{"report_id":"8ece187f-3423-40e4-a9a3-832f0eb94077","version":6,"status":"done","tags":[],"date":"2026-01-07T16:09:31Z","url":{"schema":"https","addr":"btc-strc.com/","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"btc-strc.com/","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"title":"Strategy","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T02:58:09.59359Z","times_seen":17717716,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"btc-strc.com/","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-11T16:09:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"btc-strc.com","ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-27","domain_rank":0,"first_seen":"2026-01-07T16:09:32.607121Z","last_seen":"2026-01-07T16:09:32.607121Z","alert_count":25,"request_count":25,"received_data":6653891,"sent_data":11202,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"btc-strc.com/49772dbd-d606-4ce4-905c-d55b641b0211","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-08-04T05:46:09.708582Z","times_seen":5105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/angular.js","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d28c186cd684509b91c645c6d1fe9004","sha1":"ac040c8053ca8dfe154025721a30a59e543edc14","sha256":"e3d5308a51513790d8c4cba34fabb94336664ee6c67fb381d0a928bbe1ecd035","sha512":"92bdd9da4d05f54f1270a5f58d39f2a273b2bf15d3be388cead76b3eb06442b290859fbaa94d81605d54e4321e7c3f216951f6fb6e057dd02f898ff39d1341ef","ssdeep":"1536:ZkDElohbDElohE5kuzYFnvxeISCHl9Fpmzw:g5EkwYZv8IFlNmzw","tlshash":"baa33fc9190590d44ea962eed4b3e005e128ce63cdacf16bd52edcd07a6df2684c727b","size":98479,"data":"","first_seen":"2026-01-07T16:09:38.208705Z","last_seen":"2026-01-07T16:09:38.208705Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/b4464e4b-afce-4b7e-b531-4cbe730d7b2e","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-06-28T16:47:47.454007Z","times_seen":5087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"btc-strc.com/UcCo3FwrK3iLTcviYwY.woff2","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btc-strc.com/","date":"2026-01-07T16:09:09.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-strc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 12:48:17 GMT","end":"Fri, 27 Mar 2026 13:46:47 GMT"},"fingerprint":{"sha1":"9A:59:7F:9D:AF:0A:1A:DE:AA:25:9F:44:D2:3F:72:A7:51:15:BC:FF","sha256":"97:3E:27:0B:A9:70:E6:07:71:E9:70:90:1F:CF:DE:82:3E:E8:16:9C:BD:14:2C:21:12:15:B7:F5:DB:7A:AE:F1"}}},"request":{"raw":"GET /UcCo3FwrK3iLTcviYwY.woff2 HTTP/1.1\r\nHost: btc-strc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-strc.com/css2-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 16:09:09 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 72920\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 17:33:22 GMT\r\netag: \"695169e2-11cd8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5A8%2FEq%2BW%2FgbMxMm2mYTmQns%2BWowX%2F75V1%2BioWPDE4zqD%2BSuydS34VjuRVbpr%2Fok0oUylYl0X9axFiM2hzcQHAduZmiHcsxogQCpZUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9ba4b7c97cac5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72920,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 72920, version 1.0","md5":"4b73e2ff3024784eca66d2120a9bcb22","sha1":"2870bcb8ece10145e089262bb6634d18ac85bec6","sha256":"2c295d99e26dcf357d4d01bcf270fd6924b600c9a13dd8c363ef114f4c6976fa","sha512":"9ebe0b2cc7ed7298d931fc246732ed90881f0252b957afbf14f390c75c1da3fddf1b3fbb00be8d489cbb7b5a18f9dbda17a24e18594d44ebba4b7ca3f50bb10a","ssdeep":"1536:MO6PxhqwEppt5fUo8w4d+X5JlhLzcua67BYePELa:M3qh7VdDf8GPH","tlshash":"f0630245820ba35ee09d4a79d27481f61fc2cb5c2bbf5c27538289ab5f57dbf6410134","first_seen":"2025-06-08T12:34:02.525952Z","last_seen":"2026-08-05T01:28:33.394386Z","times_seen":2104,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/UcCo3FwrK3iLTcvmYwYL8g.woff2","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btc-strc.com/","date":"2026-01-07T16:09:09.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-strc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 12:48:17 GMT","end":"Fri, 27 Mar 2026 13:46:47 GMT"},"fingerprint":{"sha1":"9A:59:7F:9D:AF:0A:1A:DE:AA:25:9F:44:D2:3F:72:A7:51:15:BC:FF","sha256":"97:3E:27:0B:A9:70:E6:07:71:E9:70:90:1F:CF:DE:82:3E:E8:16:9C:BD:14:2C:21:12:15:B7:F5:DB:7A:AE:F1"}}},"request":{"raw":"GET /UcCo3FwrK3iLTcvmYwYL8g.woff2 HTTP/1.1\r\nHost: btc-strc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-strc.com/css2-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 16:09:09 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 29636\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 17:33:22 GMT\r\netag: \"695169e2-73c4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ct8dl9hKzLNt1fSQ%2BdFZZk%2BBHkJZgGBGTpj7Y0JwHo3ff3yj8hcTU436ULgm7Zz0QMk6OsPr6q1%2FrRDqF5xredQ0%2BtmN7qcA7WfnJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9ba4b7c97cae5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29636,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 29636, version 1.0","md5":"7af197bf2ea65cd6c90abcce233330d4","sha1":"663525cfca2214fc160f00c547d4cf6691b387be","sha256":"e1dea13a93c69f52837e370541ffe132508352666e9288ab910f2c422f4b9b50","sha512":"e4a1a8a51e8229564141a925dfbc93bac22bb477dd6f1fde98a36f62a6eb47d81f582158ed3003f35551ec403cd0de5c09ead491baddb6c04d34dbf6beeb8cd0","ssdeep":"768:SGCegaSRqVnvBIb+Qa2rU3+FfUa3R2MyGKbFIX8eke:Syilb3VU3uc0RdQZEke","tlshash":"aad2e0486aa1b03b7ddb69bafc2d3147afdd0384de09b6caf441f27a10d401c9d46786","first_seen":"2025-09-21T22:46:53.460393Z","last_seen":"2026-07-21T07:37:37.757252Z","times_seen":60,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":266,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/informations_join.png","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-strc.com/","date":"2026-01-07T16:09:08.