYHKPASVm40%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e84bb0b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2174,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d3143168669899b9588f74895362b646","sha1":"26e2c368f8d07b345e6620167f828d4a57edbc74","sha256":"4f1adbd0e2adcc0cd6c35438a0ece16a92b557e62b192bcddf83942f2122c6a8","sha512":"18095fff6a3000d6471a95b0e45c998c7bf3954ff1828513fcd2617f92f264c977b0a4654f482a0d0301c2c5272d846687bb5f53fbae553e299479488ee6a3e0","ssdeep":"","tlshash":"d4416c30f33de7adea319abc3b063739db9cbe33129e989c4282200a0b2405d4e00042","first_seen":"2025-06-30T15:15:01.994988Z","last_seen":"2026-03-30T19:18:20.901555Z","times_seen":47,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/faq-box-bg.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:15.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/faq-box-bg.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:15 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-2d12\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gvnQh1S%2BTo4cBr8ggLOu7drzj2jxxLc1V4eEwwOHwoK2A9Cj3ZXjkLMoMo9Su1tlUfUqoFEw0Q6dWNEXCW5oyOXKP99LtCBUAJ833uU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e8dbbeb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11538,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1ec2f69bd81d7934021b3418e3dc4eb5","sha1":"5031cfbb166f663f1a82bf6ff7b37fc651513409","sha256":"d9c6b5f6a09f0c3a83007151cbafe2844c49e9d13d146a244da71384652850b1","sha512":"1885f59459e9fe80255ce40da4405b2270a83da351b24d9ed3d07b87c2555e18f1e65839c45fb9d234a1d579ca9c46dba43aae1f3e6e3418f8e0a4ec99b7b0c0","ssdeep":"192:wwZDGNHNeKxfQO0YFlVcwlyd3oKvLu0K4EUdpeB6KF2TMO67cgiQXxEnIpngqM5x:ww9GyKJQO0YZUR+Xd5BNFGD679lBEnMO","tlshash":"1232c0599564107dcac16a38f83017c7fe3ed4b1556b268fea0610b22700fc6de94fad","first_seen":"2025-06-30T15:15:02.005084Z","last_seen":"2026-03-30T19:18:20.848023Z","times_seen":52,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdp-cdn.vizibl.ai/public/pxl/500022.min.js","fqdn":"cdp-cdn.vizibl.ai","domain":"vizibl.ai","tld":"ai"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:18.298Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /public/pxl/500022.min.js HTTP/1.1\r\nHost: cdp-cdn.vizibl.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":86,"dns":0,"connect":4,"send":0,"wait":0,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/pagead/1p-conversion/16873008334/?random=1589214048\u0026cv=11\u0026fst=1769262260705\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115938465~115938469~116682876~116992598~117025847~117041587~117042505~117099528~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=FsgLCPXCzf0aEM7Z1u0-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=9~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXiNlGXzEJx89xMQo0mcT2rw4MIg29uITU0\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdRsW2FL8rAbJPQhKuFgNvOhCUouWtoWzOAsDEOKltmCgSyAfklYCqsaAm61\u0026ipr=y\u0026pscrd=IhMIu9fGxKekkgMV9dU7Ah0FdSNrMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhTE5qOS1MZy1tN0V4bXQwRU9lNXVteGx3Tk5RdGRqNDBZc2pTcnZqaGoyZjJBazJWYnVNMUZ6DAgJYggIABAAGAAgAA","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:54:04 GMT","end":"Mon, 23 Mar 2026 19:54:03 GMT"},"fingerprint":{"sha1":"79:6F:61:ED:85:71:D3:03:AF:65:A2:06:5F:BB:34:EA:21:15:9F:B6","sha256":"4B:DF:16:AF:B7:35:08:DF:0B:C5:AF:B6:BB:CA:F4:32:78:1C:B7:4B:BE:2D:E3:AE:55:3D:F5:3B:E0:D2:A6:AB"}}},"request":{"raw":"GET /pagead/1p-conversion/16873008334/?random=1589214048\u0026cv=11\u0026fst=1769262260705\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115938465~115938469~116682876~116992598~117025847~117041587~117042505~117099528~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=FsgLCPXCzf0aEM7Z1u0-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=9~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXiNlGXzEJx89xMQo0mcT2rw4MIg29uITU0\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdRsW2FL8rAbJPQhKuFgNvOhCUouWtoWzOAsDEOKltmCgSyAfklYCqsaAm61\u0026ipr=y\u0026pscrd=IhMIu9fGxKekkgMV9dU7Ah0FdSNrMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhTE5qOS1MZy1tN0V4bXQwRU9lNXVteGx3Tk5RdGRqNDBZc2pTcnZqaGoyZjJBazJWYnVNMUZ6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/news_3.svg","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/news_3.svg HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6952a7c4-2178\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LMqQym4Rh8%2BgY0%2BUS8HGggF7L6Fi7evCrKr84Cx2XDO5FrHtn%2FUpb5VvSJlS6lZkxf6Fp1hPQiKDf%2BWjfBhz2RKcFly%2ByQTlm6h%2Fgqw%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff6e12b5db4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8568,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6aaf4d0f2689c53f0321bbc229d5e88a","sha1":"88906c54b35e3480fffb2c37718f6420fa4d499b","sha256":"91414e7f59ac94d78ee620bad2cb4f5044c0a5e44afe1c07dd7c3eceaf463e1b","sha512":"f28a4abdf550c4844b4ae55d20b8a28786f1ac49eacec245f9cbd00cd10410559724d1e63c59566c16aaad2f446aa75bb027c63e0d804900b3e1890cb7d5ec2a","ssdeep":"96:5JZOT9fEM6x2LUW7ZWtJP5KkgbmhtyHJcCkFBQhwa2xokREVX830QuqwA4w:TkTX68LUW7ZWvRKkKnHJcXWrVij","tlshash":"5302a3ea7790a2f4e842f7e0aa251475f52b34fe6b51cb94cb955f047aa10adcc8ccc4","first_seen":"2025-06-30T15:15:02.001775Z","last_seen":"2026-03-30T19:18:20.922164Z","times_seen":29,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/feature_1.svg","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/feature_1.svg HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6952a7c4-47d6\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VO8ixCaIlkrKHrBRGTBWsVB2sHPYB3CCt79rJcYIrvQfQn2DaWaawk25j1f0wyvroLn9s1wxsjDoHfvaa3KQjq1P3oBjFlCbZg3gNqo%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff6e10b4cb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18390,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"33ad5cd8664058deb0696e5f2af06585","sha1":"33c29d1445d96b27fa1b0f9c8400094c066305a1","sha256":"39812747361f0070522a7f53d8ed32a24255a08f3c6015d2be85aa484c5b996f","sha512":"193ff0b85d223bbf8fd8a51b81568806c52114f622c5f5fe1063843009d95363956ccea22b08f10c2456879e53020ba9d08467798700315777e299a83cb5a507","ssdeep":"384:WMcRz57NDjr+c3V5YBf7n1iSmdvV3XNDZR7boQeHJ0:WMcRF7FF3UBfpyZV3pZpFF","tlshash":"ea82d8c473eda3e0e905ebe4ce25a475bf1f14f6ae61c6b8c3a92c54b41546d8d88cd0","first_seen":"2025-06-30T15:15:02.017507Z","last_seen":"2026-03-30T19:18:20.898247Z","times_seen":48,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/box_5.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/box_5.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-33860\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nh3b3SiJd3KIrLrNV68D1O9Smsd%2BhgVal5lotTHRhi6EDx2Hwl7k0HJYk45bc2tfALO8%2FO9X%2Bj0lO011oqMm86Gr3bgKa4vWC1Yw0%2Fs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e13b6bb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":211040,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"672cbb3760c7bdf225783e7dcfe43ba1","sha1":"2fdede06157c60e9065463b368b291c9f283e720","sha256":"7f0bc1766d6747ad8060efb2346c6719dfeb2622c70af124278d0231f4345594","sha512":"893c3c48d2e6b0d1fa86a57800c8bb1eab274736dcfd9e384c4260ca8b406631becb74bd87f7bde44586b7ae4d1ff82c9be50a013b45b1cbaedb791009ccd93f","ssdeep":"3072:fon0LfgCfBaEmC0OBIJJenk7MN3VoL0LJOsNtcMo5Q19WSsMYWK3HD/edglWFLt:fon0sgBaCBnPN3VoEYdX5Q1Ur0glWBt","tlshash":"b0242373221e0905ef2808f3d70b6a4eaff3c269754889d23da3114af5d59c8fa0b567","first_seen":"2025-11-17T23:01:41.548382Z","last_seen":"2026-03-21T07:39:27.333734Z","times_seen":6,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":379,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/js/polyfills-NBDDOQXD.js","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /js/polyfills-NBDDOQXD.js HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:41 GMT\r\netag: W/\"6952a7c5-fc90\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b9dsUUt6WgEL%2FQfgXYUYqqnZuLV8RLwWtDhrgT863mG4lpKZIzUsK07qsOFOajQCRpXOibUi49Dpgn%2FzTT8puGbPR0pezrUkIgRuz0I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e14b74b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64656,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (58843)","md5":"a53ce02f5d4c4d451a3090de0d4dad33","sha1":"65c351110c0ee5a28b438062fd4b24b0ac9865de","sha256":"aeec55b92429d3df5171089e170c5725cee5ea8dfb27985757eea5f4a92e56b8","sha512":"432eff08ee726f3febc1c0085682beb18b5eb2aa3feca19937e25ec0ddad39aed46fe878325da4ea9215f37615b1ca7f4b1003c75a7c3a7f3b3c204367c67e9c","ssdeep":"1536:o241SxrMPmNLmVNVa3HOLfs/AOTkGOUtB:/4KrMO6aeQTRB","tlshash":"fb53e6d5b796b07343ea61a1407b840bf27aadb8680c089cf554e4fb287548995fff38","first_seen":"2025-09-17T02:28:10.490912Z","last_seen":"2026-03-25T16:50:25.803105Z","times_seen":11,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/faq.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:15.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/faq.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:15 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-27144\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BokfG5K8GsdDI2TtWgp6MQM8AtkSeCdAvnyYfUQfN%2BvMrkqpCm%2FxyPlwKlgzIe2VyBUNUXkFAkSAmyNlcFLC7OYQHUKv2%2BKrQKfLMfc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e8dbbdb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":160068,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c301b75fbb7dfa62ae839177e647a633","sha1":"93c4e2b1b0c8df5b98efa99176659dd1cbe3591d","sha256":"636b96fdac0eb9cc39153b9394ddcb46b05f92680cfd38efa03973edee3a882c","sha512":"fc1745a43ee0830356e06df36df8586f268519ea46858a5b4314dec225d4d0d270f67b11fb9a0426df2493ea4ad13fe615fbe7d64d8e837c47533bf1442e2826","ssdeep":"3072:pBb3Sbs2c0LbcTIm0aTO16CFeCrWkOSMiAdNtpulxmWMqj4Y1vdRJEYx:33SO03ctD2HLakOSwXLuzlv/bx","tlshash":"cbf31200a10ad336c3d4bdfd5751aebc6d21d6b54c1edea5c8894ac30af602bdfb0885","first_seen":"2025-06-30T15:15:01.986874Z","last_seen":"2026-03-30T19:18:20.90224Z","times_seen":54,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-EMMVCEKS5X\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:18.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/js?id=G-EMMVCEKS5X\u0026cx=c\u0026gtm=4e61m0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 24 Jan 2026 13:44:18 GMT\r\nexpires: Sat, 24 Jan 2026 13:44:18 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 144633\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":437645,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"c77c980cdb3d1ea105de54a17104c0b5","sha1":"5b5c8f1eba7017ff5c651d78f33cd01d23d87f88","sha256":"af38772eac993533702758bb977d3f06899e6e2fb2eac67ee2ae8b946d1531f9","sha512":"35f7e9ef36c4051c60c225ed14c89e2f6c57afdd9ae61ab693a70f5b259f79bd59033092c42f22a66ba24b93076876aad5d81a79f701d09cf088c7b370d4190e","ssdeep":"6144:7XJmMvkbBQAxJ508XYoeZlzlFldbKKCYTdqb0NqB7Xh:dmM8bBQAxJ508XYNljdq3h","tlshash":"c99419ce73d670269396f478502f118ba57b29a2b45cc89af1c9cce01e74a9a4137f7c","first_seen":"2026-01-24T13:44:59.908004Z","last_seen":"2026-01-24T13:44:59.908004Z","times_seen":1,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16834301606\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:18.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/destination?id=AW-16834301606\u0026cx=c\u0026gtm=4e61m0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 24 Jan 2026 13:44:18 GMT\r\nexpires: Sat, 24 Jan 2026 13:44:18 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 24 Jan 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 123694\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":354744,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5882)","md5":"02cca74291c5b62cd0c72fbd48dd91fc","sha1":"fd019464121458c2a972689e1e79efda98e28dab","sha256":"f2b7e06ada8d38e040377621ef63ecd14d268a098a12c803d2015fb21337732d","sha512":"dea857f72cbf1970ea161487cc9647181d4ce6f1be8c097d21fcb25e87c5fd0f11de89309e1ed69a10cbce5bdfd224c5746c0a7f8b471275bd9636b07c2b81a3","ssdeep":"6144:OJmMvPyQAxJ508RYoeXDIItDmlFldbKKCY5dqmQ0e6:mmMnyQAxJ508RYPIItDIdqn6","tlshash":"a87419cd77d6742693a3a478403f114ba17b6a92f84cc895f186dce42e70aaa4177f3c","first_seen":"2026-01-24T13:44:59.909191Z","last_seen":"2026-01-24T13:44:59.909191Z","times_seen":1,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/blog2.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/blog2.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-10d2e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pnvsn%2BbnwU981ORIQftyzOXLj2MFNr2jKBEt4Bnin59OydqL2tnIEbGASvwBIZAi0K0T%2Fd%2FpJSeaCphcYguk2eZlB6quPMoR4zsw%2FqU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e13b69b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68910,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"33c2ed43bc4d0eb2191a5f3f5dc46db3","sha1":"c047c16bdccb2b2c00cee514fd42d19f821e66fb","sha256":"d9af4b172c509d9d4dc51fc353a8d0a37e2b0db5d73b3828277538396ab7eca8","sha512":"2463bae941b88c4ac2f48a96b83a53d697737b68017ada3a91fc218cc39f941ffe05dbaf8fa15fdeaef57251b07632f32525ae93690343d036cb90d38bb74e5e","ssdeep":"1536:s4hKSJxrf7ol3ogNyCVxyGx807JJWkwt188pWKE4xyAFtoQcq/fR:vKYjBgNlVx58cJMkI8vN4xZcs3R","tlshash":"b26302e9f0e7352ffb41f3f4b6996e1121b1b003926b63d1c69328904b29e5458af394","first_seen":"2026-01-24T13:40:10.894967Z","last_seen":"2026-03-21T07:39:27.230202Z","times_seen":10,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/widget-bg-top.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:15.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/widget-bg-top.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:15 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:41 GMT\r\netag: W/\"6952a7c5-2be6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dxr5ji4pDVLe79j5Dtx0AcFffPvlcOjTN6%2F8jCQ0z2Jqv9J9Jl9U76%2Fex0olr9MtrvvRZG89eKB24skD0Oxq%2F6MZXwJrYdB7yUBDw3E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e81ba9b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11238,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4eed43d91c38a4205f7ea68540bf76c7","sha1":"02f85099551971664d40fd6b3f7cf9b823f3818c","sha256":"b191b2f218b09c1f7bc62089f2fd96df07593e3b2a1cc373506bd520d27e87d8","sha512":"7c332cf1b3038146b99cfe4c97538847703f75b27a24686ab66f2a988c60bc15299d1af1da83240d6e804504960ef9426339eb33a4efd8de52cb2a9b3df53927","ssdeep":"192:tntC2wXy2P3lDvaNMuTvTseFl6XWrsvgRC+zhsCS4c+HsaQ3+hr/cm:J0jy2P3tCvvxTAx+iB+Xhr/cm","tlshash":"3332af7806ef043fcad253583cf78887d657440a1d829e096232e6de246b9b6d7b3ce5","first_seen":"2025-07-13T15:42:46.685518Z","last_seen":"2026-03-30T19:18:20.876051Z","times_seen":36,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/banner.gif","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:16.