{"report_id":"a2fadc63-8f67-4b10-9fe8-670830ec98e7","version":6,"status":"done","tags":[],"date":"2025-07-26T22:47:30Z","url":{"schema":"https","addr":"bitcoinhypers.xyz/","fqdn":"bitcoinhypers.xyz","domain":"bitcoinhypers.xyz","tld":"xyz"},"ip":{"addr":"206.217.128.210","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"bitcoinhypers.xyz/","fqdn":"bitcoinhypers.xyz","domain":"bitcoinhypers.xyz","tld":"xyz"},"title":"BTC Hyper Bitcoin L2 | Best Crypto Presale On Bitcoin"},"submit":{"url":{"schema":"https","addr":"bitcoinhypers.xyz/","fqdn":"bitcoinhypers.xyz","domain":"bitcoinhypers.xyz","tld":"xyz"},"ip":{"addr":"206.217.128.210","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-08-30T22:47:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"bitcoinhypers.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"bitcoinhypers.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":439,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-07-23T15:24:39.672195Z","alert_count":0,"request_count":1,"received_data":18037,"sent_data":421,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-07-23T15:19:49.824156Z","alert_count":0,"request_count":2,"received_data":798857,"sent_data":885,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bitcoinhypers.xyz","ip":{"addr":"206.217.128.210","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":14171273,"sent_data":952,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"bitcoinhypers.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bitcoinhypers.xyz/","fqdn":"bitcoinhypers.xyz","domain":"bitcoinhypers.xyz","tld":"xyz"},"ip":{"addr":"206.217.128.210","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a8906165274a2a1578172cbed5bcfbe","sha1":"186af38395189a1df1a7ca8950f0c32a6c9e957b","sha256":"9158944e1e24f23764e472e1af0e3a1a0aa07dc3ba9e57f5e70c57bea8d040bc","sha512":"7922301ecf5ae53b8ac51fbcb3a827d0fb12f2fd82111b9afd4091a93d7ac5d6e1836870ad84edd2a40df843fa0ab6db58c534c70c1dd5528f5c35e17901da21","ssdeep":"","tlshash":"4b119c2870f61a7a2bbf616d870fb245b562009b8049e8053c4ccdca0fd8a54187efcf","size":963,"data":"","first_seen":"2025-07-26T22:47:36.490484Z","last_seen":"2026-05-12T14:20:58.330336Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool/disable-devtool.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"226c2fa3f39c0bb35bb5f1d9d120f9ec","sha1":"7134ea62cdb655c2a423b1662365c99ba645c2bd","sha256":"8a23f92a25922d13437d67f25ba2269b64080b5ec030f5cba982e0261abbfe04","sha512":"ff0d54f8a21ee16685e8e7c4cc3331c287d06105c792f8c659bb2d5852c82c04b0b1844b93cd837835740b42289e55df5099fb0f08161f666842827d506ea9ba","ssdeep":"192:m65oNqiwnCpJWhMpbh78nPVOC0H2ixrsqMEGtxiAIxMwoME8sOUiJE2KswywNC:mJ3+CH7pJ8nPVQH2WrsqOtcA8Jlsa/iC","tlshash":"2d72c6ccb5c3b0705bb7aab9507f050ab2356d56448c8150b23e95f82c7c5aec267f6c","size":17266,"data":"","first_seen":"2024-09-27T20:13:48Z","last_seen":"2026-07-22T11:05:53.226108Z","times_seen":1630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoinhypers.xyz/","fqdn":"bitcoinhypers.xyz","domain":"bitcoinhypers.xyz","tld":"xyz"},"ip":{"addr":"206.217.128.210","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-13T13:46:25.668888Z","times_seen":742810,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoinhypers.xyz/6bb5a139-0ce3-4bb4-bc10-d73bc3286ab3.js","fqdn":"bitcoinhypers.xyz","domain":"bitcoinhypers.xyz","tld":"xyz"},"ip":{"addr":"206.217.128.210","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d792b796ff9a1b9dc1f66088ee3df0cf","sha1":"cc64f620d335cc1dc9ce5e08986564f3512b94fc","sha256":"bbd99ceb2273116343584b271e2f195940664fd3cdb103369a95860ce88d621a","sha512":"64d1f56a835473fda7142bc2b494eac79ad2ee8cb6d5cce0ba6eff46c24908d6ef5721a9e742687895ee841a092f6675b20fae00fc8bdb46a02aabbd32be91e6","ssdeep":"24576:qsd2QE3Zs7VHUfFGlXZVtI25AN4Iz44VkeIQy9+M6+aHksr9pVkuB29:qsd2QjRUfepTozSJ6+q69","tlshash":"9a369520d2421924c7fb4ee45af147ce8c047b4bada55e45f67f6ce7b348a639c8ac21","size":5145081,"data":"","first_seen":"2025-07-26T22:47:36.492905Z","last_seen":"2025-07-26T22:47:36.492905Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoinhypers.xyz/","fqdn":"bitcoinhypers.xyz","domain":"bitcoinhypers.xyz","tld":"xyz"},"ip":{"addr":"206.217.128.210","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-13T13:33:51.503017Z","times_seen":237650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool/disable-devtool.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitcoinhypers.xyz/","date":"2025-07-26T22:47:08.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/disable-devtool/disable-devtool.