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-strc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 12:48:17 GMT","end":"Fri, 27 Mar 2026 13:46:47 GMT"},"fingerprint":{"sha1":"9A:59:7F:9D:AF:0A:1A:DE:AA:25:9F:44:D2:3F:72:A7:51:15:BC:FF","sha256":"97:3E:27:0B:A9:70:E6:07:71:E9:70:90:1F:CF:DE:82:3E:E8:16:9C:BD:14:2C:21:12:15:B7:F5:DB:7A:AE:F1"}}},"request":{"raw":"GET /informations_join.png HTTP/1.1\r\nHost: btc-strc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-strc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 16:09:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 4527\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 17:33:22 GMT\r\netag: \"695169e2-11af\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=puThTMguYdPMm314kDtNNOJxqtXbPFqRLiN71jNZvTFotxv7FPzDKLZ0LW%2BMkf5nPClRs87NEZ%2FAKwR8BuwHYUP1B%2F%2FUR92tFw92cg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9ba4b7c52b9e5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4527,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 278 x 100, 8-bit/color RGBA, non-interlaced","md5":"697cab563473e3ab9aec2c8a2e852c70","sha1":"e6b7302a46b8cd8f1bdc5ad4b5cdb3568dd8a601","sha256":"b7d16996ea21ff2a79e687b6f2c24785d8a438d5121728ce238654fd168a902f","sha512":"48871c73979f0a16fa9631199f179b463468bede344e0f2a233069e09cb96efec0d352a89cdfb2eb9ace39e69374d7be99a468d587c9083c011ad4e79fe78744","ssdeep":"96:vSvaai64gP5tuUGGD6gA3eDyGnmOUlc5iJWbkaa0:vSoghth3GgA3QdY32D","tlshash":"549129c9b662c3766dd312f59f725f788583a30b2921a9350e204d39b76e0484efb507","first_seen":"2026-01-07T16:09:38.195107Z","last_seen":"2026-06-01T02:03:53.392441Z","times_seen":5,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/how_btc_left.png","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-strc.com/","date":"2026-01-07T16:09:08.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-strc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 12:48:17 GMT","end":"Fri, 27 Mar 2026 13:46:47 GMT"},"fingerprint":{"sha1":"9A:59:7F:9D:AF:0A:1A:DE:AA:25:9F:44:D2:3F:72:A7:51:15:BC:FF","sha256":"97:3E:27:0B:A9:70:E6:07:71:E9:70:90:1F:CF:DE:82:3E:E8:16:9C:BD:14:2C:21:12:15:B7:F5:DB:7A:AE:F1"}}},"request":{"raw":"GET /how_btc_left.png HTTP/1.1\r\nHost: btc-strc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-strc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 16:09:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 4052\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 17:33:22 GMT\r\netag: \"695169e2-fd4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o8uH8vi0%2FcePmiLiSbWLYOQI%2Bs8mY%2BbuZ%2B5%2Bdh80DLz%2F70WhNwWEqik2JH8nbLEsK0STdwGrvQE2KVJ6aKt%2BiV0Bon33P6x8%2BXEqmA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9ba4b7c53ba25ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4052,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 114 x 114, 8-bit/color RGBA, non-interlaced","md5":"f35f4105f92e01c2bb5a3496d083c1be","sha1":"2570ece9dfafa0b5e2d33acf67b9d79c77c77710","sha256":"60bcb467799b094e3926f75b5881ac7c9c8aaa67655caa8f5683517ee6030c62","sha512":"9cfc087d7cc2e865100f2d1b277ce4516d429fbfcaa22b2c7794e6eab17b0ec31453d9c5e0ba1e25f5543417424791fd41bb03c3ca1dc64f71c52e450c49f2c5","ssdeep":"","tlshash":"73817ceb2d4f5da79eaeed96b337b0f5c5a7185f0c056148047bc3a88022cc4ac20ba1","first_seen":"2026-01-07T16:09:38.196051Z","last_seen":"2026-06-01T02:03:53.400204Z","times_seen":5,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/how_eth_right.png","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-strc.com/","date":"2026-01-07T16:09:08.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-strc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 12:48:17 GMT","end":"Fri, 27 Mar 2026 13:46:47 GMT"},"fingerprint":{"sha1":"9A:59:7F:9D:AF:0A:1A:DE:AA:25:9F:44:D2:3F:72:A7:51:15:BC:FF","sha256":"97:3E:27:0B:A9:70:E6:07:71:E9:70:90:1F:CF:DE:82:3E:E8:16:9C:BD:14:2C:21:12:15:B7:F5:DB:7A:AE:F1"}}},"request":{"raw":"GET /how_eth_right.png HTTP/1.1\r\nHost: btc-strc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-strc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 16:09:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 9586\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 17:33:22 GMT\r\netag: \"695169e2-2572\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ipTHuOISx2PngHKv2ol%2BmKohovRC5rQSrgWJmG3pWh3jEjeAauIhXVaurXzXk7hhf2eiqVoBHs7NRgVOIIWqTIdiKUdeTeZunyJyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9ba4b7c53ba45ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9586,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 403 x 273, 8-bit/color RGBA, non-interlaced","md5":"b27a7cb9955de5413cd1b6f2096e1685","sha1":"e71a5825079ade71f772beb966b1439fc2f346c7","sha256":"618691c8381d7ba560118c873e57a2bd54685b8eb501954264b19eed87516108","sha512":"dfb046b874a19183b2d362bf9f8af911eeb87ef5b94e94dfb4e5fa4446aa173ebcdf7f705e16f8b88ca0dd6f57b63a8673654b04da0caedab884b7cfdacb36b7","ssdeep":"192:XBSDZsHTc7asvGDhtqk/Cp/6SXbK9r/wYW92NNQdjHtg6GGncHQMy:YDigmtqH/6SeB/wheM7tNGGnpB","tlshash":"1712aeec615e4809aa3fe44bde4614ae5d114f4776f480f82f5e1c76c5c0ba00837b65","first_seen":"2026-01-07T16:09:38.196898Z","last_seen":"2026-06-01T02:03:53.389205Z","times_seen":5,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/secureproxy?e=jscdn/getFile","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://btc-strc.com/","date":"2026-01-07T16:09:09.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-strc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 12:48:17 GMT","end":"Fri, 27 Mar 2026 13:46:47 GMT"},"fingerprint":{"sha1":"9A:59:7F:9D:AF:0A:1A:DE:AA:25:9F:44:D2:3F:72:A7:51:15:BC:FF","sha256":"97:3E:27:0B:A9:70:E6:07:71:E9:70:90:1F:CF:DE:82:3E:E8:16:9C:BD:14:2C:21:12:15:B7:F5:DB:7A:AE:F1"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: btc-strc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://btc-strc.