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/banner.gif HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 711384\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: \"6952a7c4-adad8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VoOpE4fXwOuQFxYuwP39%2BCf9%2FwRf6QLbl8vTxU1p1i5wF8bzMGDZaOVQMzw4rHMGkfY7VmGw66rswt9J2zERjm8%2B5%2FOrac0aSiA5bRc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6ec3bd8b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":711384,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1476 x 366","md5":"4add897377db5ab6d5726633c09a0529","sha1":"ea9569cccb8112012792411e25d2bc5cd3e09b37","sha256":"3b1b28aa77e355c1de644da79ad3725726565cc2aa1ec1b55e1a9a5cb83f0caf","sha512":"8be07eb86ef7a8e6349cfc1327376dd977451e3a69e8044602b44e0b36de539a137ba577d1e2110a522916fec26c8efc778d53266316bc7aafedb0cfdee2fbab","ssdeep":"12288:TWFK6GvNZWgg8JvW6EtRlAnkxklbQC339iH5C6JydQ2TL89dOggnPmdB:TWFKnQ8JO6orGkOQc3AgdQ2f89dzgPY","tlshash":"42e4238bde09e3860926fce095c20375e87a34d11ce5c226825c787e216ba5af51dfdf","first_seen":"2025-09-17T02:28:10.45978Z","last_seen":"2026-03-29T15:46:36.825589Z","times_seen":24,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/835852369/?random=423711207\u0026cv=11\u0026fst=1769262260236\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v894086075z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115495940~115616985~115938465~115938468~116185181~116185182~116682876~116988315~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=PIZ6CKbRvtIaENGwyI4D\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=4~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXh3aVs1nR_PCEOwujZJmOI6GQlYzSmFT-o\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdTWad7mj_-wR4Pbzcx-I4dnsDD1hLUB_ijf8mDWzwej-7o5ol1o4uAaApf6\u0026pscrd=IhMI1oepxKekkgMVefU7Ah208RS9MgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhbU42Z2Zya0JLb0lBVld1QmJScDlEUWJzZHVwSVZBZHVlRkwxR3RvXy10dWlqblFMUUdGTnF6DAgJYggIABAAGAAgAA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"GET /pagead/1p-conversion/835852369/?random=423711207\u0026cv=11\u0026fst=1769262260236\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v894086075z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115495940~115616985~115938465~115938468~116185181~116185182~116682876~116988315~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=PIZ6CKbRvtIaENGwyI4D\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=4~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXh3aVs1nR_PCEOwujZJmOI6GQlYzSmFT-o\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdTWad7mj_-wR4Pbzcx-I4dnsDD1hLUB_ijf8mDWzwej-7o5ol1o4uAaApf6\u0026pscrd=IhMI1oepxKekkgMVefU7Ah208RS9MgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhbU42Z2Zya0JLb0lBVld1QmJScDlEUWJzZHVwSVZBZHVlRkwxR3RvXy10dWlqblFMUUdGTnF6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlocation: https://www.google.no/pagead/1p-conversion/835852369/?random=423711207\u0026cv=11\u0026fst=1769262260236\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v894086075z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115495940~115616985~115938465~115938468~116185181~116185182~116682876~116988315~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=PIZ6CKbRvtIaENGwyI4D\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=4~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXh3aVs1nR_PCEOwujZJmOI6GQlYzSmFT-o\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdTWad7mj_-wR4Pbzcx-I4dnsDD1hLUB_ijf8mDWzwej-7o5ol1o4uAaApf6\u0026ipr=y\u0026pscrd=IhMI1oepxKekkgMVefU7Ah208RS9MgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhbU42Z2Zya0JLb0lBVld1QmJScDlEUWJzZHVwSVZBZHVlRkwxR3RvXy10dWlqblFMUUdGTnF6DAgJYggIABAAGAAgAA\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/16834013568/?random=268863216\u0026cv=11\u0026fst=1769262260797\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115616985~115938465~115938468~116682876~116988316~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=kR3sCO6z-IgbEIDTits-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=10~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXhirtVeH2XxFfnr7QhkpwqDDpNfKnolzbU\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQCDjELsoOQBSICPgtdz2It36bdLzu-V081xCbpoeQzGhxBarab7QYaAmKH\u0026pscrd=IhMIx-DMxKekkgMVt907Ah1koh0wMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NiZFQtVEtjcDE0YUJDRGtORG5VUWU5Y1JOcC1rb3Jybi1QMVVyOUxuc25TXzhhSE1CaUpxcjB6DAgJYggIABAAGAAgAA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"GET /pagead/1p-conversion/16834013568/?random=268863216\u0026cv=11\u0026fst=1769262260797\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115616985~115938465~115938468~116682876~116988316~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=kR3sCO6z-IgbEIDTits-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=10~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXhirtVeH2XxFfnr7QhkpwqDDpNfKnolzbU\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQCDjELsoOQBSICPgtdz2It36bdLzu-V081xCbpoeQzGhxBarab7QYaAmKH\u0026pscrd=IhMIx-DMxKekkgMVt907Ah1koh0wMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NiZFQtVEtjcDE0YUJDRGtORG5VUWU5Y1JOcC1rb3Jybi1QMVVyOUxuc25TXzhhSE1CaUpxcjB6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlocation: https://www.google.no/pagead/1p-conversion/16834013568/?random=268863216\u0026cv=11\u0026fst=1769262260797\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115616985~115938465~115938468~116682876~116988316~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=kR3sCO6z-IgbEIDTits-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=10~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXhirtVeH2XxFfnr7QhkpwqDDpNfKnolzbU\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQCDjELsoOQBSICPgtdz2It36bdLzu-V081xCbpoeQzGhxBarab7QYaAmKH\u0026ipr=y\u0026pscrd=IhMIx-DMxKekkgMVt907Ah1koh0wMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NiZFQtVEtjcDE0YUJDRGtORG5VUWU5Y1JOcC1rb3Jybi1QMVVyOUxuc25TXzhhSE1CaUpxcjB6DAgJYggIABAAGAAgAA\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/trust-moon.gif","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/trust-moon.gif HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 70623\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: \"6952a7c4-113df\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zI3RQClMtcrPjKPjciI0h0OutGrA0uX9%2FG3QIFJFQ1cii08KfvIOGOZesaAHR2Dw0PYcZ3U60Boo77uTjo6gMQe%2FpRWkqj3ErfAbwL8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e10b4bb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70623,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 500 x 382","md5":"8fb63ac1d31c5bf85f0cf58c88da5978","sha1":"2660538842a82d66857dace5d1981e9af9f2bf07","sha256":"e0e0368bfeaebb5f2f5b2b04b6c8f2378c05d4367f57cd612139f1bf5388bed8","sha512":"743af4cb30a119f422c364b7b31a4012dfd5e3cc1c8294039de6a26b1e4d914b0ec044e658c401c772807de39842aba024fdb04b6a3592985b70632674d1289a","ssdeep":"1536:BB9aK2FbPAUwKr9oWry/+Bs7sv5Abhu6Cc78wpl4lAW0pauEHRkmoV5i:z9aKuwOmWs7sqbRdIA4GJauUJoV8","tlshash":"0263016e51e6e7417d29a4293b0a30a5dea13cd48bfd7a33a680fd716fb3919d0d0c02","first_seen":"2025-09-17T02:28:10.375124Z","last_seen":"2026-03-29T15:46:36.773005Z","times_seen":24,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/bitcoin-layer-card-bg.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:15.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/bitcoin-layer-card-bg.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:15 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-dd6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NBXoamhEUKqKpjBxUNQhRWRkmfSXnI6vd7DkX67fBGA5JJbx3AA5iJXFxutvzxH16J6iC%2BtqyNe6y%2F5mOF2BY4LotUFC2bYNYueZ45s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e83baeb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3542,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 700x420, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b8a0ad1a29a8222233edc9d3f766542c","sha1":"8969636b797d9f4cb5c1195aceb458a9399443b0","sha256":"db5793fc7274fe950c08b56e810d2f171f5d63a00f55134230b58d05fba2d8b4","sha512":"97c0c3f5f4489b37142255961d6fcce4abadf5cbb6b876c7a7615d425618e611077280b512cf857293992d020b346799b8afd9d3ec666b589650ded69966f4ff","ssdeep":"","tlshash":"b4713cbbfd6451421c2ab19f8c367f61ef8bb195f81d5c751c087cea866be84b470501","first_seen":"2025-06-30T15:15:02.020789Z","last_seen":"2026-03-30T19:18:20.895351Z","times_seen":55,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/slider-running.gif","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:16.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/slider-running.gif HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 94162\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: \"6952a7c4-16fd2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0BHDlE8L83m31qdrsoeBgfH6%2FEoybcSKMAR5KkW4zuDZ6NiN2BAlMjcfU%2FyLWhFlK4Bpd7urQFmGYBUlHgA1knmBYnJR40wg3oU%2FRIg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6ec3bd7b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94162,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 400 x 400","md5":"3c36a8f49cc9b14d8c1b2ced90aa5db5","sha1":"8bc32b06c3a9bcfc9b6eea334bae4be82e9ceba1","sha256":"3ea02e520751c4a8bcffc3110e5a17e161f60d4fbb4b8fff226738a99200215e","sha512":"ea0ed6dd29bb53c29d58fd52088f1ea41c06b3ddce5c45e49a5b49e19363e0f1bf6ce4336b85780f3ed90942b1a993e69398ffdb5d1e4915131cba15c2bd43e7","ssdeep":"1536:no8vA2hFWpgZXUnpaHVXUO4i9Q+8vAjVwRp/5ZGc3Fz2ziMtKifiZejgdj6v:nM27WoUnpaHdUOn9rjVcnJFz2ziY6ZE9","tlshash":"7d930244e05257ca2682101dbec678ce7eee6dc256f9c9ae8063f39e5c1812094f9d9b","first_seen":"2025-06-30T15:15:02.010664Z","last_seen":"2026-03-30T19:18:20.897506Z","times_seen":49,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/js/chunk-XUBYNRCG.js","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:17.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /js/chunk-XUBYNRCG.js HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/js/main-B6NXVWFN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:17 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 49\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2BkjjRqbmX5duEj25Q8U99hSiFByxg02eXxSfgUG%2BdS3yHoXHJt%2BZ5a4fw%2BLs8L7QZq%2BWTHVN7sDHbU2YrcayLkCG1edo36bu8I3ZYA%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c2ff6f3ac13b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/box_2.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/box_2.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-1442c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5srdRdZThu5gUuHzgnHjM6f7KXxGOVGaJMuyJxiUdb7syflPZ8riSB0GYUMWhMBratf4kH%2BEzSZ5hGzdJvFe721FAkqtxi%2B4bKy5Ocg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e13b6ab4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82988,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"00b931babaf396450fe554dda4ca7dc6","sha1":"f3084438894987fb657bfc2e112e5670a7f05d2f","sha256":"fc895c9a312c5bc0e24ebbcde0f3a42a4ee3151e5bcbac06c4abc741221caf78","sha512":"48a3584b4a6038c897f6d77b66f2796e3fc437a8a673684f2b5175287d2c3ffcc0e09270311be5fca96e91116a5fa886d31437afbbed9898e54b5432015f8199","ssdeep":"1536:bMrooLuRDOK3kuIC8u0UhWGMvPfto6hP2KNvqNNbE4clG6bPrdvoboVCM3INqor6:xc0OOk+x0U5U3dPr9CItRrdogW10esII","tlshash":"5683123fa4b7b3bdf381b1f029f80b595629482712201ef3418552bc6257bf646559cf","first_seen":"2026-01-24T13:44:15.090522Z","last_seen":"2026-03-21T07:39:27.244097Z","times_seen":5,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":271,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-TPPZP8J6","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:15.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtm.js?id=GTM-TPPZP8J6 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 24 Jan 2026 13:44:15 GMT\r\nexpires: Sat, 24 Jan 2026 13:44:15 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 24 Jan 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 140257\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":465330,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (56915)","md5":"fd8466282857f4e846058c6c49f31a6d","sha1":"b70dfc837896e29f6e8017daf2206b3c2c2dd3d3","sha256":"27ff0b570c65b5902e503da23ad97a469d0f8325acd006d95f56175122cb31dd","sha512":"da609caa39123817643aff7df98c655f1c943d33f116a18bb4cea1538a21bc01a26cc32396e6a6ccf757a98041705f1e5aa54b6b2b1b81c802b408237c27cf17","ssdeep":"6144:EvjKpRUlrJmQvKHQAxJ508RYoeXDIItDmlFldbKKCYvdq7wiDivE:iBldmQSHQAxJ508RYPIItDwdqYE","tlshash":"eea42acdb7c6747ac3a2a474903f114b663a29e2b54cd895f089cce42e745aa1133f7e","first_seen":"2026-01-24T13:40:10.994965Z","last_seen":"2026-01-24T13:44:59.916895Z","times_seen":4,"resource_available":true,"data":null}},"time_used":539,"timings":{"blocked":56,"dns":212,"connect":7,"send":0,"wait":22,"receive":35,"ssl":199},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16873008334\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:18.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/destination?id=AW-16873008334\u0026cx=c\u0026gtm=4e61m0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 24 Jan 2026 13:44:18 GMT\r\nexpires: Sat, 24 Jan 2026 13:44:18 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 24 Jan 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 121210\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":345390,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5376)","md5":"1a76a2e9fe6070072c6a75dc0875b222","sha1":"921789f692a0f12c835012223b3238b66e28292a","sha256":"2b58f45a56c7395371e89ae8668ee4452483df5d84d4596d59417382bab05643","sha512":"abcdbfff5d95708b1ec3fe9f572a3f700b7f2a3bdb80dbbe8d2bd1630720db942bd73fa22e91f322f76520b1ad56eaa9a69001c87d27655cb6ffc09e9e3edd8f","ssdeep":"6144:kJmMvPgQAxJ508RYoeXDIItDmlFldbKKCY5dqmQi3I:4mMngQAxJ508RYPIItDIdq+I","tlshash":"847408cd77d6706683a3a478403f114ba17b7a92f44cc899f186d8e42e74aaa4177f3c","first_seen":"2026-01-24T13:40:10.923311Z","last_seen":"2026-01-24T13:44:59.917711Z","times_seen":4,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/835852369/?random=1769262260236\u0026cv=11\u0026fst=1769262260236\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v894086075z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115495940~115616985~115938465~115938468~116185181~116185182~116682876~116988315~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=PIZ6CKbRvtIaENGwyI4D\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=4~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:20.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"POST /pagead/1p-conversion/835852369/?random=1769262260236\u0026cv=11\u0026fst=1769262260236\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v894086075z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115495940~115616985~115938465~115938468~116185181~116185182~116682876~116988315~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=PIZ6CKbRvtIaENGwyI4D\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=4~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nOrigin: https://btchyper.claims\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:20 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\nlocation: https://www.google.com/pagead/1p-conversion/835852369/?random=423711207\u0026cv=11\u0026fst=1769262260236\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v894086075z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115495940~115616985~115938465~115938468~116185181~116185182~116682876~116988315~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=PIZ6CKbRvtIaENGwyI4D\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=4~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXh3aVs1nR_PCEOwujZJmOI6GQlYzSmFT-o\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdTWad7mj_-wR4Pbzcx-I4dnsDD1hLUB_ijf8mDWzwej-7o5ol1o4uAaApf6\u0026pscrd=IhMI1oepxKekkgMVefU7Ah208RS9MgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhbU42Z2Zya0JLb0lBVld1QmJScDlEUWJzZHVwSVZBZHVlRkwxR3RvXy10dWlqblFMUUdGTnF6DAgJYggIABAAGAAgAA\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/17159929999/?random=1769262260545\u0026cv=11\u0026fst=1769262260545\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102015666~103116026~103200004~104527906~104528501~104684208~104684211~105391252~115938465~115938469~116682876~116988315~116992598~117041588~117042506~117099529~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=KXyNCPzBidQaEI-Bv_Y_\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=7~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:20.