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://btc-strc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"y2h9wk0y3gyseac6tgs0\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 16:09:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self', frame-ancestors http: https:\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0UWAF69%2F30%2FU7WhhbwE5Df6s%2Bp%2B%2FETfHpc8WPIUwsB0z9ByZ2zAXAANmH0abCL2RCfzXTvAg1aSms7kJ60hjfbf1UHUGCb0VFkLKhq3AWdifEg%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9ba4b7c89c555ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5430684,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d5a6380411c6b05591bff5d8d769b7f1","sha1":"5835c7c539705c97fcb9fdc925db12ffd4ef72d7","sha256":"6298e17e619cff4abbe9d717dae734331260c190c97fe220f23b1e20fd10d860","sha512":"7a5e176f2143d5981d6c66a10c7ebd40b5633fd6efd54c5faf1300a14e018f788bfd0461d79bd4f6d58770cf6b3f925f091e431a33e648ad85a548110ec9beea","ssdeep":"24576:GmL+3W7M0RTLNgthNwXQQDMUkmsmg6Q1B7o1BuxLy:k3W5T5g4MUdskQHiuxLy","tlshash":"e12501db1c429350cb8dbb39e0fd4d1570bcaea58ac8156ddd8aacc5222cf3495d326b","first_seen":"2026-01-07T16:09:38.197799Z","last_seen":"2026-01-07T16:09:38.197799Z","times_seen":1,"resource_available":false,"data":null}},"time_used":786,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":307,"receive":479,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/how_btc_right.png","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-strc.com/","date":"2026-01-07T16:09:08.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-strc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 12:48:17 GMT","end":"Fri, 27 Mar 2026 13:46:47 GMT"},"fingerprint":{"sha1":"9A:59:7F:9D:AF:0A:1A:DE:AA:25:9F:44:D2:3F:72:A7:51:15:BC:FF","sha256":"97:3E:27:0B:A9:70:E6:07:71:E9:70:90:1F:CF:DE:82:3E:E8:16:9C:BD:14:2C:21:12:15:B7:F5:DB:7A:AE:F1"}}},"request":{"raw":"GET /how_btc_right.png HTTP/1.1\r\nHost: btc-strc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-strc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 16:09:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 4568\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 17:33:22 GMT\r\netag: \"695169e2-11d8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fh1x%2FRfmta6Z4fw%2FzBKSvlFubtX4JVm7rMTUJpizW9jFWaEKAKEi9i1sgoX4E4%2BMidI7QSLYujGcICH4ASczYpUtzfvKKQWkkEjN0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9ba4b7c53ba35ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4568,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced","md5":"cd52a6e46f380234855bd5d472a00956","sha1":"2b5c2e8ac7eb8de7b8a2728b7ac5aa13e8a35189","sha256":"59f16b25457c04f83a673bf0a15d19d40891018b83260bf3d65953b234db5eb3","sha512":"5ceefc3a2512607e48707a45fcd2e9a420becf5e00edc2a7b8ee10b15ef6ad823b1c33092c3e935e20aae8c2edfb114c73ac13856e936c6ee0591623495b3d8d","ssdeep":"96:FSLDgxQIl635tqr3q0rwd/H9lbz3mQTJ4L9C67zrZuDGIXK5DHVF+jEMcnGW:FSLsx1l2h359JTPJ4pCyz7T5D14c","tlshash":"80918dcdd7c603be618006a001b11f0df48063eb039bae95adc89aa65f171fac452533","first_seen":"2026-01-07T16:09:38.198654Z","last_seen":"2026-06-01T02:03:53.388275Z","times_seen":5,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/css2-1.css","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btc-strc.com/","date":"2026-01-07T16:09:09.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-strc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 12:48:17 GMT","end":"Fri, 27 Mar 2026 13:46:47 GMT"},"fingerprint":{"sha1":"9A:59:7F:9D:AF:0A:1A:DE:AA:25:9F:44:D2:3F:72:A7:51:15:BC:FF","sha256":"97:3E:27:0B:A9:70:E6:07:71:E9:70:90:1F:CF:DE:82:3E:E8:16:9C:BD:14:2C:21:12:15:B7:F5:DB:7A:AE:F1"}}},"request":{"raw":"GET /css2-1.css HTTP/1.1\r\nHost: btc-strc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-strc.com/711c8dbb-a0d7-42cc-92ae-760aef270774.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 16:09:09 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 17:33:23 GMT\r\netag: W/\"695169e3-7611\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s7shcRwrT1veP2fN4LaSP65R%2BdkMkjEUsDupMcaKOgFeZuH5vM7H0vI3wgGTaAdRCgwzS7QMa40etNK17YccDbC9NrH%2FZFb4KiyDXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba4b7c75c245ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30225,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"d4c3a131eae57b45cf6093c99ffb823a","sha1":"55bccd6dccf864718ca80c7816b2e19891033f0c","sha256":"b1ca3d85cf2c6c30a1e28cd7b673cfb3a3beb116a505e9108eceeb54bc375ce8","sha512":"64550e8f9effc527cc0a96877c4d3ba326fba5705839aeb22c63f1d9fbdc10ac00b3384c1c1d7e4e3d9a9b1795f406c47dcbd72a5074c441c28bef7bba8d5f1c","ssdeep":"384:M7w9fsDTjgcEmalXOdEDtCvcqY49rnevrqY4kSCQ3D915qY4nYoIpUqY4WYlkYsx:Un07vUX3UKuT","tlshash":"5cd2d990042b1044e7876ce223ce7f36ee5ea2507044d578affd5b5badcada562b438c","first_seen":"2026-01-07T16:09:38.199599Z","last_seen":"2026-06-01T02:03:53.393314Z","times_seen":5,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/euclid-circular-b.css","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btc-strc.com/","date":"2026-01-07T16:09:09.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-strc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 12:48:17 GMT","end":"Fri, 27 Mar 2026 13:46:47 GMT"},"fingerprint":{"sha1":"9A:59:7F:9D:AF:0A:1A:DE:AA:25:9F:44:D2:3F:72:A7:51:15:BC:FF","sha256":"97:3E:27:0B:A9:70:E6:07:71:E9:70:90:1F:CF:DE:82:3E:E8:16:9C:BD:14:2C:21:12:15:B7:F5:DB:7A:AE:F1"}}},"request":{"raw":"GET /euclid-circular-b.css HTTP/1.1\r\nHost: btc-strc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-strc.com/711c8dbb-a0d7-42cc-92ae-760aef270774.