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"POST /pagead/1p-conversion/17159929999/?random=1769262260545\u0026cv=11\u0026fst=1769262260545\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102015666~103116026~103200004~104527906~104528501~104684208~104684211~105391252~115938465~115938469~116682876~116988315~116992598~117041588~117042506~117099529~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=KXyNCPzBidQaEI-Bv_Y_\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=7~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nOrigin: https://btchyper.claims\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:20 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\nlocation: https://www.google.com/pagead/1p-conversion/17159929999/?random=1290149443\u0026cv=11\u0026fst=1769262260545\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102015666~103116026~103200004~104527906~104528501~104684208~104684211~105391252~115938465~115938469~116682876~116988315~116992598~117041588~117042506~117099529~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=KXyNCPzBidQaEI-Bv_Y_\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=7~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAgim3bEC\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXhkaaakf9pGfobAzfrhZLI9eVHye9W3aXE\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdSxwHDZg4taitKFoSi5FfXd9Bd-OP1sM6-RdMKDdRZ1M7XegF9aMy8aAnrw\u0026pscrd=IhMInqDFxKekkgMVEwmiAx3abA-7MgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NZU20zZVNTdjdHZFpzdjJWemZ6ZTJ6MUl0OWY1Y2JEc3Z5aFZlWFVLWGFZUnlndjNYbmRJbnB6DAgJYggIABAAGAAgAA\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/16834301606/?random=764186652\u0026cv=11\u0026fst=1769262260975\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v9221964488z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391253~115495939~115616985~115938465~115938468~116185181~116185182~116682876~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=bMbECI3dzdIaEKadnNs-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=12~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAgiC3rEC\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXhUVmrwaz3dj8t4Knsixl4sM4jiJ03yYaU\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQesMOixXNTTfyuHJD9rScInjsXtgJxc9x1K3EO_jbxCX2jZ8kjUjYaAjcn\u0026pscrd=IhMIio_VxKekkgMV0Yj0Bx1f2QgEMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhZnRueWI1cGtoLUpxdTlmWFotVnludEVSMFVnS2VucHRORlNWUUZKYzU0U3ZFeFJOdENHT0R6DAgJYggIABAAGAAgAA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"GET /pagead/1p-conversion/16834301606/?random=764186652\u0026cv=11\u0026fst=1769262260975\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v9221964488z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391253~115495939~115616985~115938465~115938468~116185181~116185182~116682876~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=bMbECI3dzdIaEKadnNs-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=12~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAgiC3rEC\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXhUVmrwaz3dj8t4Knsixl4sM4jiJ03yYaU\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQesMOixXNTTfyuHJD9rScInjsXtgJxc9x1K3EO_jbxCX2jZ8kjUjYaAjcn\u0026pscrd=IhMIio_VxKekkgMV0Yj0Bx1f2QgEMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhZnRueWI1cGtoLUpxdTlmWFotVnludEVSMFVnS2VucHRORlNWUUZKYzU0U3ZFeFJOdENHT0R6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlocation: https://www.google.no/pagead/1p-conversion/16834301606/?random=764186652\u0026cv=11\u0026fst=1769262260975\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v9221964488z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391253~115495939~115616985~115938465~115938468~116185181~116185182~116682876~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=bMbECI3dzdIaEKadnNs-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=12~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAgiC3rEC\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXhUVmrwaz3dj8t4Knsixl4sM4jiJ03yYaU\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQesMOixXNTTfyuHJD9rScInjsXtgJxc9x1K3EO_jbxCX2jZ8kjUjYaAjcn\u0026ipr=y\u0026pscrd=IhMIio_VxKekkgMV0Yj0Bx1f2QgEMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhZnRueWI1cGtoLUpxdTlmWFotVnludEVSMFVnS2VucHRORlNWUUZKYzU0U3ZFeFJOdENHT0R6DAgJYggIABAAGAAgAA\r\ncontent-type: image/gif\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/16834084957/?random=1931871345\u0026cv=11\u0026fst=1769262260873\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115938465~115938468~116185181~116185182~116682876~116992598~117025847~117041587~117099529~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=r1WWCIDKv9IaEN2Aj9s-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=11~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXgMpaigvLXrHmTEu96oMqBbThlwzd8AJUM\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQbcORBo6GOyOVPlCrs4c02_Ev5fZBoZel_yL2YDw73LLBjBW68fGUaAu8r\u0026pscrd=IhMIveLOxKekkgMVUQyiAx2OuyFtMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NaeVZnVTh4a2lvUkZmSHA4dVVMcGtvMXJFTnVWNFNraWUtUmR1VUNKSHVQTF9wYml0QkRPaU56DAgJYggIABAAGAAgAA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"GET /pagead/1p-conversion/16834084957/?random=1931871345\u0026cv=11\u0026fst=1769262260873\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115938465~115938468~116185181~116185182~116682876~116992598~117025847~117041587~117099529~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=r1WWCIDKv9IaEN2Aj9s-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=11~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXgMpaigvLXrHmTEu96oMqBbThlwzd8AJUM\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQbcORBo6GOyOVPlCrs4c02_Ev5fZBoZel_yL2YDw73LLBjBW68fGUaAu8r\u0026pscrd=IhMIveLOxKekkgMVUQyiAx2OuyFtMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NaeVZnVTh4a2lvUkZmSHA4dVVMcGtvMXJFTnVWNFNraWUtUmR1VUNKSHVQTF9wYml0QkRPaU56DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlocation: https://www.google.no/pagead/1p-conversion/16834084957/?random=1931871345\u0026cv=11\u0026fst=1769262260873\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115938465~115938468~116185181~116185182~116682876~116992598~117025847~117041587~117099529~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=r1WWCIDKv9IaEN2Aj9s-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=11~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXgMpaigvLXrHmTEu96oMqBbThlwzd8AJUM\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQbcORBo6GOyOVPlCrs4c02_Ev5fZBoZel_yL2YDw73LLBjBW68fGUaAu8r\u0026ipr=y\u0026pscrd=IhMIveLOxKekkgMVUQyiAx2OuyFtMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NaeVZnVTh4a2lvUkZmSHA4dVVMcGtvMXJFTnVWNFNraWUtUmR1VUNKSHVQTF9wYml0QkRPaU56DAgJYggIABAAGAAgAA\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/usdt.svg","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/usdt.svg HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6952a7c4-63c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XaE%2Bjn2QsWhN0RiC2PPD9DTqLReoHgEGqRY8u221zC6O2VOaCP%2FsCr1H1UozlofCXrTdSLr%2BfSi7CuI0QYoGJifKocx72O%2Bx8dQhCYs%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff6e0eb48b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1596,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e94a7c643b6ece23ba1eeb9f0c40075","sha1":"1dd9f45b2a7220d50263936f107b20f7eba2b0f9","sha256":"091a2236a925113ea90627521bac1a4f53e20e2c04d8bc0bfd24ac02f97f1a65","sha512":"6240148782b2c5ae1b65fa089af8d723b24fc9b5e151b170075e8da40814e00b5eb6497abfed9404cc367b9daea24b5a0389f44fb3fdef28431ac88e8aae4245","ssdeep":"","tlshash":"c33153e05ecd3132610df76c4efba8f27af315e57644ae1582006a3260118cb1c5daab","first_seen":"2025-07-13T15:42:46.562924Z","last_seen":"2026-03-30T19:18:20.856954Z","times_seen":35,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/feature_7.svg","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/feature_7.svg HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6952a7c4-387c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HFY30bTCEbqhL9mv%2F%2F77nZqI3Lf8wr88KOoaxKmVraarzoe%2BXslXeiSAfKSSc1H6Od5h3fDb%2BQkMLoT0DQw%2BHLs8ImBjFkE6%2BMJLl6U%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff6e10b53b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14460,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d466dc276e1d09ebd8cf5f41d0fd883","sha1":"d6e5774dded4670fe955ec3ec62f71004d8cbef4","sha256":"5d5325c800205a12be35151df6ec88b9428c2962f40226842d3dea8c3e1f62b4","sha512":"1d70b8f8ce2686dad700b640cbf8cb6425a1e647decf5e6a958a5d981261883f76aea5ece94e281e9a21e0e9a8d61f24c88ada0237fa8d8c7ac462f10e667f47","ssdeep":"384:6IHfty41ArPEXVIX9ff1eyUF+j/ZQzmc6gOc1KX1wcX:yrPFX91eN2/+yVgOUaX","tlshash":"1c52b6fa6b9475f8b443e7e9dd1388a8b50f38fb3f95a798c258de4465500ac8cc8c90","first_seen":"2025-06-30T15:15:01.985262Z","last_seen":"2026-03-30T19:18:20.888117Z","times_seen":48,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/bitcoinslider.gif","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/bitcoinslider.gif HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 47823\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: \"6952a7c4-bacf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8midDC5KryjS2LOPGw7e6sqzz7taBTuJanbZ3g7f%2BpqUE8zRD3y9GghyUhdjf1EmgJHl2xjPy9sYCzLb67wa1mOkFfGwgzni1aufPqU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e10b54b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47823,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 500 x 435","md5":"6591452442dc3f68c707fea6a08f4ca0","sha1":"5f3e05488937d5b3c423b30f20016fe53b1bbcc1","sha256":"1f3011ffff0a7c3223dac043f048195d8469964a42446a67ec27f98157da0c27","sha512":"18580022f26a3a03c72a7897098fc2ce8ac0244bd9299341d0d7a0dd7547cb000c11df069be35c4cb7d8a0691b64ce4387d97f6f1b0fae7dc48ab5dff41a4af8","ssdeep":"768:mHbwRlF3aHobyg9xLcbUe6W2HBLAyf1O5VA83kBFGHaaTWU5wp:mj7g9RcbRWxZ1AVH3kBFG60Ep","tlshash":"2723d14ff05e4bcbbf4a112025875d66cca1359488f9e137b295ffa2526a42c90f0adb","first_seen":"2025-09-21T08:02:59.19991Z","last_seen":"2026-03-21T07:39:27.295597Z","times_seen":14,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/fonts/Librestile-Extended-Bold-GRRFLRRU.woff2","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:15.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /fonts/Librestile-Extended-Bold-GRRFLRRU.woff2 HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:15 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 7956\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: \"6952a7c4-1f14\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yiKtCuUPepoyr4IQMw2H%2FDWgtlgcOfuvhjolZ%2F6ln7dOHTJxlGg9ruZ3%2BKPL31r5Tl7xFPtYd5ylogAbN%2FhGWtOaWqnuop%2F2%2FUxCxQM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e9bbc5b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7956,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 7956, version 1.0","md5":"71ab105799cb98e526b00cb0cc8376ee","sha1":"97d79c858d69656c640e52af69cbe25788e1e7ac","sha256":"cc8b60e1bf55f3cf91edfb7b27efcc1b58f22d4058b113f7f5bc0c6a34747e8f","sha512":"8f4206d7e8ee5215e5cb0289d6b3905cfe6b54a73bb501eb9b53975032ced5ca4897ee733a3b11bc478afbb3153bde3c8909daa4d080b292ef4d7d373a0cb3b5","ssdeep":"192:6FFjw6iUrbuGKwhdFeseEHaJRm897yvinW7ANhDkDXkizPUx:6FFjRbbusUPEHaJRZ7JnWcvSXk3","tlshash":"ccf19ed0d9c27797d9a882f21c1b16da7e7e4988697802c67ed4e84b21e4ce93718560","first_seen":"2025-06-30T15:15:01.989614Z","last_seen":"2026-03-30T19:18:20.916687Z","times_seen":47,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/secureproxy?e=jscdn/getFile","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:18.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://btchyper.claims\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.1350480568.1769262258\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"x8e07hwir2ohmnmh1h09\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TrMKBcpU0EmRuBwdpvAPOMHyUG%2BuAaFTdZlouR5cQunulJ8RyieOl4FRHaHJAhsZ8YBudge%2FDcr%2BkEveHHITHY%2Fr8G6mM5HZzWkblF1qy8gUjw%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff6f96c4cb4fd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5711212,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"343d9f1a291ad8de4a5d958fec987356","sha1":"5cf00359ad8a75198e043927053deb70dac967c0","sha256":"c12c465d7f0a23db9acd8ef6fbdf42810b4bcd958ceb519221004717e7466418","sha512":"782afd8576e7d9b2d589f072d6e60be402a173b2034338211f37a39af46c52dffb10c1295829585e6d39a3e6ff11b34c0380caed2ce6336625a01bc64573e53a","ssdeep":"24576:TwxiN4JC9h+jh4BVrKGoWLGYUwni2rAjiFcarEa:T6i20GjQmGSd4nA2FzrEa","tlshash":"3d2512c3a05ae0d32b2ac425f2d158eb1ad5e4ad29d583731d8ced54b8fc12b93e94d3","first_seen":"2026-01-24T13:44:15.084462Z","last_seen":"2026-01-24T13:44:59.92223Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1073,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":764,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:18.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nCookie: _gcl_au=1.1.1350480568.1769262258\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:18 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nage: 51\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ApaqgUa%2FBZz0WtoA6ywy2MlwQti%2B9fXeaDMI7kHzmRNZ%2BfZHCQkvzgVemrIJPZcbQpXZRypvBLzb5wSio1SzCbQ%2BzXvodoSkYo4RTB8%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: 9c2ff6fa1c50b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fbtchyper.claims%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=2764512.1769262258\u0026dt=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026auid=1350480568.1769262258\u0026navt=n\u0026npa=1\u0026gtm=45He61m0v9219080431za200zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115495939~115938465~115938468~116682876~116992598~117041588~117223558~117223565\u0026tft=1769262258100\u0026tfd=4429\u0026apve=1\u0026apvf=f","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:19.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:53:15 GMT","end":"Mon, 23 Mar 2026 19:53:14 GMT"},"fingerprint":{"sha1":"9C:37:F9:BF:35:57:46:D5:34:37:23:71:DE:BD:66:5E:77:DA:8A:62","sha256":"37:EA:A6:C5:A2:9F:7B:7E:6E:78:CF:38:EA:C5:EA:56:BD:FF:08:67:85:50:6B:BC:AC:6E:E6:19:76:0A:6A:97"}}},"request":{"raw":"POST /ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fbtchyper.claims%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=2764512.1769262258\u0026dt=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026auid=1350480568.1769262258\u0026navt=n\u0026npa=1\u0026gtm=45He61m0v9219080431za200zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115495939~115938465~115938468~116682876~116992598~117041588~117223558~117223565\u0026tft=1769262258100\u0026tfd=4429\u0026apve=1\u0026apvf=f HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nOrigin: https://btchyper.claims\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\ndate: Sat, 24 Jan 2026 13:44:19 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://btchyper.claims\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":1124,"timings":{"blocked":523,"dns":2,"connect":15,"send":0,"wait":43,"receive":0,"ssl":535},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/blog3.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/blog3.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-fab2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DfeFqw%2FVG%2BJYYCcVLK%2FKqW55mpFN%2BHQn%2Fdt5d%2B1923%2BeZzW8uFNcK%2FSGLyMEGEyWIP1gYs6iv6u1kclGe41bKQ1TMufoKrxCIatrbw8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e13b70b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64178,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6cf21eea0352f0cd13f6016c5210c683","sha1":"f019d3549fa705a062356929e25bc44d425f56e9","sha256":"72bcdc66be340924dc5d36da4e6e706996fa39782ce1caed236665c1e7ce62f9","sha512":"39a82959b35d31eba07c8f68a7a96dc9e87238a298eded36b50eaa85f775a1d36364e4432c44e14bbe92411fddab2bb750bb5fed8839fbf2e3713a624d9411a6","ssdeep":"1536:S6hPlvvtTgBFIS6nJcEqpnmkD2nl8lTMoSIYVjSu7Q:PtBw6JcRdD8oMZOf","tlshash":"b45302d8b3c29c88d0ccafb0214d468910f5ac07160e96a7d35ad73a0f975d5b5bbb47","first_seen":"2026-01-24T13:40:10.949448Z","last_seen":"2026-03-21T07:39:27.325825Z","times_seen":10,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/fonts/UcCo3FwrK3iLTcviYwY.woff2","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:17.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /fonts/UcCo3FwrK3iLTcviYwY.woff2 HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/css/styles-BVIWQ5RZ.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:17 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 72920\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: \"6952a7c4-11cd8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 49\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GBkh9%2FKpFrzAHSAe7iT7myGezLsMlGrzDX8C%2B%2Bopy7KpJp8prFZfaiXTU6uJmuvg%2Bz2zms8cnpbE8WcdYqmBHHi2br9zzZU7GZH%2BSrw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6f6dc32b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72920,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 72920, version 1.0","md5":"4b73e2ff3024784eca66d2120a9bcb22","sha1":"2870bcb8ece10145e089262bb6634d18ac85bec6","sha256":"2c295d99e26dcf357d4d01bcf270fd6924b600c9a13dd8c363ef114f4c6976fa","sha512":"9ebe0b2cc7ed7298d931fc246732ed90881f0252b957afbf14f390c75c1da3fddf1b3fbb00be8d489cbb7b5a18f9dbda17a24e18594d44ebba4b7ca3f50bb10a","ssdeep":"1536:MO6PxhqwEppt5fUo8w4d+X5JlhLzcua67BYePELa:M3qh7VdDf8GPH","tlshash":"f0630245820ba35ee09d4a79d27481f61fc2cb5c2bbf5c27538289ab5f57dbf6410134","first_seen":"2025-06-08T12:34:02.525952Z","last_seen":"2026-04-25T05:27:39.185697Z","times_seen":1001,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/16834084957/?random=1769262260873\u0026cv=11\u0026fst=1769262260873\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115938465~115938468~116185181~116185182~116682876~116992598~117025847~117041587~117099529~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=r1WWCIDKv9IaEN2Aj9s-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=11~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:20.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"POST /pagead/1p-conversion/16834084957/?random=1769262260873\u0026cv=11\u0026fst=1769262260873\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115938465~115938468~116185181~116185182~116682876~116992598~117025847~117041587~117099529~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=r1WWCIDKv9IaEN2Aj9s-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=11~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nOrigin: https://btchyper.claims\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:20 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\nlocation: https://www.google.com/pagead/1p-conversion/16834084957/?random=1931871345\u0026cv=11\u0026fst=1769262260873\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115938465~115938468~116185181~116185182~116682876~116992598~117025847~117041587~117099529~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=r1WWCIDKv9IaEN2Aj9s-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=11~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXgMpaigvLXrHmTEu96oMqBbThlwzd8AJUM\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQbcORBo6GOyOVPlCrs4c02_Ev5fZBoZel_yL2YDw73LLBjBW68fGUaAu8r\u0026pscrd=IhMIveLOxKekkgMVUQyiAx2OuyFtMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NaeVZnVTh4a2lvUkZmSHA4dVVMcGtvMXJFTnVWNFNraWUtUmR1VUNKSHVQTF9wYml0QkRPaU56DAgJYggIABAAGAAgAA\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/16846608297/?random=1769262261064\u0026cv=11\u0026fst=1769262261064\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115495940~115938465~115938469~116185179~116185180~116682876~116992598~117025847~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=bWt6CJmy-IgbEKmvi-E-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=13~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"POST /pagead/1p-conversion/16846608297/?random=1769262261064\u0026cv=11\u0026fst=1769262261064\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115495940~115938465~115938469~116185179~116185180~116682876~116992598~117025847~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=bWt6CJmy-IgbEKmvi-E-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=13~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nOrigin: https://btchyper.claims\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\nlocation: https://www.google.com/pagead/1p-conversion/16846608297/?random=380942967\u0026cv=11\u0026fst=1769262261064\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115495940~115938465~115938469~116185179~116185180~116682876~116992598~117025847~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=bWt6CJmy-IgbEKmvi-E-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=13~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAgiC3rEC\u0026cerd=CgSUwL0t\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXjcolHtYzkCf9ro4az49LSwWe-e7Quh7U4\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQK1H2MtTTTYkV7SUqUxEXgAgNqH-RejoygGA8qj_aY5OndH1i5orgaArCY\u0026pscrd=IhMIjNjaxKekkgMVFHaRBR3UdCoHMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhbkRoTGZTNW81d3NRQmg1aTdqQTdES1JlZ0U4d3h4aXBZcDNucFRiN1FsamRPdFNkellIVXp6DAgJYggIABAAGAAgAA\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/16834391571/?random=193212361\u0026cv=11\u0026fst=1769262260364\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v9208585794z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391253~115616986~115938465~115938468~116682876~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=vOaXCMquzNIaEJPcods-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=5~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXjPss9GGPkXuop1JR8edX73SpXcHyYO7zg\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdS-0_Q4AQ61Xd41EvJm_hmJKzmF7KifxvMkQV7KgNBq4ejlMSAZqAoaAnFg\u0026pscrd=IhMIp72_xKekkgMVr0qRBR0LkCi5MgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2Nibi1BSGtVeE1EbjZrekVjX0tVTml0RUxmOWY1T0k4MEZMd25mb2M2cjZaRXlGY09ock0xRXd6DAgJYggIABAAGAAgAA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"GET /pagead/1p-conversion/16834391571/?random=193212361\u0026cv=11\u0026fst=1769262260364\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v9208585794z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391253~115616986~115938465~115938468~116682876~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=vOaXCMquzNIaEJPcods-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=5~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXjPss9GGPkXuop1JR8edX73SpXcHyYO7zg\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdS-0_Q4AQ61Xd41EvJm_hmJKzmF7KifxvMkQV7KgNBq4ejlMSAZqAoaAnFg\u0026pscrd=IhMIp72_xKekkgMVr0qRBR0LkCi5MgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2Nibi1BSGtVeE1EbjZrekVjX0tVTml0RUxmOWY1T0k4MEZMd25mb2M2cjZaRXlGY09ock0xRXd6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlocation: https://www.google.no/pagead/1p-conversion/16834391571/?random=193212361\u0026cv=11\u0026fst=1769262260364\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v9208585794z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391253~115616986~115938465~115938468~116682876~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=vOaXCMquzNIaEJPcods-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=5~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXjPss9GGPkXuop1JR8edX73SpXcHyYO7zg\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdS-0_Q4AQ61Xd41EvJm_hmJKzmF7KifxvMkQV7KgNBq4ejlMSAZqAoaAnFg\u0026ipr=y\u0026pscrd=IhMIp72_xKekkgMVr0qRBR0LkCi5MgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2Nibi1BSGtVeE1EbjZrekVjX0tVTml0RUxmOWY1T0k4MEZMd25mb2M2cjZaRXlGY09ock0xRXd6DAgJYggIABAAGAAgAA\r\ncontent-type: image/gif\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/pagead/1p-conversion/17159929999/?random=1290149443\u0026cv=11\u0026fst=1769262260545\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102015666~103116026~103200004~104527906~104528501~104684208~104684211~105391252~115938465~115938469~116682876~116988315~116992598~117041588~117042506~117099529~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=KXyNCPzBidQaEI-Bv_Y_\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=7~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAgim3bEC\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXhkaaakf9pGfobAzfrhZLI9eVHye9W3aXE\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdSxwHDZg4taitKFoSi5FfXd9Bd-OP1sM6-RdMKDdRZ1M7XegF9aMy8aAnrw\u0026ipr=y\u0026pscrd=IhMInqDFxKekkgMVEwmiAx3abA-7MgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NZU20zZVNTdjdHZFpzdjJWemZ6ZTJ6MUl0OWY1Y2JEc3Z5aFZlWFVLWGFZUnlndjNYbmRJbnB6DAgJYggIABAAGAAgAA","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:54:04 GMT","end":"Mon, 23 Mar 2026 19:54:03 GMT"},"fingerprint":{"sha1":"79:6F:61:ED:85:71:D3:03:AF:65:A2:06:5F:BB:34:EA:21:15:9F:B6","sha256":"4B:DF:16:AF:B7:35:08:DF:0B:C5:AF:B6:BB:CA:F4:32:78:1C:B7:4B:BE:2D:E3:AE:55:3D:F5:3B:E0:D2:A6:AB"}}},"request":{"raw":"GET /pagead/1p-conversion/17159929999/?random=1290149443\u0026cv=11\u0026fst=1769262260545\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102015666~103116026~103200004~104527906~104528501~104684208~104684211~105391252~115938465~115938469~116682876~116988315~116992598~117041588~117042506~117099529~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=KXyNCPzBidQaEI-Bv_Y_\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=7~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAgim3bEC\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXhkaaakf9pGfobAzfrhZLI9eVHye9W3aXE\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdSxwHDZg4taitKFoSi5FfXd9Bd-OP1sM6-RdMKDdRZ1M7XegF9aMy8aAnrw\u0026ipr=y\u0026pscrd=IhMInqDFxKekkgMVEwmiAx3abA-7MgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NZU20zZVNTdjdHZFpzdjJWemZ6ZTJ6MUl0OWY1Y2JEc3Z5aFZlWFVLWGFZUnlndjNYbmRJbnB6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/pagead/1p-conversion/16834084957/?random=1931871345\u0026cv=11\u0026fst=1769262260873\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115938465~115938468~116185181~116185182~116682876~116992598~117025847~117041587~117099529~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=r1WWCIDKv9IaEN2Aj9s-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=11~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXgMpaigvLXrHmTEu96oMqBbThlwzd8AJUM\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQbcORBo6GOyOVPlCrs4c02_Ev5fZBoZel_yL2YDw73LLBjBW68fGUaAu8r\u0026ipr=y\u0026pscrd=IhMIveLOxKekkgMVUQyiAx2OuyFtMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NaeVZnVTh4a2lvUkZmSHA4dVVMcGtvMXJFTnVWNFNraWUtUmR1VUNKSHVQTF9wYml0QkRPaU56DAgJYggIABAAGAAgAA","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:54:04 GMT","end":"Mon, 23 Mar 2026 19:54:03 GMT"},"fingerprint":{"sha1":"79:6F:61:ED:85:71:D3:03:AF:65:A2:06:5F:BB:34:EA:21:15:9F:B6","sha256":"4B:DF:16:AF:B7:35:08:DF:0B:C5:AF:B6:BB:CA:F4:32:78:1C:B7:4B:BE:2D:E3:AE:55:3D:F5:3B:E0:D2:A6:AB"}}},"request":{"raw":"GET /pagead/1p-conversion/16834084957/?random=1931871345\u0026cv=11\u0026fst=1769262260873\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115938465~115938468~116185181~116185182~116682876~116992598~117025847~117041587~117099529~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=r1WWCIDKv9IaEN2Aj9s-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=11~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXgMpaigvLXrHmTEu96oMqBbThlwzd8AJUM\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQbcORBo6GOyOVPlCrs4c02_Ev5fZBoZel_yL2YDw73LLBjBW68fGUaAu8r\u0026ipr=y\u0026pscrd=IhMIveLOxKekkgMVUQyiAx2OuyFtMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NaeVZnVTh4a2lvUkZmSHA4dVVMcGtvMXJFTnVWNFNraWUtUmR1VUNKSHVQTF9wYml0QkRPaU56DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/news_4.svg","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/news_4.svg HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6952a7c4-434f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UWL6obTLVmPJFuVEiP71nj19WiwY2Kwj9tWcxZKdggVg9PWj4dPgp6Q9Ugmu43%2FCQKcs3aGN0Fqa53wE6%2FxZE9V4k6%2BEMvNhO7yaCt8%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff6e12b5fb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17231,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c0595b8e0cb0493cbcb559cdffcd4422","sha1":"e0018983657c9ccc6d2fa26c7d716029cc9dd9f7","sha256":"d577cb8d3b0c91117beb0c4c8e25e2f29cdfe72f896a1e8dac757fd5247553c2","sha512":"dfe98f2656ed75a9a69025ff71ad0ea2de18761d0475410b5c13889a18d81e30aa032dfcccc5b8fa71a2d42af8a6b79cf9e9409bfcae714d24bee9d906613b46","ssdeep":"384:fNUvhJ26tQLE5CqNnKAyDSCKooaz6lDtCIBhID5:fNhOZKAXooi0by5","tlshash":"cf72d1916a240e86d7da3728a41e4b8c04c7549d13ff98a7d3ce09ded30151bd191fbe","first_seen":"2025-07-27T10:49:42.910846Z","last_seen":"2026-03-30T19:18:20.865785Z","times_seen":20,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/js/chunk-L4DL45FQ.js","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:17.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /js/chunk-L4DL45FQ.js HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/js/main-B6NXVWFN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:17 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 49\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aI1oJVNBxHRe5YuCzr8puZeqfCaInWN9LiX1IfADObzRq%2FLnJpmf%2BbcWHDyLGHWJ2etR9%2FZmH5JJQlqLeXwhi9ZLev%2FBC34TICL%2F5AA%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c2ff6f43c26b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/js/chunk-JROBEG3T.js","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:17.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /js/chunk-JROBEG3T.js HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/js/main-B6NXVWFN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:17 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 49\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LEiC07skqaxjZW0yhnD47OoQwsppAffDWdaDI4j2eZu88vCrKEAAE0nJ0NiNXE13l46FqdviwxGXFguJdIWrvfVJ3tf2uDdhjbNQty8%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c2ff6f3cc16b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/js/chunk-XMCF3TCT.js","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:17.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /js/chunk-XMCF3TCT.js HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/js/main-B6NXVWFN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:17 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 49\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yt5E97ApSLMh2NoQjOS4xf32nkuMAQyOtxpac3HIQVf7TByKgRFvHXzAmb9NPMo1QzdrFVPGYgQ2znp4WURQkIQApIyf4vixpWzSQtU%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c2ff6f45c27b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/fonts/Librestile-Extended-Bold-GRRFLRRU.woff2","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:17.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /fonts/Librestile-Extended-Bold-GRRFLRRU.woff2 HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/css/styles-BVIWQ5RZ.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:17 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 7956\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: \"6952a7c4-1f14\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 49\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NTT2jd751sE8KJLKzeflwUyFlijhbjv4nqv75yCXB6mZUDkKGVT6fFc6EunP6R2daPrck%2F3ILUwj1FGESRIDRqy3Qld5WAMIY%2FksZPs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6f6ec33b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7956,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 7956, version 1.0","md5":"71ab105799cb98e526b00cb0cc8376ee","sha1":"97d79c858d69656c640e52af69cbe25788e1e7ac","sha256":"cc8b60e1bf55f3cf91edfb7b27efcc1b58f22d4058b113f7f5bc0c6a34747e8f","sha512":"8f4206d7e8ee5215e5cb0289d6b3905cfe6b54a73bb501eb9b53975032ced5ca4897ee733a3b11bc478afbb3153bde3c8909daa4d080b292ef4d7d373a0cb3b5","ssdeep":"192:6FFjw6iUrbuGKwhdFeseEHaJRm897yvinW7ANhDkDXkizPUx:6FFjRbbusUPEHaJRZ7JnWcvSXk3","tlshash":"ccf19ed0d9c27797d9a882f21c1b16da7e7e4988697802c67ed4e84b21e4ce93718560","first_seen":"2025-06-30T15:15:01.989614Z","last_seen":"2026-03-30T19:18:20.916687Z","times_seen":47,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16808619681\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:18.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/destination?id=AW-16808619681\u0026cx=c\u0026gtm=4e61m0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 24 Jan 2026 13:44:18 GMT\r\nexpires: Sat, 24 Jan 2026 13:44:18 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 24 Jan 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 121212\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":345390,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5376)","md5":"12668a2c9ae8c563367db19529187e20","sha1":"7a6503164ac82907c5eac20a4b9a1e477f85669c","sha256":"dafa88b1f4d51c9b54a00ab5fab2ab88ffd809d2129a1f07cff8a89ffbbd7f49","sha512":"afae8d9b0b28ce8a259c2c0f5f293b12809bd1a2c9e04b1fc16221e90b2371c878e6325f9274f886481978c59ee66b71faf151365b7e463a8baa3d01c6808765","ssdeep":"6144:SJmMvPgQAxJ508RYoeXDIItDmlFldbKKCY5dqmQi3I:qmMngQAxJ508RYPIItDIdq+I","tlshash":"ee7408cd77d6706683a3b478403f114ba17b6a92f44cc899f186d8e42e74aaa4177f3c","first_seen":"2026-01-24T13:40:10.928227Z","last_seen":"2026-01-24T13:44:59.925329Z","times_seen":3,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/16835508600/?random=1769262260626\u0026cv=11\u0026fst=1769262260626\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115495939~115938465~115938468~116682876~116992598~117025847~117041588~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=_MN7CM6szNIaEPjy5ds-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=8~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=7","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:20.