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 16:09:09 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 17:33:23 GMT\r\netag: W/\"695169e3-642\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dmrseGJuUeWwwhVxCeP9xlFsBY6NmyE9clOT2Q3vPS%2FXQTkpdlCuc6JnIBcu9ULdHRbLR0z2qIEMK3bqbOXsABn6Xi0UOuX6nYUYdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba4b7c75c255ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1602,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ad37cfa644f4b00b6c71d4ebc96838e8","sha1":"0576ff20309ba11dda33640f028f3439f659124a","sha256":"e746ae1f346bacb300aafe04830b153164c3a227e613bdd4973492793083b85f","sha512":"d531aee5c228124d66319ade4eb61dcd31705a397c596b87ee764485f623a4865f7c8ab2aced728363b7ef50bffe005bedf8564537c41910fe0e64391606acfd","ssdeep":"","tlshash":"5831a039059fd280a8560d5eb38bf7b40ade54a7208ddd2e37653e548f9683a47c0f6c","first_seen":"2025-09-27T18:52:47.372485Z","last_seen":"2026-06-08T18:11:59.794172Z","times_seen":27,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/style.css","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btc-strc.com/","date":"2026-01-07T16:09:08.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-strc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 12:48:17 GMT","end":"Fri, 27 Mar 2026 13:46:47 GMT"},"fingerprint":{"sha1":"9A:59:7F:9D:AF:0A:1A:DE:AA:25:9F:44:D2:3F:72:A7:51:15:BC:FF","sha256":"97:3E:27:0B:A9:70:E6:07:71:E9:70:90:1F:CF:DE:82:3E:E8:16:9C:BD:14:2C:21:12:15:B7:F5:DB:7A:AE:F1"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: btc-strc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-strc.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 16:09:08 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 17:33:22 GMT\r\netag: W/\"695169e2-39f9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cv1vy%2BTJlV4dwtZUhEEoMIQmvFz682rng9dgcknuGsmrlBQ66NCTG7QY1UviOxKtXF8oiu1FMOLuqj%2F3jQUCCKI2fwcjE8mDv2FAAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba4b7c52b975ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14841,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"70a76999e816d0074dcff682d5ab14f1","sha1":"02cca0f6674b2b1ced9c9ac1b8bfbc35c343c06a","sha256":"c9cd75afefe1e5bf82286eaaa9e28b241cfab26d8b683629943c806eb4b61581","sha512":"fbe6a588017c8bf5af4215da7fe75d8f1437a0e2966014d47557e59ab6800a69f81c65b1673aca9be8ee1c98a6110e1e75d6435219b8a21e99adad4c89ae0f0f","ssdeep":"192:qW3FkFPXL+mw3FCFxUP9htomLBpQwgHM7QBYYvi+bzwJi8bpOI47b:LFkFC3FCFxI9ham9mwk9BYYvcJiDI2","tlshash":"6d6212879db22605741be8b4ba636b157319c043a74fccba7be0255cdfc619483a378e","first_seen":"2026-01-07T16:09:38.200947Z","last_seen":"2026-06-01T02:03:53.385269Z","times_seen":5,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/saylor_icon.png","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-strc.com/","date":"2026-01-07T16:09:08.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-strc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 12:48:17 GMT","end":"Fri, 27 Mar 2026 13:46:47 GMT"},"fingerprint":{"sha1":"9A:59:7F:9D:AF:0A:1A:DE:AA:25:9F:44:D2:3F:72:A7:51:15:BC:FF","sha256":"97:3E:27:0B:A9:70:E6:07:71:E9:70:90:1F:CF:DE:82:3E:E8:16:9C:BD:14:2C:21:12:15:B7:F5:DB:7A:AE:F1"}}},"request":{"raw":"GET /saylor_icon.png HTTP/1.1\r\nHost: btc-strc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-strc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 16:09:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 1984\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 17:33:22 GMT\r\netag: \"695169e2-7c0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f99pzFfFmVT8tz3yVf0%2Fnj60S%2F%2BriZs10O7FLKjdaQlb6jvPb%2BvtMGXa58dApXZADmNZaqjEx1RTlcPxbnr5Ztc8rx9ZfS%2FUjHeTYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9ba4b7c52b9b5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1984,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"7cc64602c95221eaf7e93d4d4a47c08d","sha1":"8fd4836af45f875ca73cb090161e657f5325ecdf","sha256":"441b5dd5f6d9c11f2c3cffbb8c26169668150725ba9bca7ba6f625b569ca348e","sha512":"f79bb6375c62ae8abbf81ba700a23ebe58f7dca95f9ef296a31aa7c302c0ffb6683cd70239d8cc62737df0b173f75157777ad21a13cc6b43e7f7950ed4722948","ssdeep":"","tlshash":"1e412ce4aa83bc14514dbe7bcc0d97cd3f73163f151034042de17cae6b21041684d131","first_seen":"2026-01-07T16:09:38.201868Z","last_seen":"2026-06-01T02:03:53.403046Z","times_seen":5,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/informations_limited.png","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-strc.com/","date":"2026-01-07T16:09:08.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-strc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 12:48:17 GMT","end":"Fri, 27 Mar 2026 13:46:47 GMT"},"fingerprint":{"sha1":"9A:59:7F:9D:AF:0A:1A:DE:AA:25:9F:44:D2:3F:72:A7:51:15:BC:FF","sha256":"97:3E:27:0B:A9:70:E6:07:71:E9:70:90:1F:CF:DE:82:3E:E8:16:9C:BD:14:2C:21:12:15:B7:F5:DB:7A:AE:F1"}}},"request":{"raw":"GET /informations_limited.png HTTP/1.1\r\nHost: btc-strc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-strc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 16:09:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 2750\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 17:33:22 GMT\r\netag: \"695169e2-abe\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tFYSHZ8hrpSIGaHApVRjgq9MBuIJc7GugMLZxFXsCUUMySmby9skz5L%2F0YocnMZ1iPnMax1659QNr3ZUxlod4iwi30sElNUaTKLrjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9ba4b7c53ba15ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2750,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 278 x 100, 8-bit/color RGBA, non-interlaced","md5":"493580d733881d42072ce8ef8df6532f","sha1":"f75d4b09319decd5b22e24d8280ea92ae8a36e2b","sha256":"7ed8ce43a83f629ff468982a9e1334b91b093cde88a6aefe3aa1219e0881f62a","sha512":"c8bedf13319671c576b3d8cdcfce79ebca16b04a860ac81e210903107422a9b2cb33d44872a91d53f4a1ccc7b05f88bc2fb1d004a082545cb67f118b7bf9adf0","ssdeep":"","tlshash":"4a513a96079655efb50552784e22f9c333b9753a0cb5370942f00c1aadc21fc029a5b7","first_seen":"2026-01-07T16:09:38.20266Z","last_seen":"2026-06-01T02:03:53.380349Z","times_seen":5,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/favicon.svg","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-strc.com/","date":"2026-01-07T16:09:09.