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"GET /pagead/1p-conversion/16835508600/?random=1769262260626\u0026cv=11\u0026fst=1769262260626\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115495939~115938465~115938468~116682876~116992598~117025847~117041588~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=_MN7CM6szNIaEPjy5ds-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=8~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=7 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nOrigin: https://btchyper.claims\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:20 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: https://btchyper.claims\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: gzip\r\nserver: cafe\r\ncontent-length: 987\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1524,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"ASCII text, with very long lines (1507)","md5":"1f2fa81657f684495091d23297a9ced5","sha1":"fcb78a28c8eea585379944611ac6c87328a3e56a","sha256":"e9e980f4998790bf87694c05c93641be5b2ba1f0919de9f5e3821faf6d557a89","sha512":"675c680f2c1cf66f9b7485f12228290e68872175426044ab081560e79c68178fecd8e40bbdce2420350a39478ee85e9089b552c1fd4131fc1608028d803e148d","ssdeep":"","tlshash":"8831f9ff52521e6b0313b9042970bb053f22727755608f8da0c454a73152b2e3514692","first_seen":"2026-01-24T13:44:59.926154Z","last_seen":"2026-01-24T13:44:59.926154Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/pagead/1p-conversion/16835508600/?random=1529283939\u0026cv=11\u0026fst=1769262260626\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115495939~115938465~115938468~116682876~116992598~117025847~117041588~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=_MN7CM6szNIaEPjy5ds-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=8~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXgifmGZ8Z67JQr8rWqaKeIdNmHXZwAnVxs\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdTIfgkmCZYyYkLnF30Vy1SeNQBMeV9cDykTef85D_dnNQ1yRVN17g8aAry0\u0026ipr=y\u0026pscrd=IhMItanFxKekkgMVq0qRBR3l7wHXMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhZ3VJdzkzVGcyUnJDY0I3Y1M4R1BLZ1ZGMGZHbF8tVDRjd0lYZnZNX2dvdmo2Q2E3dVhVYmR6DAgJYggIABAAGAAgAA","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:54:04 GMT","end":"Mon, 23 Mar 2026 19:54:03 GMT"},"fingerprint":{"sha1":"79:6F:61:ED:85:71:D3:03:AF:65:A2:06:5F:BB:34:EA:21:15:9F:B6","sha256":"4B:DF:16:AF:B7:35:08:DF:0B:C5:AF:B6:BB:CA:F4:32:78:1C:B7:4B:BE:2D:E3:AE:55:3D:F5:3B:E0:D2:A6:AB"}}},"request":{"raw":"GET /pagead/1p-conversion/16835508600/?random=1529283939\u0026cv=11\u0026fst=1769262260626\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115495939~115938465~115938468~116682876~116992598~117025847~117041588~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=_MN7CM6szNIaEPjy5ds-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=8~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXgifmGZ8Z67JQr8rWqaKeIdNmHXZwAnVxs\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdTIfgkmCZYyYkLnF30Vy1SeNQBMeV9cDykTef85D_dnNQ1yRVN17g8aAry0\u0026ipr=y\u0026pscrd=IhMItanFxKekkgMVq0qRBR3l7wHXMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NhZ3VJdzkzVGcyUnJDY0I3Y1M4R1BLZ1ZGMGZHbF8tVDRjd0lYZnZNX2dvdmo2Q2E3dVhVYmR6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-25T07:55:31.332314Z","times_seen":818678,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/feature_new_4.svg","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/feature_new_4.svg HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6952a7c4-753\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JBrCztMOLwwdzAvWSI0f%2FxHhyQ8yHV78HIHoQUFSt9mHayFcWApqAeV4QYg%2B3fCt1uWn9IyXyeWjVrkFsZrcg%2B59ChNV7KhJVpz7rXM%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff6e13b64b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1875,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e953159401d2c8183a63f3f13629bb59","sha1":"b02e917f3e1d94e0b7869a32b2c11bacce137654","sha256":"adc311e7f198cbf8a8044b864dc28981637fb1509e26d2ef812898c1a0035c69","sha512":"6d351c5a9de178cdc8913895de2ca8ed822d9e28d4059e5c2da2d35eb2f727cf3cc6d9a3c9b09034debc8e79c6b2fd87d99867347098278ad494baa4b586584e","ssdeep":"","tlshash":"aa318489b329d7d4a40c2bfc4f29d4a5232b8cdae735da9443c31e46794501f0969ed4","first_seen":"2025-09-17T02:28:10.544419Z","last_seen":"2026-03-29T15:46:36.824944Z","times_seen":23,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-17524131935\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:18.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/destination?id=AW-17524131935\u0026cx=c\u0026gtm=4e61m0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 24 Jan 2026 13:44:18 GMT\r\nexpires: Sat, 24 Jan 2026 13:44:18 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 24 Jan 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 123574\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":354693,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5882)","md5":"4e55d2bf81e9096686986f03ae807e2c","sha1":"7b88115be9e010d226bc1956dec4e382878aae1e","sha256":"a47549f5e73a2bc6b4ece285de03531ae8c21f88e87ddedc1dac326efdd2ccce","sha512":"5c15bcdc8a650ba89cdd1940549f9ea95dcb6406f33bfcc05e7325aa22ce65ef43b7b70e50408db8150bc9edc928905ae46461fc6ab4b3be6a0a747932b3143b","ssdeep":"6144:NJmMvPyQAxJ508RYoeXDIItDmlFldbKKCY5dqmQ0e6:bmMnyQAxJ508RYPIItDIdqn6","tlshash":"3f7419cd73d6746693a3a478403f114ba17b6a92f84cc895f186dce42e70aaa4177f3c","first_seen":"2026-01-24T13:43:11.330885Z","last_seen":"2026-01-24T13:44:59.928685Z","times_seen":2,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/pagead/1p-conversion/16872869822/?random=2040094078\u0026cv=11\u0026fst=1769262260473\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115616986~115938465~115938468~116682876~116992598~117041588~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=GCYJCM_Rv9IaEL6fzu0-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=6~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXggU-YTBXcFllSJS5ozhbbt-KQ6D2VQD04\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdROcL-d2Olq9Tv-SdBjbE3V_v8NWqYoIKJJTqpX4G4t-p57PItnsrsaAsD-\u0026ipr=y\u0026pscrd=IhMIxJzFxKekkgMVvQ2iAx1VfSQoMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NiaUNxaHl0eXotQ3diN0R4QXpzSG9XaEd2ajhVS25FQjBYUnlLbzhSOElMTXlPWllaT1d5YUJ6DAgJYggIABAAGAAgAA","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:54:04 GMT","end":"Mon, 23 Mar 2026 19:54:03 GMT"},"fingerprint":{"sha1":"79:6F:61:ED:85:71:D3:03:AF:65:A2:06:5F:BB:34:EA:21:15:9F:B6","sha256":"4B:DF:16:AF:B7:35:08:DF:0B:C5:AF:B6:BB:CA:F4:32:78:1C:B7:4B:BE:2D:E3:AE:55:3D:F5:3B:E0:D2:A6:AB"}}},"request":{"raw":"GET /pagead/1p-conversion/16872869822/?random=2040094078\u0026cv=11\u0026fst=1769262260473\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115616986~115938465~115938468~116682876~116992598~117041588~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=GCYJCM_Rv9IaEL6fzu0-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=6~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXggU-YTBXcFllSJS5ozhbbt-KQ6D2VQD04\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdROcL-d2Olq9Tv-SdBjbE3V_v8NWqYoIKJJTqpX4G4t-p57PItnsrsaAsD-\u0026ipr=y\u0026pscrd=IhMIxJzFxKekkgMVvQ2iAx1VfSQoMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NiaUNxaHl0eXotQ3diN0R4QXpzSG9XaEd2ajhVS25FQjBYUnlLbzhSOElMTXlPWllaT1d5YUJ6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-25T07:55:31.332314Z","times_seen":818678,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/feature_4.svg","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/feature_4.svg HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6952a7c4-1ca1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KSkwVleEduHnJuDZgJNjNjgab8nQeHwFHfsmkmeNE2Nq7fNztua%2BMLd60r4qhqoP3I5WfywYvw09QfNeNVquG3D3h5LMLwACZs3%2BtPw%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff6e10b50b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7329,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d4d30e1bb4e26b0763db67c25926b6d","sha1":"5d76ee9fc5ae897ae11c91758fbf679ca1d9f923","sha256":"7035958802b9fc233c8565413e0e39a92ed7e81a149c5e5c2b89e0f689f10c0b","sha512":"bf3d478851b7db53cadc9304f6ea2e7948eebf60dcc9e1f66e4ca63fc106c95348c7e78bfe9863ea7760c2414641421388f144cc6b256d7292b407160680b636","ssdeep":"192:Z8x0YGmxOjxkWOd0rU4E/2sPyd5Z17FOuciYVhn9:yxAmxmxkWs0g4VT37gmYLn9","tlshash":"4de173ee37d471f4d543f3f9cc1246b67a1e2cfab3518758c7581e06728a06a4989cd4","first_seen":"2025-06-30T15:15:02.016125Z","last_seen":"2026-03-30T19:18:20.872003Z","times_seen":48,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/how-to-buy.gif","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/how-to-buy.gif HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 344407\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: \"6952a7c4-54157\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ICklMLO%2Fd9HBA8J4aM0nBNpFF9TLOAIdZFpQFdaQsoncYC9uO1HYKw8QySbUf26Bac9IXT62JeitBfFe8RW0PehK7DdXhphzxMDgCRw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e10b57b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":344407,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 500 x 500","md5":"2d9021a7299538b698babf914d4aa38b","sha1":"2289b8eccef13599b9ae712f29f43856e4e537fe","sha256":"579d50b1bdc93f60cda0b3fe1d8774585105a562f230299baa2c0c73ee66f2e1","sha512":"0e9b1aaaf650512f6eb655ca6854101dd1546907a6837e9b17cfb6f015c9c1ceb3072ff857bf948e5ad1fe6113da481b2e1188c0b8cd77b98172d49b5625d747","ssdeep":"6144:T/Bbqfpbq4tGSCOhMdL5s9ile18cCzxzDZ5hKozLe18cAs9iLCOhMdLmq4tGobq9:Nqh1tG6MdFsolxz3LBso5Md8tG2qhr","tlshash":"fa7412f7ae38eeaf80327e40fce98dda725012cc86f06e5ab858113f146775b4036596","first_seen":"2026-01-24T13:44:15.025324Z","last_seen":"2026-01-24T13:44:59.930637Z","times_seen":2,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":464,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/pagead/1p-conversion/16808619681/?random=2048871768\u0026cv=11\u0026fst=1769262260128\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115938465~115938468~116682876~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=BqiwCP2PoLUbEKHd_M4-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=3~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAgim3bEC\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXjPB6OZ_DyL2oNoP03XQ2D4vUidksnDIY8\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQqnysCGzjVt39Ukr2Hj8SfxqLvG2qdOV7KOegGX3aMHGQ2ajnMZOsaAp-4\u0026ipr=y\u0026pscrd=IhMIiIuoxKekkgMVGPM7Ah1ntTskMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NZdzdadV9Sc3U1ZElEakVOVHZMa3dtcV9WS2xUamlpUDFMZTZHelRJT3lHVk1GdEEzOWJjVGV6DAgJYggIABAAGAAgAA","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:54:04 GMT","end":"Mon, 23 Mar 2026 19:54:03 GMT"},"fingerprint":{"sha1":"79:6F:61:ED:85:71:D3:03:AF:65:A2:06:5F:BB:34:EA:21:15:9F:B6","sha256":"4B:DF:16:AF:B7:35:08:DF:0B:C5:AF:B6:BB:CA:F4:32:78:1C:B7:4B:BE:2D:E3:AE:55:3D:F5:3B:E0:D2:A6:AB"}}},"request":{"raw":"GET /pagead/1p-conversion/16808619681/?random=2048871768\u0026cv=11\u0026fst=1769262260128\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115938465~115938468~116682876~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=BqiwCP2PoLUbEKHd_M4-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=3~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAgim3bEC\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXjPB6OZ_DyL2oNoP03XQ2D4vUidksnDIY8\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQqnysCGzjVt39Ukr2Hj8SfxqLvG2qdOV7KOegGX3aMHGQ2ajnMZOsaAp-4\u0026ipr=y\u0026pscrd=IhMIiIuoxKekkgMVGPM7Ah1ntTskMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NZdzdadV9Sc3U1ZElEakVOVHZMa3dtcV9WS2xUamlpUDFMZTZHelRJT3lHVk1GdEEzOWJjVGV6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-25T07:55:31.332314Z","times_seen":818678,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/feature_new_3.svg","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/feature_new_3.svg HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6952a7c4-1a2a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rTulrdl2ao%2BNPYyJtCTFQ%2B7P%2B5ifDwwxlXlKV%2Fj2Q%2FM7DajbrE8xfc2S32Vdd1KjJqQqsYKIVt81TlQtO8B7wm8QpK88t%2B60jU4YuIw%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff6e13b63b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6698,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ce1d1de046aee0b615681e0f4080a994","sha1":"a5a50b21c9f9939a0d6f95e243af479f75fd8a28","sha256":"3c99827a06d03b8e5dfa4645f0e09d046b1a1ec523aab96d869936350b25a41f","sha512":"c4176599544a4816edd077e08a47ec3cbcf8a395342ea620553df600e98961f314cee11f0c54bcfe7806a38b57268ff25d01b0aaffe328b28453e9748f4f69d7","ssdeep":"96:Fr3VY96EFvhxqoJmrz7i7zuWndlPG+r1WmtnfjcpQ7UTBIDF1Sx5wd8yl1EfdAN3:9Y66xqoJWi7zuOT1SpYiIE/VUAAN3","tlshash":"eed192f063e892f8a607f7e4dd1594a6792f38ff37d2d614c364ee84a66105948cc8d4","first_seen":"2025-09-17T02:28:10.523408Z","last_seen":"2026-03-29T15:46:36.853279Z","times_seen":23,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/telegram.svg","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:16.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/telegram.svg HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:16 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6952a7c4-3c0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tHVVnqwbudKYoy6FLf0FUK%2BKQ6jPIClM55Ao9Moq%2Fv3aLpzx8WvmGu4juZQQrWqO%2FnFc3Cvujl6Fsdoelnj9IGGJzg8jaZrTwDaD%2FhU%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff6ec1bd3b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":960,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0ce441c0649fbc44914ac3025d55aa08","sha1":"8179109861a55c2f95361c7ad62b6dcf20b92bb2","sha256":"6902ea52f223a5db290787dfa65e32ae228ade271ba2723b1de991a1c1887352","sha512":"b7f16c71d75ffd75c8b1e85f85d38ba46bb3423bdd63a820c5d8113e89a3fa3af04bf286ea81f6e82e979540dd0d940c9d0010dd67a5cf86d0d228082c86355e","ssdeep":"","tlshash":"d21110ebb3ddf0e0e506d7f8c620c9a1330711f91392c64069d8aea0b41a09d41d84e9","first_seen":"2025-06-30T15:15:01.992457Z","last_seen":"2026-03-30T19:18:20.862093Z","times_seen":41,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/js/chunk-N4IN2AJ3.js","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:17.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /js/chunk-N4IN2AJ3.js HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/js/main-B6NXVWFN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:17 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 49\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZXhnP1PZUGfbL6%2B54R22lNbgz0kDGZnVYaJQIIH9h3L80Qtaegi7LKxTOmtdBN6NKqiwNQjXcJrs3%2BmTNXe%2FbmBh5J9wbNfvrOxlCd0%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c2ff6f42c24b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/js/chunk-QE6IBIJD.js","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:17.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /js/chunk-QE6IBIJD.js HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/js/main-B6NXVWFN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:17 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 49\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y5nVwXBhBwy82Tsos0izPeO%2BIQAkQ8OM5i6dScPS4OJPXcx9ASbLs593pNOkIEQ2UsL4A4b6W6hPrEe9jkFRu3JKoXCf2eChYVHPyqQ%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c2ff6f49c2ab4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16872869822\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:18.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/destination?id=AW-16872869822\u0026cx=c\u0026gtm=4e61m0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 24 Jan 2026 13:44:18 GMT\r\nexpires: Sat, 24 Jan 2026 13:44:18 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 24 Jan 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 121209\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":345390,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5376)","md5":"79eb3a329f9179679e32dbe79344a295","sha1":"cc0b8b47522ba85480926408970b23abf024a7e6","sha256":"ca0dd593fa5cfa282294b623b508c2c802e7927541379de555c0def1b73d4a79","sha512":"c588120daba1fc53cfeeceffde5397c3c8775aa1d2306b61265447b619ad20bccd802f1b8f2d3601b3b894359b852d8f052d51987beb9758d2589be40c5dd6d8","ssdeep":"6144:XJmMvPgQAxJ508RYoeXDIItDmlFldbKKCY5dqmQi3I:5mMngQAxJ508RYPIItDIdq+I","tlshash":"cc7408cd77d6706683a3a478403f114ba17b7a92f44cc899f186d8e42e74aaa4177f3c","first_seen":"2026-01-24T13:40:10.953077Z","last_seen":"2026-01-24T13:44:59.933179Z","times_seen":3,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/pagead/1p-conversion/16834391571/?random=193212361\u0026cv=11\u0026fst=1769262260364\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v9208585794z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391253~115616986~115938465~115938468~116682876~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=vOaXCMquzNIaEJPcods-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=5~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXjPss9GGPkXuop1JR8edX73SpXcHyYO7zg\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdS-0_Q4AQ61Xd41EvJm_hmJKzmF7KifxvMkQV7KgNBq4ejlMSAZqAoaAnFg\u0026ipr=y\u0026pscrd=IhMIp72_xKekkgMVr0qRBR0LkCi5MgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2Nibi1BSGtVeE1EbjZrekVjX0tVTml0RUxmOWY1T0k4MEZMd25mb2M2cjZaRXlGY09ock0xRXd6DAgJYggIABAAGAAgAA","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:54:04 GMT","end":"Mon, 23 Mar 2026 19:54:03 GMT"},"fingerprint":{"sha1":"79:6F:61:ED:85:71:D3:03:AF:65:A2:06:5F:BB:34:EA:21:15:9F:B6","sha256":"4B:DF:16:AF:B7:35:08:DF:0B:C5:AF:B6:BB:CA:F4:32:78:1C:B7:4B:BE:2D:E3:AE:55:3D:F5:3B:E0:D2:A6:AB"}}},"request":{"raw":"GET /pagead/1p-conversion/16834391571/?random=193212361\u0026cv=11\u0026fst=1769262260364\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v9208585794z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391253~115616986~115938465~115938468~116682876~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=vOaXCMquzNIaEJPcods-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=5~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXjPss9GGPkXuop1JR8edX73SpXcHyYO7zg\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdS-0_Q4AQ61Xd41EvJm_hmJKzmF7KifxvMkQV7KgNBq4ejlMSAZqAoaAnFg\u0026ipr=y\u0026pscrd=IhMIp72_xKekkgMVr0qRBR0LkCi5MgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2Nibi1BSGtVeE1EbjZrekVjX0tVTml0RUxmOWY1T0k4MEZMd25mb2M2cjZaRXlGY09ock0xRXd6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-25T07:55:31.332314Z","times_seen":818678,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/card-image.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/card-image.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-baf4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2B8fzgmGtppAcKAkP0yFsiHmh7uQCWdE7eXkHuIjoQk4ZFR%2FzxVa9m6btBkNmyvxO2nK4cTN2mUQTcMsGdum%2F5A9TqLry7k1v7R9R7Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e10b56b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47860,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9344b3e8aebb38d063b457b13a5329dc","sha1":"4cf23f0f6dcd0ca447f4a6bb3cc88476e0c9e840","sha256":"66fb811b5a2eb4848bea8d30bd890d91dd52e78b4cddf32802451f897cd26025","sha512":"57a039b5c11438817a6dd38b7d80981f5e1c37dae810ffa9aeff6932f3edfe9b5a9293ac316787e2b7d1602de25e53db09e6e33aa5e69262dccd87a5e15f9572","ssdeep":"768:ATtZ/8afdw+0DMqywcCnLDEtCb8S5d0DpIX0CcSNXEfdkqeH+oHfohsVmvih8gLs:AROaHKneBSnwuX0mN0f+qwohRiC0MhQa","tlshash":"6d23f18921ae0298e63ff7bc73e8e420b0b713a457fef8d6d68356715c4c29a19424d6","first_seen":"2026-01-24T13:40:10.965979Z","last_seen":"2026-03-21T07:39:27.239594Z","times_seen":11,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/news_1.svg","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/news_1.svg HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6952a7c4-1ca2\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V9Cx%2FBivjrlnZurwQzPy4rWwbsNId8V1yEyDns6a40Mow26hATa42wVTLQJ9hdFr%2FtUZLxMbQGdnitlFyhJWMMMEUJycSndPeU1L0Uw%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff6e10b55b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7330,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"17bf620c0ccf418172d1e8c48bbae337","sha1":"773b181eb944cbbf90901ca0b619dd062f722924","sha256":"eb328ba42626fc44fe95faaa3f985c614775979e31e6576d51ede04fc2a1510c","sha512":"8a47424af570d5a743225fffda368cc282d60d8dafa3539cd20e64a80adde43c29d390b89e0f86df6e1c4c6680a54d7c3ce5338a2c2c8a4e34ea906366d7653b","ssdeep":"192:N5i1Bwil+bxnDCXQ3gNm7G67Px/ehA50XD6q:N5mcbxR37dPxSS0Xmq","tlshash":"7de181eaa3d073e4a846f7b7d94aa435b55f34fb7366878487409e41bd560ad088dcc0","first_seen":"2025-06-30T15:15:02.006399Z","last_seen":"2026-03-30T19:18:20.886694Z","times_seen":31,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:18.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nCookie: _gcl_au=1.1.1350480568.1769262258\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:18 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nage: 51\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NXFJCTvy6JT%2B7fPBtB%2BtrUndBrgOWI6FNjJTb05y%2BmRTd5DH6x2cq%2FrADIozpTIQInDC8doaeG4vlFlBqZvhk8DE1mw8fRag0eZugSs%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: 9c2ff6fb1c56b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/17159929999/?random=1290149443\u0026cv=11\u0026fst=1769262260545\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102015666~103116026~103200004~104527906~104528501~104684208~104684211~105391252~115938465~115938469~116682876~116988315~116992598~117041588~117042506~117099529~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=KXyNCPzBidQaEI-Bv_Y_\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=7~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAgim3bEC\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXhkaaakf9pGfobAzfrhZLI9eVHye9W3aXE\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdSxwHDZg4taitKFoSi5FfXd9Bd-OP1sM6-RdMKDdRZ1M7XegF9aMy8aAnrw\u0026pscrd=IhMInqDFxKekkgMVEwmiAx3abA-7MgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NZU20zZVNTdjdHZFpzdjJWemZ6ZTJ6MUl0OWY1Y2JEc3Z5aFZlWFVLWGFZUnlndjNYbmRJbnB6DAgJYggIABAAGAAgAA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"GET /pagead/1p-conversion/17159929999/?random=1290149443\u0026cv=11\u0026fst=1769262260545\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102015666~103116026~103200004~104527906~104528501~104684208~104684211~105391252~115938465~115938469~116682876~116988315~116992598~117041588~117042506~117099529~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=KXyNCPzBidQaEI-Bv_Y_\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=7~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAgim3bEC\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXhkaaakf9pGfobAzfrhZLI9eVHye9W3aXE\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdSxwHDZg4taitKFoSi5FfXd9Bd-OP1sM6-RdMKDdRZ1M7XegF9aMy8aAnrw\u0026pscrd=IhMInqDFxKekkgMVEwmiAx3abA-7MgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NZU20zZVNTdjdHZFpzdjJWemZ6ZTJ6MUl0OWY1Y2JEc3Z5aFZlWFVLWGFZUnlndjNYbmRJbnB6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlocation: https://www.google.no/pagead/1p-conversion/17159929999/?random=1290149443\u0026cv=11\u0026fst=1769262260545\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102015666~103116026~103200004~104527906~104528501~104684208~104684211~105391252~115938465~115938469~116682876~116988315~116992598~117041588~117042506~117099529~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=KXyNCPzBidQaEI-Bv_Y_\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=7~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAgim3bEC\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXhkaaakf9pGfobAzfrhZLI9eVHye9W3aXE\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdSxwHDZg4taitKFoSi5FfXd9Bd-OP1sM6-RdMKDdRZ1M7XegF9aMy8aAnrw\u0026ipr=y\u0026pscrd=IhMInqDFxKekkgMVEwmiAx3abA-7MgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NZU20zZVNTdjdHZFpzdjJWemZ6ZTJ6MUl0OWY1Y2JEc3Z5aFZlWFVLWGFZUnlndjNYbmRJbnB6DAgJYggIABAAGAAgAA\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/css/styles-BVIWQ5RZ.css","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /css/styles-BVIWQ5RZ.css HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-13515a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ae8eh1tqoffo1%2BUAkNZKKoQclmRMubWkiKTH9Vi4LaMLT7SgZ4wWh6eDw%2BAJeJe3zYhtOGM0av0w8WOYrzsS%2Ft3Y9mlmF%2FupecP5ask%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e14b77b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1266010,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f58ef8ee2beb8224e22af23dc14277c3","sha1":"f9873ef0b2240989934d351ced28532242afbbff","sha256":"f4baf426d40d8330269993839dee3991b1a227da91f2894dbfd70e2b756888ce","sha512":"d82ff1a62f813fdbe304d9fa9efe52a95e2b3a62812d5bb375201a1d1363f09c4780259da9efdd77dff1b5b4629e67bc077990f5338eb26e322fbe918193d81c","ssdeep":"12288:7Mn5U2XoAX0UMEUmzFiYxSlXkKJJQ1VpPkK:6FiYxSlXkK3MTPkK","tlshash":"ac250adff0c5323c8a6a8816fcc47a7ca83fd7a977235b89a11233655b6a6d7803154c","first_seen":"2026-01-24T13:40:10.883837Z","last_seen":"2026-01-24T13:44:59.935493Z","times_seen":5,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":359,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/feature_5.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/feature_5.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-4166\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cZFMqHrxPMwHkflB2eSIzkPUG3EldoBKZR5EH5cDSqDXkLCnnTVAgqYghwKKPukY9WMb%2FAnXf4tCF7xpoWGACOe6MWw782TOUYRSYYQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e10b51b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16742,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c02a2db685aec856a1eac1465e3ff509","sha1":"5a4bcd85133187436198d9c1d01ee13aea5507a8","sha256":"f46b271ce7f24b9bc6cf9d0be8a10264a4aa879efe90ee3e53355c5892e98841","sha512":"6b0cdbb29efca281c8b2e565c213ce56a3f78e463cec6db01e5adad253864f80aa9c026ea80934c47df7f9ea3ba3177c5ed32a894ed2ef9b2b3b92e514727112","ssdeep":"384:2b2JriAEhg7XrvjZpkEgAy5lC9qi5/cLxqzFE53:JrigvjTvo5quqz6h","tlshash":"16727d3f1ae4cd72f81a2436a2df2e1afbdce12559e119dcca750125ca1d596cf3840c","first_seen":"2025-07-13T15:42:46.642999Z","last_seen":"2026-03-30T19:18:20.849511Z","times_seen":36,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/feature_6.svg","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/feature_6.svg HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6952a7c4-f2e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=42UXVGIWWyklDoxoxZEdZYv8kZuxUgezyflCulf9DPhhEcxn11HZ5RzfMnjIRINdfDc4MgvVxcyma0pxJqOM8HVAHqnWVv2h5koo54o%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff6e10b52b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3886,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d78485fdb6e5df1117dfda24b0e4dc63","sha1":"5c834f1c4aaf4bc3ad08f649b52f4dc7edf67584","sha256":"a322f866ef921bf1a7b255d9cb0d7d1b0bd9c794d27802bf3fc44b16ea050d35","sha512":"f1428d0221027646c12e6d48cff9c3f5240ea75effea1a547242b86980c954589c47c7620a46b1eb3ad18ac19ddad1cd0fcb2317fe16676a8e80da7b025924a3","ssdeep":"","tlshash":"5481a4d4335943f0d90d77ecc90aa8347b2338faea75eb8c86912e4a310206d5d58cd6","first_seen":"2025-06-30T15:15:02.009356Z","last_seen":"2026-03-30T19:18:20.872777Z","times_seen":48,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/feature_new_1.svg","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/feature_new_1.svg HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6952a7c4-521\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ttAzaxnssFbnkGaFu3h4P6%2Bj2COPuumPGHX72eeOGXZoD3PYa7I%2F8Yq5iXLX2HC2CmiO7NK3t9wTS7hMSY7sqSl0nGKyC7sS%2B4qAVUA%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff6e12b62b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1313,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"40f62cf67f4393be0847721ea094f605","sha1":"1815baba4245b03894b6821b971ce47a92f50f64","sha256":"c64c96a185768503b6ffbcf6df2f903ea579c0085959d638fd856738d743d584","sha512":"8741879daecbd112a1228b412c44df5c5f0851109ec48f983976fe6520fb49ee0b354cefc936a17aeb30571092a16d583d7288372a3d55bc9b3fd3a2cf304d47","ssdeep":"","tlshash":"0a2115d6524cc6f45cd39398154b1064cf7a65e6ce94408dd95069afb8fc08ec648ec9","first_seen":"2025-09-17T02:28:10.560215Z","last_seen":"2026-03-29T15:46:36.773726Z","times_seen":23,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/box_13.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/box_13.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-39238\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jTzXUJn89YxRLBIoiz9l8UhXBrYE6iA5cRNvPdCIDd65WgWkLxHDAshN4zU0HoNg5EF0F9%2FHUDAHUHfzgS7xtgLj3mKYI1E9AjJ2SFU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e13b66b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":234040,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c3dd339147223e03338d0ddb663c213d","sha1":"88dae7fc035f5abe2267053595b4b4f317a68bce","sha256":"ff264bde9cc7c66f5e7c45bfcda6775f77045f54943ff03c8b7da016a2234e71","sha512":"ec9ddf2ff9ab14daaed4af48fd8f24ea9558aa86edaf901fe1e578e736954338e862ab942c5be1906d72896d8c6d9676f0da7ebe672bc785494a1c9c83a8192d","ssdeep":"6144:5lAxwigGnP0VFce7B6/O7NqUdZflHdL3bH:5yXgOPmPq05Fdbj","tlshash":"663423d8235407c8e626b53c1a3332ba0405fd559a9a911f8e922f3d7bafc778d307a1","first_seen":"2026-01-24T13:44:15.026373Z","last_seen":"2026-03-21T07:39:27.320659Z","times_seen":5,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":394,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/favicon.svg","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:16.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/favicon.svg HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:16 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6952a7c4-631a5\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y5CbJYOT0aOwgdY4EjR8x9xfsVnqzdoT%2F4s0glJ%2BPUma2KT6qPMdG%2FAa2bZvnWIhFC%2FwqHCIqi%2BP3v%2BWXGI3z2BDZyrAwSKZYFklNr0%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9c2ff6f1fc08b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":405925,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2a50f854da41184fe1433f5bf880c85d","sha1":"b790cb7936ea271f9b0a152270c53854ac0e7853","sha256":"a13f87dd0d18ff5cfa0977bb74829ceaefe297ea0350da3f2b802bfbcc35a145","sha512":"8a43e0f87f8fdca09f82f278d93e47b182f5b0b3982ef58ed0b5ab166f705f4ac0d90627972708b2098ca64f2b42b1a02b3d02c4a91eed9eb539f860c589e9cd","ssdeep":"6144:861/yojA4tpaSxbZ0oimAUkOg+L7akbIC1rHxKLfPR20sL9u5FgAjbeo2pdilt:/1/5fnaSxbZcmAUkOgCb7caLMDgfp0lt","tlshash":"3a848d26494e2bae7a779d1dcf06583f2d5124dda284c5cf7c8ea2f9d36b4148a2cc70","first_seen":"2025-06-30T15:15:02.014806Z","last_seen":"2026-03-30T19:18:20.88152Z","times_seen":43,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/js/chunk-6RDDCUYH.js","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:17.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /js/chunk-6RDDCUYH.js HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/js/main-B6NXVWFN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:17 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 49\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p2HvAdkfp%2F5EScKIuUQPnCc1%2FBMQP5eluMXfJw2aI7Mb7DCzyNAOCdiP12WCAnRlLJsX8xsnWsQkdXczckuj4X%2BC8b57DbV3lN4p6AA%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c2ff6f3fc1eb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T13:44:13.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:44:13 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dymghZxjjQtOHRV%2F6WUkUHjyV3X5wtiGf4Cvf5eM0%2F9YwYgjSzKZefEIZBIRbF4Wc5%2FlRvI1ULZeBG8zLLP21UU7KWfRRvpFRYqt9AE%3D\"}]}\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c2ff6ddcee7b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":256470,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (35363)","md5":"2cc2d3ab0a3509a0e6f944ae15218d77","sha1":"f46cded72aecc321f99e8a5f0361dbfe1c0f1ff8","sha256":"1c78f3c7051a1e9f8d4438fd5dea4bdd19468764c398b81266e56aca7503bd88","sha512":"bce26b75604e2c090b71703ed353b2ae5f78217d3fbd26e63f9f4e3e335e6063e53d9fa363bc5af10f3cba001de1356fad1fc76e9d8056a6d5fe0e39d0f48998","ssdeep":"6144:+5UcN/zzzX+zjNDks1zGRedO4SgpWb6/ukoHym74kZcfDM9v5Xu:+5UYYO4SgpWb6/ukoHym74kZcfDM9v5+","tlshash":"c5448fb3570420ae07d7e85a40d67a0b6079cde4d21f8ede708c9a2c5fc5be698d1bc8","first_seen":"2026-01-24T13:44:15.004594Z","last_seen":"2026-01-24T13:44:59.940298Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":2,"dns":1,"connect":2,"send":0,"wait":25,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/box_3.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/box_3.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-1183c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mF37M3bCqD52fFRrXPQuWmspzt4XaotD%2B%2BV1H6P4%2F5BgGyWbhqW6ONLKYUtfskh326i55Q9c53lvWnv%2FKAnsPYC%2Fxx8fZ4jtYwDFdtQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e13b6db4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71740,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dda99546575366a103f88df1119aa466","sha1":"08f87cbf3e6084b4f708aeb5e3aa16b06087ea57","sha256":"48a6e89a52faf1c6d23671a488b4ecc5b93deb2375920fffefee6ff19810d296","sha512":"2d2822fb5ef5081620de52893649a7c22b0048afc282e22e76a65892951dc69e6fdbd8bfccc5ee0fd90c029d28e02fc442a4399b9cb86ae8d401e834f7b7b6b5","ssdeep":"1536:9eGHXq3bDdpQSRe54VKoEPs3OZHaafuxInNHQGP77g0ZO:dHsb44Ups36fuxG7O","tlshash":"666302225ad8afdb66e90d6d0d606766717d8f4019ac733c610d7ce0a029f98d0e7fe2","first_seen":"2026-01-24T13:44:15.019002Z","last_seen":"2026-03-21T07:39:27.289681Z","times_seen":5,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":209,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-17159929999\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:18.