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-strc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 12:48:17 GMT","end":"Fri, 27 Mar 2026 13:46:47 GMT"},"fingerprint":{"sha1":"9A:59:7F:9D:AF:0A:1A:DE:AA:25:9F:44:D2:3F:72:A7:51:15:BC:FF","sha256":"97:3E:27:0B:A9:70:E6:07:71:E9:70:90:1F:CF:DE:82:3E:E8:16:9C:BD:14:2C:21:12:15:B7:F5:DB:7A:AE:F1"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: btc-strc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-strc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 16:09:10 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 17:33:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"695169e2-3e3\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D5DnarsUFY1AJbdOB2d7FG3eyfoxd9RVar%2BYjFBXbgT4EI%2BMRbvOxG9Z1LEnzAPjJPl1T4xjWNl7fOnffOE%2Bp%2BH8AXDlc2HQyBAKdA%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9ba4b7cd1d865ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":995,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f5885c7c1f2aacbf5a2ee106328748f7","sha1":"831ed31e9e3c19a1c7c827640f86423a23ca0de1","sha256":"9eccf9625eb8d8f867435241fb5fc4ea20065498990406dcf937e501f3d5ebb5","sha512":"79d7f5a088fa1021e4efc35434fb75ecd8834df7546397f7d3c22ecfff0d641d089358b327b96b12dd7ab90fec52701804e1b7e04179aeb8f087a1b0f9095b63","ssdeep":"","tlshash":"8b1158fb41e4f1d0944be7bc6a3925b1da3535b102ad499802617e90e5050dd0c5cc7c","first_seen":"2026-01-07T16:09:38.203404Z","last_seen":"2026-06-01T02:03:53.396084Z","times_seen":5,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-07T16:09:08.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-strc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 12:48:17 GMT","end":"Fri, 27 Mar 2026 13:46:47 GMT"},"fingerprint":{"sha1":"9A:59:7F:9D:AF:0A:1A:DE:AA:25:9F:44:D2:3F:72:A7:51:15:BC:FF","sha256":"97:3E:27:0B:A9:70:E6:07:71:E9:70:90:1F:CF:DE:82:3E:E8:16:9C:BD:14:2C:21:12:15:B7:F5:DB:7A:AE:F1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: btc-strc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 16:09:08 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 17:33:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gBolEr6pYP3N1uOZFpLQI%2FB6HzlGk2LKiNQyP5ukZAfcsoehtIn5BmDWJOAJEOBAxb2lAwQRxpLGk11h%2FaRKFIcx5ZgMBXQC4NQ%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9ba4b7c28fd70b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8053,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"68e763ad7af62db98f0c620f457fd55e","sha1":"83c19d6d4a0e333a60782cbceefd34b556785f4e","sha256":"36473b6d4d9998f7ca559744bad962a5160ee33bb9a057c1817b4c76ccc4807a","sha512":"0b85834c0fa73053d7a13efb3958749d9bce864195e444d5223202af7c562bcf02a6dc7c244c467dd327ba48134d95c5af30a43ae4b69f4c842eb5e00087fffc","ssdeep":"96:EVFPNthpSTSTS9pMr/+5I7Lai1EE9h0CHoIW4WWLLfMG:EVlNtKeecr/AOx1EE9h0CHoIWHofMG","tlshash":"2ef1885298f126630283d186ea927e727f959447da0a691235fc8bde8fc2d42cb5321f","first_seen":"2026-01-07T16:09:38.204148Z","last_seen":"2026-01-07T16:09:38.204148Z","times_seen":1,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":33,"dns":16,"connect":2,"send":0,"wait":243,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/saylor_image.png","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-strc.com/","date":"2026-01-07T16:09:08.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-strc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 12:48:17 GMT","end":"Fri, 27 Mar 2026 13:46:47 GMT"},"fingerprint":{"sha1":"9A:59:7F:9D:AF:0A:1A:DE:AA:25:9F:44:D2:3F:72:A7:51:15:BC:FF","sha256":"97:3E:27:0B:A9:70:E6:07:71:E9:70:90:1F:CF:DE:82:3E:E8:16:9C:BD:14:2C:21:12:15:B7:F5:DB:7A:AE:F1"}}},"request":{"raw":"GET /saylor_image.png HTTP/1.1\r\nHost: btc-strc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-strc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 16:09:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 477502\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 17:33:22 GMT\r\netag: \"695169e2-7493e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0UGnaFgL08ZnOliMQyxuEod5z4EOHh0A2ncrNFncePttE%2BqQl2nTtlMSJa8QFMaTRzF9l%2BE26089cUfT2UE%2BL2x5stVK%2BBFCT%2F4HYw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9ba4b7c52b9c5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":477502,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 689 x 601, 8-bit/color RGBA, non-interlaced","md5":"1c03b30b2ffb6e969585cf0c92c62a1b","sha1":"d6267e5ab71fb478b068d45ee4fae94c180e57af","sha256":"3782de8c0cd9044d98b24c2b657f7b5e393e53841bfc193e311829f049447797","sha512":"7721be25571995935b60276344dbb9f35b883a1648a359b4d43ff2442d4bd3d08c27b1c75720adcdc46205f64494f5b72057ab09d109d90bd607a1dedc50b02c","ssdeep":"12288:rbYjuQUHqRCCupEzKRufc+LzAm+GG/dP5zNc:3YcHWClp4Fxsm+GOl5zNc","tlshash":"b6a4237743960c6574f18087ee3a8b102dbdf532b25061d6faf51e368b5a079093dabc","first_seen":"2026-01-07T16:09:38.205081Z","last_seen":"2026-06-01T02:03:53.376278Z","times_seen":5,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":221,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/informations_check.png","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-strc.com/","date":"2026-01-07T16:09:08.