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/destination?id=AW-17159929999\u0026cx=c\u0026gtm=4e61m0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 24 Jan 2026 13:44:18 GMT\r\nexpires: Sat, 24 Jan 2026 13:44:18 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 24 Jan 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 121169\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":345410,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5376)","md5":"f9d9fe0895e315ba2a61cfcbb2bb7852","sha1":"8efbaeacacfb425f802c76aca39a66f97af62441","sha256":"3ac69a8f91e16a4b7c8b14da500f91edf40fa68a2ae3e124f3db280b914842ba","sha512":"d81aa0cb24f4584e7726323fea2115d2d1bd0b7cc45f52a2f9887c51cc0d4aa1ddc2cd389baa11f0285174ff38d082fc079966fe786fff5bb31efaafa3ce0149","ssdeep":"6144:0JmMvPgQAxJ508RYoeXDIItDmlFldbKKCY5dqmQi3I:ImMngQAxJ508RYPIItDIdq+I","tlshash":"107408cd77d6706683a3a478403f114ba17b7a92f44cc899f186d8e42e74aaa4177f3c","first_seen":"2026-01-24T13:44:59.942964Z","last_seen":"2026-01-24T13:44:59.942964Z","times_seen":1,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/16834391571/?random=1769262260364\u0026cv=11\u0026fst=1769262260364\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v9208585794z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391253~115616986~115938465~115938468~116682876~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=vOaXCMquzNIaEJPcods-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=5~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=7","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:20.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"GET /pagead/1p-conversion/16834391571/?random=1769262260364\u0026cv=11\u0026fst=1769262260364\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v9208585794z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391253~115616986~115938465~115938468~116682876~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=vOaXCMquzNIaEJPcods-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=5~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=7 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nOrigin: https://btchyper.claims\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:20 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: https://btchyper.claims\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: gzip\r\nserver: cafe\r\ncontent-length: 988\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1524,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"ASCII text, with very long lines (1507)","md5":"39f763c9d25ccf9a7544e662279f074a","sha1":"fac76962b4d5e6963c3e55c420383a9fd50afdb0","sha256":"1b26be85bd8d577a69ac973f135a90af8b258bf75491b95368215f11933fff69","sha512":"af6ccf965b5e0492b3a73dc6e7844d06cd11e3a9ea6bf2e0974cb336157f781e62e78a645a5c145c696da6af76dc2a724b31c025c39cb132f6316f89f300211a","ssdeep":"","tlshash":"0231f7ff6a271f9b6323be001464af017f7370a74460db9e21c68ca721a276d7124ee1","first_seen":"2026-01-24T13:44:59.946236Z","last_seen":"2026-01-24T13:44:59.946236Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/banner-bg.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:15.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/banner-bg.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:15 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-b7b8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aY49jl7GMLversubmKP8n3nPO3V08Z0iJxJUoDySQWk504YtwtOnUc8q1PVIarKRyKuOZx0sBS656WnmiiQdmWNRIb7UCFTBT5p4%2FVg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e81ba7b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47032,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"14b13ffc103434591d91479388b72dc6","sha1":"0854f7aa1ef56c6fa9cc2d0d45b5fabea489fe03","sha256":"de1b35021d9311339c166f9c9d761080c5d64de7e0a436a4965645de40738ab1","sha512":"f9c0aa5e99debb47d2948bbb036bf7d23a3dcf47acdb7c48bb3a09bbc605fc9da111a169a59e063a4029a4bb85a84afa8a925873120cdc30d3cc451a58308697","ssdeep":"768:yTHEo8gn4WLuNnaZ9slzrLUmocCdKhqsbabyo/ud8EC4hXAWMHraV/lOcPuWlW:Wf8gnJ6ZaZErLUmocZaycudXCUR2c/Ex","tlshash":"722302d9d7350ad5f09a67f398a351a4f11dc3c02e60e4bba651716823ed3487e1473d","first_seen":"2025-06-30T15:15:01.994348Z","last_seen":"2026-03-30T19:18:20.858656Z","times_seen":56,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/feature_new_2.svg","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/feature_new_2.svg HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6952a7c4-1ec4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GvIk4BEmB59b2XPwEXo08oxk%2F0hqSY4eOtsdKg2Kg%2BR4Vo4QItGXdQzYj6fagMuY0VL9EgafXUJEuS4yPHftzy3gZqbq5%2BlvAKrVaz4%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff6e13b67b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7876,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aed1ccaffa89d82caeea379e69252b7f","sha1":"4a55334edebfa52c43fb2f71feb9c2cc49818937","sha256":"2dc64a028b3ad60e544b78d037a91e30d031858d93a03ffd3754307c5b0b675f","sha512":"45220df3679823898a703fdb9b8f898e5a3d210c92bee9fec1ae95e0689ed5a1435abd89eef6706e908503ea0bf4e097a2b767909f0533ac3ef95dc725698aef","ssdeep":"192:ZxyYWsTjvSW93JLotXeJYlliEhmoaA0HqRYqoPPx:ZWeuW3JLotOJ7EhFoZ","tlshash":"29f184da63a573d4e406f7b8a91694749a6f2cf5a7d6d794c310de90aa1308dcc9ccc0","first_seen":"2025-09-17T02:28:10.451912Z","last_seen":"2026-03-29T15:46:36.799797Z","times_seen":23,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/js/main-B6NXVWFN.js","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /js/main-B6NXVWFN.js HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:41 GMT\r\netag: W/\"6952a7c5-72688\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o7PDOTFeHq4HxPlssia%2FrALig%2FsNZj4GN%2FDu4B%2FfMpUq9nhk6CWsrFz%2F4e6v8c%2FMvrn%2Ftk9jB6tBJCbqjoXRdrk9NM98K0I%2F7WNRx8E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e14b75b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":468616,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1632e3ff854da2d96a5c4e9f9802095a","sha1":"f4e9806463da783c32d78bf9cb3bf32f61e8ae9c","sha256":"17477f76c39eea084ad8afc444268cf952fb8a75fb007119bdadc4c4d37791c8","sha512":"e499ffbd15d767be28f112cfa13443fe10963aa6f8d8e3c48c2d9f11fb9ef56048d978d79f6e54cb63e6e62255b2414265eb603aa26331e95d413f30d40f4e9d","ssdeep":"6144:3zaDiQe8uN3v4cU0iQS/dM561OK23X4dmvgR1eGykrxbJq4FUlO/N:3k2N3BaQH2H","tlshash":"7ca41aa57751703d939a4061847b3506a33ca460d50a856cf368e8edbaedecc61ebf3c","first_seen":"2026-01-24T13:44:15.086598Z","last_seen":"2026-01-24T13:44:59.949885Z","times_seen":2,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":316,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/trustby-bg.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:15.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/trustby-bg.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:15 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-313a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XJokUym9UqyHWX1tjaXqKThzk%2F3tPxUn%2FXblI8y4OP2vhP96vmXRENIMdxhFG3RK2wMYFLK6YMMi5%2BVSBu1HThPQX9LhxGuCP0d0tmI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e82bacb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12602,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0aa1df31bf2e36c28a23362c6c352f02","sha1":"fd5b896e2e609657efe3e9a1311ce5a89978e882","sha256":"95748e73a4f1ef6cf0ce97466a26e198b7a0c7e4861850784d7128712fad1da8","sha512":"0b5e6234434fc2d219808eb89f309fa9ef41b020713af8110c0a400ece36596a3803fc7d836b43aa0220feaa757571de456d51ab59a5ec524dbcb79a3f7fda07","ssdeep":"192:KRQvWaou0gD72vbGZ7BsPcsTGQSD3feASY4gW6h0MMRo+haiLLNErRcD5O6pvsmW:KKeaoqD7mGZ7BsfTGQS667MpEr0/pkmW","tlshash":"cf42c0cb7d56c93f20d9d9f4687d1328d702e7923af80ea233ea1551d0c4ede8a19239","first_seen":"2025-06-30T15:15:01.986146Z","last_seen":"2026-03-30T19:18:20.887408Z","times_seen":47,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/twitter.svg","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:16.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/twitter.svg HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:16 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6952a7c4-449e3\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YswNTVmLWT4akSUfX7B%2B0M7Ge2QlTWT1Uj6BdZWsyRYBtsw0c3VL477f8g0djuS53MARbP5VUMPNK2EurlOkR1wfBI29hGkUYDDfXDI%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff6ec2bd6b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":281059,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"08454f74e0002cf42992e2f9794d81e1","sha1":"a8c80d69ee2646a1956bcdbc1f113729799bdbe9","sha256":"5f72300b98718ade7d5039d0bcd324083bd666b240971f22bf58e722caf98134","sha512":"d22b64914085017b44b24314a28908bd7eb584c0d2924d7ff53a129d8a8aac067bc635f6e5c832f6ac81ee0958936b6be0b3ad1dbc2c2fd3f6306c1789075dbb","ssdeep":"6144:Utx0yc0VaasroXjN3N7IJ08a9huTl/Ar+R42mlU/qk+I8:ox0wR3VIJ0qTzmlU/qk0","tlshash":"28542a6e4c5cab5f33321c6ecb07247e6e8a65edb24891cf28df71edd2660509660de0","first_seen":"2025-06-30T15:15:02.018856Z","last_seen":"2026-03-30T19:18:20.896782Z","times_seen":40,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/js/chunk-NUY2RPSF.js","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:17.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /js/chunk-NUY2RPSF.js HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/js/main-B6NXVWFN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:17 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 49\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gVqKMn%2F7N4Rm%2BRX5tUpd%2Fgpq4NgA6LRKnvNAlIghMi5WQEa9lkLyozEO%2BEV4VvRW3Xdp%2FT%2Fbmri0aqWxZ2IZzRASs8M7lbrv4s6KabU%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c2ff6f42c22b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-EMMVCEKS5X\u0026cid=2103141181.1769262259\u0026gtm=45je61m0v9219467817z89219080431za20gzb9219080431zd9219080431\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391253~115938465~115938468~116185179~116185180~116682876~116988315~116992598~117041588~117223558~117223565\u0026z=1625258326","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:19.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:54:04 GMT","end":"Mon, 23 Mar 2026 19:54:03 GMT"},"fingerprint":{"sha1":"79:6F:61:ED:85:71:D3:03:AF:65:A2:06:5F:BB:34:EA:21:15:9F:B6","sha256":"4B:DF:16:AF:B7:35:08:DF:0B:C5:AF:B6:BB:CA:F4:32:78:1C:B7:4B:BE:2D:E3:AE:55:3D:F5:3B:E0:D2:A6:AB"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-EMMVCEKS5X\u0026cid=2103141181.1769262259\u0026gtm=45je61m0v9219467817z89219080431za20gzb9219080431zd9219080431\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391253~115938465~115938468~116185179~116185180~116682876~116988315~116992598~117041588~117223558~117223565\u0026z=1625258326 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:19 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-25T07:55:31.332314Z","times_seen":818678,"resource_available":true,"data":null}},"time_used":1357,"timings":{"blocked":581,"dns":116,"connect":23,"send":0,"wait":43,"receive":0,"ssl":577},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/17424319534/?random=1769262259678\u0026cv=11\u0026fst=1769262259678\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115938465~115938469~116682876~116992598~117041588~117042506~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=-upqCKnBzf0aEK6IyPRA\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=1~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=7","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:19.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:53:15 GMT","end":"Mon, 23 Mar 2026 19:53:14 GMT"},"fingerprint":{"sha1":"9C:37:F9:BF:35:57:46:D5:34:37:23:71:DE:BD:66:5E:77:DA:8A:62","sha256":"37:EA:A6:C5:A2:9F:7B:7E:6E:78:CF:38:EA:C5:EA:56:BD:FF:08:67:85:50:6B:BC:AC:6E:E6:19:76:0A:6A:97"}}},"request":{"raw":"GET /pagead/1p-conversion/17424319534/?random=1769262259678\u0026cv=11\u0026fst=1769262259678\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115938465~115938469~116682876~116992598~117041588~117042506~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=-upqCKnBzf0aEK6IyPRA\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=1~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=7 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nOrigin: https://btchyper.claims\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:19 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: https://btchyper.claims\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: gzip\r\nserver: cafe\r\ncontent-length: 982\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1513,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"ASCII text, with very long lines (1496)","md5":"acdca685e0df98cc1fa0bbd7a53b37fb","sha1":"d55ecb4d99329f88b3f6f1abf4c0f664222157a0","sha256":"8e5efb5bc54ced3119bd92f3636fe1f5ab84e27674f24b23dfd786bf1492c106","sha512":"a0869c25f9eb0794956b0b40bda8a8bef75da1cee0c8104f9a125c5b7a12926236ef3509d2993053fa991e821afebcda679357a1e56ba2472af3419c6990adbb","ssdeep":"","tlshash":"8b31c7ff260b1f6b1342be0024b0df063fa3b0b71870db9d70d588572595b1a7128ad0","first_seen":"2026-01-24T13:44:59.953674Z","last_seen":"2026-01-24T13:44:59.953674Z","times_seen":1,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/box_4.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/box_4.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-2d180\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PKn4U0LQkubTyoBX6SQtPYItzzwmwKky6PjdY7jvp4CGtxiUZNFaOBF2wxbz2bZPBLKjUht54lI%2FP4L09wxjqQEoyCOkaU8uz27e0aQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e13b6fb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":184704,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ae62fc5d5e14bef87877d60a3f728169","sha1":"4c282c18862f01a7afc48669281fe27fef6f892e","sha256":"25c102012a28d8a976f1e76ea74d8ff953d59df10f5b50e9af4a766de1bcd609","sha512":"3976b674c7e8ff89ea4c800de59a4140dd7a8ad9272e1b854bdb1da6caa54962f12a9aee5e5b34fa40e5a3504d588d212e6fb05ef29148f8ec8a878a0077be8e","ssdeep":"3072:wMimBcAd54ca+rFdFP1oIYU9MYUdHzFJG+ChV0qe7gfONS:1iIc4I+JP1oIz9MzHz++cVXeLNS","tlshash":"8b041299e9369b65fbfd1979cf3809b31111bf0950e436aecc8942f4bac989c7a6500c","first_seen":"2026-01-24T13:44:15.067307Z","last_seen":"2026-03-21T07:39:27.269723Z","times_seen":5,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":363,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16835508600\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:18.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/destination?id=AW-16835508600\u0026cx=c\u0026gtm=4e61m0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 24 Jan 2026 13:44:18 GMT\r\nexpires: Sat, 24 Jan 2026 13:44:18 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 24 Jan 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 121170\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":345390,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5376)","md5":"dfe560430970a82ab6d641cdc08fa2b9","sha1":"9b24a62697160cc2efa877d073775bef11be7c5d","sha256":"134088a75da0ceb81c1129d74951dfba3a3263f6738361dcce4c9f60b2298b91","sha512":"6724d82207707eb0e7d6f1862c150af0ddf469edf0794da5d22430564ee8e385128123040fb8ec33b12b143ea35d56ff00066e561a17cad11d280be9061d13ab","ssdeep":"6144:YJmMvPgQAxJ508RYoeXDIItDmlFldbKKCY5dqmQi3I:cmMngQAxJ508RYPIItDIdq+I","tlshash":"307408cd77d6706683a3a478403f114ba17b6a92f44cc899f186d8e42e74aaa4177f3c","first_seen":"2026-01-24T13:43:29.385594Z","last_seen":"2026-01-24T13:44:59.957534Z","times_seen":2,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/16834013568/?random=1769262260797\u0026cv=11\u0026fst=1769262260797\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115616985~115938465~115938468~116682876~116988316~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=kR3sCO6z-IgbEIDTits-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=10~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:20.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"POST /pagead/1p-conversion/16834013568/?random=1769262260797\u0026cv=11\u0026fst=1769262260797\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115616985~115938465~115938468~116682876~116988316~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=kR3sCO6z-IgbEIDTits-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=10~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nOrigin: https://btchyper.claims\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:20 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\nlocation: https://www.google.com/pagead/1p-conversion/16834013568/?random=268863216\u0026cv=11\u0026fst=1769262260797\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115616985~115938465~115938468~116682876~116988316~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=kR3sCO6z-IgbEIDTits-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=10~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXhirtVeH2XxFfnr7QhkpwqDDpNfKnolzbU\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQCDjELsoOQBSICPgtdz2It36bdLzu-V081xCbpoeQzGhxBarab7QYaAmKH\u0026pscrd=IhMIx-DMxKekkgMVt907Ah1koh0wMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NiZFQtVEtjcDE0YUJDRGtORG5VUWU5Y1JOcC1rb3Jybi1QMVVyOUxuc25TXzhhSE1CaUpxcjB6DAgJYggIABAAGAAgAA\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/16834301606/?random=1769262260975\u0026cv=11\u0026fst=1769262260975\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v9221964488z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391253~115495939~115616985~115938465~115938468~116185181~116185182~116682876~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=bMbECI3dzdIaEKadnNs-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=12~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=7","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:20.