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-strc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 12:48:17 GMT","end":"Fri, 27 Mar 2026 13:46:47 GMT"},"fingerprint":{"sha1":"9A:59:7F:9D:AF:0A:1A:DE:AA:25:9F:44:D2:3F:72:A7:51:15:BC:FF","sha256":"97:3E:27:0B:A9:70:E6:07:71:E9:70:90:1F:CF:DE:82:3E:E8:16:9C:BD:14:2C:21:12:15:B7:F5:DB:7A:AE:F1"}}},"request":{"raw":"GET /informations_check.png HTTP/1.1\r\nHost: btc-strc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-strc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 16:09:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 10378\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 17:33:22 GMT\r\netag: \"695169e2-288a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uy1o%2B5Wa1LF2SZgA%2BlmZiS7vnLKFzsWV8%2FjI%2BYVv4u38koEUUPhjGrqE6TgD7UqGp9cK7Nx1z04emm%2FbjsgxWHrxrHXI2ksUeEKo7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9ba4b7c52b9f5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10378,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 279 x 100, 8-bit/color RGBA, non-interlaced","md5":"af63aaec06acf16b5ad85f5b6abb1068","sha1":"32db5ea523232707e2e74d95ec08604bec92d140","sha256":"be8ee980d71fb177acb8a1452e53fd1f0b5d41810070716e9fa990a1e19d0943","sha512":"1f17e246e431976b3c46d4db25c9323aed6b3352ebed27cf46f6295ac78b68ee64c731270e8deb238eecbe3a82aeb3133ac7ba009016e55576c7f34af8c5f615","ssdeep":"192:8SYZAu73f3fX2JgBbVr7sNwaUoyPmJDnnf76Hgz:7U3f3fjBtbzO9eAz","tlshash":"73229ee5b3ac223dc85caa46515dd0d4bcdb58be1c29505439a4efcb198bc8a69be00b","first_seen":"2026-01-07T16:09:38.205854Z","last_seen":"2026-06-01T02:03:53.378999Z","times_seen":5,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/how_bg.png","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-strc.com/","date":"2026-01-07T16:09:09.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-strc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 12:48:17 GMT","end":"Fri, 27 Mar 2026 13:46:47 GMT"},"fingerprint":{"sha1":"9A:59:7F:9D:AF:0A:1A:DE:AA:25:9F:44:D2:3F:72:A7:51:15:BC:FF","sha256":"97:3E:27:0B:A9:70:E6:07:71:E9:70:90:1F:CF:DE:82:3E:E8:16:9C:BD:14:2C:21:12:15:B7:F5:DB:7A:AE:F1"}}},"request":{"raw":"GET /how_bg.png HTTP/1.1\r\nHost: btc-strc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-strc.com/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 16:09:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 17143\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 17:33:22 GMT\r\netag: \"695169e2-42f7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o6XmZAba%2FKlHUU6%2FTmCcMFkuDsVB6p%2Bz028bhxHtXy9g%2Bb8Cx4kGmH5R6Fex3gQlJ%2BuO5pHqt1F0ThGAp7ZcMT0m9rAN28ugihKUyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9ba4b7c95c8e5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17143,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2043 x 473, 8-bit/color RGBA, non-interlaced","md5":"71d545e9e19b1bf8e6e29a914adca740","sha1":"bbc85151976b061de16971e1a16066109dd66d4f","sha256":"67d0a5da7ec60293a724de64544b451a682c63d312e4150327c972f8f1fb3144","sha512":"6c4ffb9839192da32f030a9debbdd779b0d22b5db1d076dc19b6e3230b77c9d52dcd9285a750cbbbf6c2cf7b94f9480a724b2e526dc86d5501dfc5779d17c94e","ssdeep":"384:n280WNp+txHycxWprkxhtFzx6shOxRitC4QZO+cJ/v:28XNp+txHyLqVzhOxZZO+m/v","tlshash":"d1725b6c0d49a4fafce70a392e089fe897e151207207777fa7f620a90d935c6564e837","first_seen":"2026-01-07T16:09:38.206995Z","last_seen":"2026-01-07T16:09:38.206995Z","times_seen":1,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/css2.css","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btc-strc.com/","date":"2026-01-07T16:09:08.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-strc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 12:48:17 GMT","end":"Fri, 27 Mar 2026 13:46:47 GMT"},"fingerprint":{"sha1":"9A:59:7F:9D:AF:0A:1A:DE:AA:25:9F:44:D2:3F:72:A7:51:15:BC:FF","sha256":"97:3E:27:0B:A9:70:E6:07:71:E9:70:90:1F:CF:DE:82:3E:E8:16:9C:BD:14:2C:21:12:15:B7:F5:DB:7A:AE:F1"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: btc-strc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-strc.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 16:09:08 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 17:33:22 GMT\r\netag: W/\"695169e2-10af\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oCgBtBu8E7VgnRXNBaGdOTOlQnIxqCc3Ogkd1H2A10ettERD%2FALqj2j82gTKp7tQ4WObA5PrSUnOgzq5HC9UQr58UNeK59B5lK28fQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba4b7c52b955ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4271,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"35c4ced9020da12cb05670bd81e64f90","sha1":"d495d8132afcf20833199824a0199b68dcbc8550","sha256":"83f2040863c782f82b93f8d0d6ef3e019f3b8f4862c6b0102672be2d6fb16036","sha512":"9d452e5b7465de45047e43daad919a4cef6b3300e2442bc8f68a7c1c98f0dae3e80997cacdd1c7a3434318dc69631f702bd1f69e32c1455cc4eb6e7a2677bdef","ssdeep":"96:aYg4aMqYg4aYFZHYg4aEGYg4a+3vYg4aGYg4a5Jc+uTYg4auNDO4aBqO4aCFZHOf:vyMfyVyETy+3gyTy5VyPBxVi13UC7Hm","tlshash":"7f91ba90042b6104e6535cd52bcf3f229e9d66556086ea7c7ffe1cdaaceac625360b0c","first_seen":"2025-06-13T18:34:32.941211Z","last_seen":"2026-07-03T14:02:00.231349Z","times_seen":54,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/angular.js","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btc-strc.com/","date":"2026-01-07T16:09:08.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-strc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 12:48:17 GMT","end":"Fri, 27 Mar 2026 13:46:47 GMT"},"fingerprint":{"sha1":"9A:59:7F:9D:AF:0A:1A:DE:AA:25:9F:44:D2:3F:72:A7:51:15:BC:FF","sha256":"97:3E:27:0B:A9:70:E6:07:71:E9:70:90:1F:CF:DE:82:3E:E8:16:9C:BD:14:2C:21:12:15:B7:F5:DB:7A:AE:F1"}}},"request":{"raw":"GET /angular.js HTTP/1.1\r\nHost: btc-strc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-strc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 16:09:08 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 17:33:22 GMT\r\netag: W/\"695169e2-180af\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0zf%2BU0KT5XdLVihqdPu1Tw8CwFOaFKPRIzJqb7AfvPXAqXaeRFS3qjUjVG2Nhz8y7Cj2J%2FFnLtFeBTDbTyv0X0pEB17gIWisy2fGjw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba4b7c52b985ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98479,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d28c186cd684509b91c645c6d1fe9004","sha1":"ac040c8053ca8dfe154025721a30a59e543edc14","sha256":"e3d5308a51513790d8c4cba34fabb94336664ee6c67fb381d0a928bbe1ecd035","sha512":"92bdd9da4d05f54f1270a5f58d39f2a273b2bf15d3be388cead76b3eb06442b290859fbaa94d81605d54e4321e7c3f216951f6fb6e057dd02f898ff39d1341ef","ssdeep":"1536:ZkDElohbDElohE5kuzYFnvxeISCHl9Fpmzw:g5EkwYZv8IFlNmzw","tlshash":"baa33fc9190590d44ea962eed4b3e005e128ce63cdacf16bd52edcd07a6df2684c727b","first_seen":"2026-01-07T16:09:38.208705Z","last_seen":"2026-01-07T16:09:38.208705Z","times_seen":1,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/711c8dbb-a0d7-42cc-92ae-760aef270774.css","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btc-strc.com/","date":"2026-01-07T16:09:08.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-strc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 12:48:17 GMT","end":"Fri, 27 Mar 2026 13:46:47 GMT"},"fingerprint":{"sha1":"9A:59:7F:9D:AF:0A:1A:DE:AA:25:9F:44:D2:3F:72:A7:51:15:BC:FF","sha256":"97:3E:27:0B:A9:70:E6:07:71:E9:70:90:1F:CF:DE:82:3E:E8:16:9C:BD:14:2C:21:12:15:B7:F5:DB:7A:AE:F1"}}},"request":{"raw":"GET /711c8dbb-a0d7-42cc-92ae-760aef270774.css HTTP/1.1\r\nHost: btc-strc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-strc.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 16:09:08 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 17:33:22 GMT\r\netag: W/\"695169e2-21cca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ySPjbg4KpnO1a0C7zGiN720v4ayE%2BIAJ8i19hHDEgfrTQ%2FqTzaTEgJ3F23k%2BK4n0oWR7Vyghxza2E6Isy%2FIsubwybCxnoWpnzrXTCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba4b7c52b995ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138442,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (28190), with CRLF line terminators","md5":"bce99444b17e425c22e5b9a42ecb4d66","sha1":"197bf21cca7fc1db90edbeab0790d25518d71614","sha256":"38b727835dc575e6e65dd02b5d553f6ace9c22b9025973155839d2544724967f","sha512":"a9bd69b3d1459f6e4d1951ccff6beef4de11c9fd73acaf136686f8e598d689f39d966c86426e85d05583c2dc7d3f42bea2ddfca2b50c9aced0a99d2457001b64","ssdeep":"3072:yiwFy2hxh4hmwJ/syez0yASJHRzvOvyfj:yiwFy2hxh4hmwJ/syez0yASJHRzvOvy7","tlshash":"edd341187a4400373c279afce64dcc5ee70ab3c1ff1956aafac52514438a6b52ddbb48","first_seen":"2026-01-07T16:09:38.209664Z","last_seen":"2026-06-01T02:03:53.386416Z","times_seen":5,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/intro_bg.png","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-strc.com/","date":"2026-01-07T16:09:09.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-strc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 12:48:17 GMT","end":"Fri, 27 Mar 2026 13:46:47 GMT"},"fingerprint":{"sha1":"9A:59:7F:9D:AF:0A:1A:DE:AA:25:9F:44:D2:3F:72:A7:51:15:BC:FF","sha256":"97:3E:27:0B:A9:70:E6:07:71:E9:70:90:1F:CF:DE:82:3E:E8:16:9C:BD:14:2C:21:12:15:B7:F5:DB:7A:AE:F1"}}},"request":{"raw":"GET /intro_bg.png HTTP/1.1\r\nHost: btc-strc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-strc.com/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 16:09:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 247603\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 17:33:23 GMT\r\netag: \"695169e3-3c733\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gfRy7mZ7fGQIZzSgaWOmJjK1SYnleI7U7%2BpziUVHOhmQuI0ok6e%2FLLcX3eGyQRC4VjhK0l4WMowTufjHNRBQec%2BgWnDj5oajTTX4gQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9ba4b7c95c7f5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":247603,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 857, 8-bit/color RGBA, non-interlaced","md5":"d7c79547c2378cf00678ebac1e54167f","sha1":"029df216ab628d880895c454a1de87190f8f3b61","sha256":"2e134fbc548513af0f0b4db0ca6d7dc4a145170bb8e795b1a569e5838d2f1a61","sha512":"25b2e2faac3b0cbca8ec53d9a7923e42191ca42cfb362ef471b6af6b53f6b7029a3e5e0d09aa3fab3f35470e91d40a9800746ceda50108385f86c5b2ec3cc167","ssdeep":"6144:msFVii6Uu0QCfxsvuokHof3bS3kaBKXIxITq+bRnlPGRfJYgN:JFoiBiCJ47G3kaBLIG+NK/N","tlshash":"1e340199c1f3c622cddf097265644b0b2b738957cac4523dc874b62ccc99e3e8aa564f","first_seen":"2026-01-07T16:09:38.210501Z","last_seen":"2026-01-07T16:09:38.210501Z","times_seen":1,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/saylor_rect_bg.png","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-strc.com/","date":"2026-01-07T16:09:09.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-strc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 12:48:17 GMT","end":"Fri, 27 Mar 2026 13:46:47 GMT"},"fingerprint":{"sha1":"9A:59:7F:9D:AF:0A:1A:DE:AA:25:9F:44:D2:3F:72:A7:51:15:BC:FF","sha256":"97:3E:27:0B:A9:70:E6:07:71:E9:70:90:1F:CF:DE:82:3E:E8:16:9C:BD:14:2C:21:12:15:B7:F5:DB:7A:AE:F1"}}},"request":{"raw":"GET /saylor_rect_bg.png HTTP/1.1\r\nHost: btc-strc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-strc.com/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 16:09:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 7782\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 17:33:22 GMT\r\netag: \"695169e2-1e66\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W6Vhp3kV%2F35iXAt3gp4r8DvflgVs4nreBPfVf8Q5tckZm2sb%2Fo7M%2F7bUjouOxdtyw%2Fk7qQJTOF9qlJaGIKcFJZkfl7JXNw40WhMGoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9ba4b7c95c825ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7782,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 574 x 292, 8-bit/color RGBA, non-interlaced","md5":"4b9f7dff8d70144247811d1bea0d4c4a","sha1":"d37ae1a505162504d16c048558cabe7085beff53","sha256":"6e1892406693f7c314f394631f7ca174134aed24ecec82f64a347776698eeec5","sha512":"5a96df2c73c319b1a9911240bfc9dfa3c2992c5cc9940d7d973699058cfb7189346a2c576b395f026b83760511cb8756c2a1a571edbcb408296fb3660d7de14e","ssdeep":"192:PS5RAQOPFYWvnWFXcaHjXONZdpIHpbZfRPxznO4T:6wFDWFXKY9fRQg","tlshash":"daf1aff3854b80d5f72060bbaaba727cbb41b148006598c7b753156d2e8610e7ea42c7","first_seen":"2026-01-07T16:09:38.211366Z","last_seen":"2026-01-07T16:09:38.211366Z","times_seen":1,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/header_logo.svg","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-strc.com/","date":"2026-01-07T16:09:08.