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"GET /pagead/1p-conversion/16834301606/?random=1769262260975\u0026cv=11\u0026fst=1769262260975\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v9221964488z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391253~115495939~115616985~115938465~115938468~116185181~116185182~116682876~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=bMbECI3dzdIaEKadnNs-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=12~0\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=7 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nOrigin: https://btchyper.claims\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: https://btchyper.claims\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: gzip\r\nserver: cafe\r\ncontent-length: 1008\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1561,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"ASCII text, with very long lines (1544)","md5":"64f82621efc26993ac4fc1e70234f994","sha1":"cafc054c1ce07d697c3a17bedd5a906f7c345f47","sha256":"e07eea9e8e630b4556af4917cc015145bb3198b738735a3ab635ed52e172f497","sha512":"06b0d1fae91df6d1ae3d79a52b8783519d1d9595e9c022c432bbf432073f2f72d698a8f1228009bcaebade37fd504b6332de7493d136004ba5f74c4b960920a7","ssdeep":"","tlshash":"4e31b7ff555b1ea71373fe8424b0ab083b52705759504f8961814873159272d7164a92","first_seen":"2026-01-24T13:44:59.959151Z","last_seen":"2026-01-24T13:44:59.959151Z","times_seen":1,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/16808619681/?random=2048871768\u0026cv=11\u0026fst=1769262260128\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115938465~115938468~116682876~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=BqiwCP2PoLUbEKHd_M4-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=3~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAgim3bEC\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXjPB6OZ_DyL2oNoP03XQ2D4vUidksnDIY8\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQqnysCGzjVt39Ukr2Hj8SfxqLvG2qdOV7KOegGX3aMHGQ2ajnMZOsaAp-4\u0026pscrd=IhMIiIuoxKekkgMVGPM7Ah1ntTskMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NZdzdadV9Sc3U1ZElEakVOVHZMa3dtcV9WS2xUamlpUDFMZTZHelRJT3lHVk1GdEEzOWJjVGV6DAgJYggIABAAGAAgAA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"GET /pagead/1p-conversion/16808619681/?random=2048871768\u0026cv=11\u0026fst=1769262260128\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115938465~115938468~116682876~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=BqiwCP2PoLUbEKHd_M4-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=3~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAgim3bEC\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXjPB6OZ_DyL2oNoP03XQ2D4vUidksnDIY8\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQqnysCGzjVt39Ukr2Hj8SfxqLvG2qdOV7KOegGX3aMHGQ2ajnMZOsaAp-4\u0026pscrd=IhMIiIuoxKekkgMVGPM7Ah1ntTskMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NZdzdadV9Sc3U1ZElEakVOVHZMa3dtcV9WS2xUamlpUDFMZTZHelRJT3lHVk1GdEEzOWJjVGV6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlocation: https://www.google.no/pagead/1p-conversion/16808619681/?random=2048871768\u0026cv=11\u0026fst=1769262260128\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115938465~115938468~116682876~116992598~117041587~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=BqiwCP2PoLUbEKHd_M4-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=3~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAgim3bEC\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXjPB6OZ_DyL2oNoP03XQ2D4vUidksnDIY8\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdQqnysCGzjVt39Ukr2Hj8SfxqLvG2qdOV7KOegGX3aMHGQ2ajnMZOsaAp-4\u0026ipr=y\u0026pscrd=IhMIiIuoxKekkgMVGPM7Ah1ntTskMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NZdzdadV9Sc3U1ZElEakVOVHZMa3dtcV9WS2xUamlpUDFMZTZHelRJT3lHVk1GdEEzOWJjVGV6DAgJYggIABAAGAAgAA\r\ncontent-type: image/gif\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/16834016496/?random=940841381\u0026cv=11\u0026fst=1769262259957\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v9225624967z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104573694~104684208~104684211~105391252~115616985~115938465~115938469~116185179~116185180~116682876~116988315~116992598~117041588~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=JiweCJXEv9IaEPDpits-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=2~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXgUZArxRPerkhLJfKzcLeV1_XCczvrEQvg\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdTekW4DJ7ZSfxnaYziim3SWKKIs5TpcJZuuzlUZvoh5r3iVRhgYSv4aAgXY\u0026pscrd=IhMI5IWoxKekkgMV-EaRBR0YOB9AMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NiR2dXNDJCbFdhQjFhckZwNU9xcGxGT3RhSlVOQWlsOEk0NkYyc3p0OTdxUlRGYkpsRkhvaVp6DAgJYggIABAAGAAgAA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"GET /pagead/1p-conversion/16834016496/?random=940841381\u0026cv=11\u0026fst=1769262259957\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v9225624967z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104573694~104684208~104684211~105391252~115616985~115938465~115938469~116185179~116185180~116682876~116988315~116992598~117041588~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=JiweCJXEv9IaEPDpits-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=2~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXgUZArxRPerkhLJfKzcLeV1_XCczvrEQvg\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdTekW4DJ7ZSfxnaYziim3SWKKIs5TpcJZuuzlUZvoh5r3iVRhgYSv4aAgXY\u0026pscrd=IhMI5IWoxKekkgMV-EaRBR0YOB9AMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NiR2dXNDJCbFdhQjFhckZwNU9xcGxGT3RhSlVOQWlsOEk0NkYyc3p0OTdxUlRGYkpsRkhvaVp6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlocation: https://www.google.no/pagead/1p-conversion/16834016496/?random=940841381\u0026cv=11\u0026fst=1769262259957\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v9225624967z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104573694~104684208~104684211~105391252~115616985~115938465~115938469~116185179~116185180~116682876~116988315~116992598~117041588~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=JiweCJXEv9IaEPDpits-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=2~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXgUZArxRPerkhLJfKzcLeV1_XCczvrEQvg\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdTekW4DJ7ZSfxnaYziim3SWKKIs5TpcJZuuzlUZvoh5r3iVRhgYSv4aAgXY\u0026ipr=y\u0026pscrd=IhMI5IWoxKekkgMV-EaRBR0YOB9AMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NiR2dXNDJCbFdhQjFhckZwNU9xcGxGT3RhSlVOQWlsOEk0NkYyc3p0OTdxUlRGYkpsRkhvaVp6DAgJYggIABAAGAAgAA\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/pagead/1p-conversion/16834016496/?random=940841381\u0026cv=11\u0026fst=1769262259957\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v9225624967z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104573694~104684208~104684211~105391252~115616985~115938465~115938469~116185179~116185180~116682876~116988315~116992598~117041588~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=JiweCJXEv9IaEPDpits-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=2~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXgUZArxRPerkhLJfKzcLeV1_XCczvrEQvg\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdTekW4DJ7ZSfxnaYziim3SWKKIs5TpcJZuuzlUZvoh5r3iVRhgYSv4aAgXY\u0026ipr=y\u0026pscrd=IhMI5IWoxKekkgMV-EaRBR0YOB9AMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NiR2dXNDJCbFdhQjFhckZwNU9xcGxGT3RhSlVOQWlsOEk0NkYyc3p0OTdxUlRGYkpsRkhvaVp6DAgJYggIABAAGAAgAA","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:54:04 GMT","end":"Mon, 23 Mar 2026 19:54:03 GMT"},"fingerprint":{"sha1":"79:6F:61:ED:85:71:D3:03:AF:65:A2:06:5F:BB:34:EA:21:15:9F:B6","sha256":"4B:DF:16:AF:B7:35:08:DF:0B:C5:AF:B6:BB:CA:F4:32:78:1C:B7:4B:BE:2D:E3:AE:55:3D:F5:3B:E0:D2:A6:AB"}}},"request":{"raw":"GET /pagead/1p-conversion/16834016496/?random=940841381\u0026cv=11\u0026fst=1769262259957\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0v9225624967z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104573694~104684208~104684211~105391252~115616985~115938465~115938469~116185179~116185180~116682876~116988315~116992598~117041588~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=JiweCJXEv9IaEPDpits-\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=2~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=8\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXgUZArxRPerkhLJfKzcLeV1_XCczvrEQvg\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdTekW4DJ7ZSfxnaYziim3SWKKIs5TpcJZuuzlUZvoh5r3iVRhgYSv4aAgXY\u0026ipr=y\u0026pscrd=IhMI5IWoxKekkgMV-EaRBR0YOB9AMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2NiR2dXNDJCbFdhQjFhckZwNU9xcGxGT3RhSlVOQWlsOEk0NkYyc3p0OTdxUlRGYkpsRkhvaVp6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btchyper.claims/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/sol-black.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:14.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/sol-black.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-378\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Ho%2BF%2B75F9h2MJaCHAisxWRrtkua%2BzeGaOjUEGtdOH7yzrY7sHQl8WYMGOlNZmx49fO3K44vrLk3gdktl2Oktf9pIGsNRHg8NesoKdg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e0eb46b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":888,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"07ca8b1115fa934dbedff8c173ac026d","sha1":"a691b9263dc62ad043f2f641f02a78f61788b983","sha256":"e7e67fc7770161e8f07db88a817ef8cbfc24dcc839655d7331eca726012a811f","sha512":"277af5a244094ee81223626ca8245c3cc77ab21c21cacc5fbeea785e2eb40cd69a4d9466555da706fb4b86dde5aba44f3a2413eca766f83d694d37e3ca0efe70","ssdeep":"","tlshash":"c6116319a580b452ea999c205311cabc254b2b0c4655f70ef5ac3c75124fe1aeaf0fd3","first_seen":"2025-07-13T15:42:46.606498Z","last_seen":"2026-04-14T15:14:08.41314Z","times_seen":39,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/17424319534/?random=329306280\u0026cv=11\u0026fst=1769262259678\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115938465~115938469~116682876~116992598~117041588~117042506~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=-upqCKnBzf0aEK6IyPRA\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=1~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXhfYfDClfmtebl8jS_jLMp0Erlp7dGMvyY\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdTklobPYupzS6VGEYBtX9QAvnURXPb02uMBhl6_xwL1nkqvBLlIYpMaArcT\u0026pscrd=IhMI8bSIxKekkgMVMM07Ah0XlxXqMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2Nid1lJQnZuN3FOb25OUGNZUDdDMlFyQ3B2U3RwYTJpOU5zNW9DM21lVktrbXdCQS1BR3I1UTl6DAgJYggIABAAGAAgAA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:21.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:10 GMT","end":"Mon, 23 Mar 2026 19:51:09 GMT"},"fingerprint":{"sha1":"9C:35:79:8A:ED:32:F2:D6:D9:BB:03:E1:7D:0F:E8:E4:3D:A1:83:18","sha256":"6C:DA:DC:11:AE:B8:FB:66:E0:27:39:88:95:AC:65:19:79:2C:82:F8:36:7B:E1:CA:24:C3:21:58:5B:4F:4E:98"}}},"request":{"raw":"GET /pagead/1p-conversion/17424319534/?random=329306280\u0026cv=11\u0026fst=1769262259678\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115938465~115938469~116682876~116992598~117041588~117042506~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=-upqCKnBzf0aEK6IyPRA\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=1~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXhfYfDClfmtebl8jS_jLMp0Erlp7dGMvyY\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdTklobPYupzS6VGEYBtX9QAvnURXPb02uMBhl6_xwL1nkqvBLlIYpMaArcT\u0026pscrd=IhMI8bSIxKekkgMVMM07Ah0XlxXqMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2Nid1lJQnZuN3FOb25OUGNZUDdDMlFyQ3B2U3RwYTJpOU5zNW9DM21lVktrbXdCQS1BR3I1UTl6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 24 Jan 2026 13:44:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlocation: https://www.google.no/pagead/1p-conversion/17424319534/?random=329306280\u0026cv=11\u0026fst=1769262259678\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be61m0z89219080431za20gzb9219080431zd9219080431xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115938465~115938469~116682876~116992598~117041588~117042506~117223558~117223565\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbtchyper.claims%2F\u0026label=-upqCKnBzf0aEK6IyPRA\u0026frm=0\u0026tiba=Bitcoin%20Hyper%20Official%20Website%20%7C%20BTC%20Hyper%20Layer%202%20Presale\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1350480568.1769262258\u0026_tu=CA\u0026gcl_ctr=1~0\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026fmt=3\u0026ct_cookie_present=false\u0026crd=CPLOsQIItN6xAgihuLECCLHBsQIIsMGxAgixw7ECCIrFsQIIwsmxAgi0xrECCPvYsQII29yxAgjZ17ECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgju0LECCJfUsQIIyduxAg\u0026cerd=CgEA\u0026eitems=ChEIgPjRywYQjcrynompjMqfARIdAPSiUXhfYfDClfmtebl8jS_jLMp0Erlp7dGMvyY\u0026fsk=ChEIgPjRywYQrOLc-NewqP2hARIsADeCKdTklobPYupzS6VGEYBtX9QAvnURXPb02uMBhl6_xwL1nkqvBLlIYpMaArcT\u0026ipr=y\u0026pscrd=IhMI8bSIxKekkgMVMM07Ah0XlxXqMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhhodHRwczovL2J0Y2h5cGVyLmNsYWltcy9CWENoRUlnUGpSeXdZUTRwZnJnYjc2eWFEMEFSSXRBTkZqa2Nid1lJQnZuN3FOb25OUGNZUDdDMlFyQ3B2U3RwYTJpOU5zNW9DM21lVktrbXdCQS1BR3I1UTl6DAgJYggIABAAGAAgAA\r\ncontent-type: image/gif\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/images/slide-bg.webp","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:15.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /images/slide-bg.webp HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:15 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:40 GMT\r\netag: W/\"6952a7c4-3db98\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DdKgIstLZnkbJbx1dC11tZ4Z7xWCPs3K1qtlfHKbmHDE28MOnTw3nYXNw%2FZQmCp2OvQI2aPrU7FYOt%2B6duWKK58XuwU99%2FZsYN6ayCQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff6e81ba8b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252824,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2d72f7bb7c6afad999d475ac168e3dab","sha1":"e7c5ff73a2b893bd048472044ddae652cd29e1dc","sha256":"249c547e93fdbc44f19dc33ba688ba30a5a0e9ad051c91a8b5a71e18944b6859","sha512":"11c5bb6586cf2fe173748d0af243a56a754b0fd7535df6b568e2c59e83d4e9e769876a2a858286c7a29b2a6d3a8f80cbb65989ed05e575b13b8d2e5d7d3dbbb4","ssdeep":"6144:+rJeLHp/cQzS2BNpOVcLCFWxSRwmIsXvpCLThapA:+rJeDz30VsCFWSQsXvpclapA","tlshash":"2c3423e93a32a7357c21f32ddb57678b500613c0d7fafd6aed5c48134aa3d1029a62c6","first_seen":"2025-08-27T13:42:44.850949Z","last_seen":"2026-03-29T15:46:36.837527Z","times_seen":34,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btchyper.claims/js/chunk-CP7YJKJV.js","fqdn":"btchyper.claims","domain":"btchyper.claims","tld":"claims"},"ip":{"addr":"172.67.212.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btchyper.claims/","date":"2026-01-24T13:44:17.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btchyper.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:11:01 GMT","end":"Thu, 19 Mar 2026 08:09:48 GMT"},"fingerprint":{"sha1":"BF:DF:47:76:F5:FB:A8:9D:C7:6F:0F:EE:B6:56:C2:C9:E3:73:C5:DC","sha256":"68:BC:2C:6A:DF:D9:33:F8:2B:58:3F:BB:96:EC:D9:85:2E:49:BA:3F:FA:93:67:1F:5D:DE:5E:D1:D8:00:22:41"}}},"request":{"raw":"GET /js/chunk-CP7YJKJV.js HTTP/1.1\r\nHost: btchyper.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btchyper.claims/js/main-B6NXVWFN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:44:17 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 29 Dec 2025 16:09:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 49\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xP8VV%2BQn8OFivlkB8UB3hiMUm%2FZbTcSZikn1ZKS9UexmyKtN7vE1LxsZ9ZjK918OG74EGiBgC98XaFEBYZDv7wF75aGPa7rC37jm6dA%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c2ff6f48c29b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T07:55:25.579343Z","times_seen":14170152,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"btchyper.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}