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-strc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 12:48:17 GMT","end":"Fri, 27 Mar 2026 13:46:47 GMT"},"fingerprint":{"sha1":"9A:59:7F:9D:AF:0A:1A:DE:AA:25:9F:44:D2:3F:72:A7:51:15:BC:FF","sha256":"97:3E:27:0B:A9:70:E6:07:71:E9:70:90:1F:CF:DE:82:3E:E8:16:9C:BD:14:2C:21:12:15:B7:F5:DB:7A:AE:F1"}}},"request":{"raw":"GET /header_logo.svg HTTP/1.1\r\nHost: btc-strc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-strc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 16:09:08 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 17:33:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"695169e2-1478\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZtciIJoXpWTFVn4B1tZzgPtkgEIiuz2HKDAXuRvNmMNBa0SmyzSzqiNmMWRlwC8hDUAlx4DE9KhYlz2LRgnyMelkuOMETp29S73U6A%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9ba4b7c52b9a5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5240,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"adcfeae3863bf383d0df4fb6b3eaeda6","sha1":"f9fe19a13439c2a9b1dd9b6f8957aa4cfb3e9209","sha256":"b0006194dc1ad34e5ac0275e0222353526e984c1c32f443cf0389508c0ee55a7","sha512":"2fc2b828c2716c12c35a612635b249cc8d2f5cf7aec76ca1f16fb8fd2a55af6a2177d8ae0415e44dafa58055da0a85d0d1339343bdc7c2b171f6994a0562a33e","ssdeep":"96:2ZCDV+JJ1ITMtipCdizHlvKfM/dsyUo+3HljY1OZzV9G0q7yDW4:2Uh6JDOC2CMSyUHVV9G1yDW4","tlshash":"57b198dba7e4b3f4e046e7a4e6270878754f34f67992dd34c3929ea4746617cc848c82","first_seen":"2026-01-07T16:09:38.212255Z","last_seen":"2026-06-01T02:03:53.391471Z","times_seen":5,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/informations_hold.png","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://btc-strc.com/","date":"2026-01-07T16:09:08.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-strc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 12:48:17 GMT","end":"Fri, 27 Mar 2026 13:46:47 GMT"},"fingerprint":{"sha1":"9A:59:7F:9D:AF:0A:1A:DE:AA:25:9F:44:D2:3F:72:A7:51:15:BC:FF","sha256":"97:3E:27:0B:A9:70:E6:07:71:E9:70:90:1F:CF:DE:82:3E:E8:16:9C:BD:14:2C:21:12:15:B7:F5:DB:7A:AE:F1"}}},"request":{"raw":"GET /informations_hold.png HTTP/1.1\r\nHost: btc-strc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-strc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 16:09:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 6388\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 17:33:22 GMT\r\netag: \"695169e2-18f4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9hQ%2Ftud4u0vmU0bYXj8pF7SGPWvawiVSQNeaB2EnDK6JlUzrbsWSwShNLmovx%2FYdSQAN2fXuDhlhKkcLjH9TzIYPoRXxe1sukamThw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9ba4b7c52ba05ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6388,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 279 x 100, 8-bit/color RGBA, non-interlaced","md5":"8ec6d9cf1abd6456d76db7fb32dba31c","sha1":"028512a5fd102cd09e4329917cba730396ec2048","sha256":"ee920531f515f5616f06c8b1e85e26c016af2bb00f9ae2ef9c36abb7bd774e60","sha512":"43b245a519e4fc2c3117b87cdd5f66ffc8b6d6addb1581c5b5e873ebd611a195a9511297f7fc59fc0699eec4d95b4eababbf1cfead51d9af4512fe32eed1fa39","ssdeep":"192:8SJVM0Y/S65NWTGmU107wUoH40DOXksvSCjR4XxK:7g0z6njvu7wzfsqCMK","tlshash":"49d17d0abaf406db38416ead80e33b28b2550e120c0d3d8e5df8891eae36dd546c70d9","first_seen":"2026-01-07T16:09:38.213549Z","last_seen":"2026-06-01T02:03:53.387331Z","times_seen":5,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btc-strc.com/css2-2.css","fqdn":"btc-strc.com","domain":"btc-strc.com","tld":"com"},"ip":{"addr":"104.21.21.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btc-strc.com/","date":"2026-01-07T16:09:09.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-strc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 12:48:17 GMT","end":"Fri, 27 Mar 2026 13:46:47 GMT"},"fingerprint":{"sha1":"9A:59:7F:9D:AF:0A:1A:DE:AA:25:9F:44:D2:3F:72:A7:51:15:BC:FF","sha256":"97:3E:27:0B:A9:70:E6:07:71:E9:70:90:1F:CF:DE:82:3E:E8:16:9C:BD:14:2C:21:12:15:B7:F5:DB:7A:AE:F1"}}},"request":{"raw":"GET /css2-2.css HTTP/1.1\r\nHost: btc-strc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btc-strc.com/711c8dbb-a0d7-42cc-92ae-760aef270774.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 16:09:09 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sun, 28 Dec 2025 17:33:23 GMT\r\netag: W/\"695169e3-3a6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4T%2BlimqR1SfKKK%2B%2B7YpUnDBV4kO%2BGvp2VDUL3MUq8Jezv9%2B%2BpNc4DqXVZ7JVe%2Fth7KqIi4Uu8ytVJ%2BUK1KyIcjhMNhZ3%2FM%2BYJF3LFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba4b7c75c265ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":934,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3a79f82229be3289ba290c5883f2ba76","sha1":"34c9daca9b53de257b0d4672f2c619fa1837fea1","sha256":"cc8effa1e9956570a6604210940a0a6323d8de78b561eca5fcc3fa22c7794fc0","sha512":"f06aa793c93b0123beba0a46eede8ebc4ca372798f0636373d1780078426594988819d06e1cb8e7f4f9cea5ffc092b5a65470ad1d38da18a1705ab50ec8bf39c","ssdeep":"","tlshash":"be119c80086a9504e7c35cd133ce7f33ae1eb1406449da746ffa10a8bc9ad6553e2b0d","first_seen":"2026-01-07T16:09:38.214504Z","last_seen":"2026-06-01T02:03:53.383934Z","times_seen":5,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"btc-strc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}