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.3.8\r\nx-jsd-version-type: version\r\netag: W/\"4372-cTTqYs22VcKkI7FmI2XJm6ZFwr0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 5903\r\ndate: Sat, 26 Jul 2025 22:47:08 GMT\r\nx-served-by: cache-fra-eddf8230046-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 6459\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17266,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17245)","md5":"226c2fa3f39c0bb35bb5f1d9d120f9ec","sha1":"7134ea62cdb655c2a423b1662365c99ba645c2bd","sha256":"8a23f92a25922d13437d67f25ba2269b64080b5ec030f5cba982e0261abbfe04","sha512":"ff0d54f8a21ee16685e8e7c4cc3331c287d06105c792f8c659bb2d5852c82c04b0b1844b93cd837835740b42289e55df5099fb0f08161f666842827d506ea9ba","ssdeep":"192:m65oNqiwnCpJWhMpbh78nPVOC0H2ixrsqMEGtxiAIxMwoME8sOUiJE2KswywNC:mJ3+CH7pJ8nPVQH2WrsqOtcA8Jlsa/iC","tlshash":"2d72c6ccb5c3b0705bb7aab9507f050ab2356d56448c8150b23e95f82c7c5aec267f6c","first_seen":"2024-09-27T20:13:48Z","last_seen":"2026-07-22T11:05:53.226108Z","times_seen":1630,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":38,"dns":1,"connect":13,"send":0,"wait":24,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitcoinhypers.xyz/","date":"2025-07-26T22:47:09.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoinhypers.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 26 Jul 2025 22:47:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19621\r\ncf-ray: 96576fedfed5b517-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65384d58-4ca5\"\r\nlast-modified: Tue, 24 Oct 2023 23:03:52 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 667275\r\nexpires: Thu, 16 Jul 2026 22:47:09 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bwf3CE413LyQU2sanqW7IlS0c%2BRvAqnNDvM0Q7Nuo60vpzcYhTF2%2F5egzzhqfNKfnnrCyZx8swetnKAZaQryISXEHHbE40mbQ8kmbQPlgDSFp847%2BE6OVkSVzWnNAO4d2OVHmYZ4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-12T13:49:20.666272Z","times_seen":31896,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":29,"dns":1,"connect":1,"send":0,"wait":11,"receive":2,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitcoinhypers.xyz/","date":"2025-07-26T22:47:10.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/ethers/5.6.9/ethers.umd.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 26 Jul 2025 22:47:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 125841\r\ncf-ray: 96576ff25b4db51e-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62ad87d5-1eb91\"\r\nlast-modified: Sat, 18 Jun 2022 08:07:49 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 369866\r\nexpires: Thu, 16 Jul 2026 22:47:10 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YEc1S2th8DHNou3uGEknN6l4tJNdx03Qw4uPetOfsF3W4%2FGStO2urzp3plSX1p9Jp7db9dOFyTOi8aQn%2FYBow%2BsvWfnRQUo%2FlJLfLsKu14tjUscs2Yw%2FxIoPdN5fTp7UjcL4f9nu\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":735973,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-09T15:35:30.709021Z","times_seen":8490,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoinhypers.xyz/","fqdn":"bitcoinhypers.xyz","domain":"bitcoinhypers.xyz","tld":"xyz"},"ip":{"addr":"206.217.128.210","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-07-26T22:47:06.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoinhypers.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 21:07:16 GMT","end":"Mon, 20 Oct 2025 21:07:15 GMT"},"fingerprint":{"sha1":"97:86:CE:22:91:D7:E3:1F:69:BD:55:12:0E:98:EF:15:BC:81:C7:79","sha256":"AF:9B:97:5A:62:CE:06:34:27:5E:F9:FD:5C:85:46:66:7C:86:20:F2:74:B1:F5:5D:40:7C:74:66:80:A2:AB:74"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bitcoinhypers.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 25 Aug 2025 22:47:07 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 17 Jul 2025 13:06:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5837866\r\ndate: Sat, 26 Jul 2025 22:47:07 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9025046,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (62310)","md5":"107a7b12c8d85c1b33f8736e9a401eb5","sha1":"02b5f58b3755ae5fda843eee17822734eaa111fd","sha256":"3886a7114c62a89a8848389c9a23b2ab350e4209c9ea2043dac5f29420fb8e2e","sha512":"015928653a6b9301ea396fb55769b79bdea114271f856c36ee716c3da74fee0b7fdca85be5f57a0c7e0815a3c7027b511439c5566fbb06bce183d035cd0efeb2","ssdeep":"12288:T4qTiFUxVtSHTJuqZK5448P1eZMNR4Amc076N8swQpwm1SWxb5wMMuLnR2qGGd1J:4ecUK2Mz4AM7N1C1SGN12q5a823O9L","tlshash":"0e25ac19d78236fdc9844c8ef8691a58b6b38601e2e273ccf75b790f2a5ed4e0399474","first_seen":"2025-07-26T22:47:36.48768Z","last_seen":"2025-07-26T22:47:36.48768Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2144,"timings":{"blocked":448,"dns":222,"connect":106,"send":0,"wait":109,"receive":1139,"ssl":116},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"bitcoinhypers.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoinhypers.xyz/6bb5a139-0ce3-4bb4-bc10-d73bc3286ab3.js","fqdn":"bitcoinhypers.xyz","domain":"bitcoinhypers.xyz","tld":"xyz"},"ip":{"addr":"206.217.128.210","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitcoinhypers.xyz/","date":"2025-07-26T22:47:07.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoinhypers.xyz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 21:07:16 GMT","end":"Mon, 20 Oct 2025 21:07:15 GMT"},"fingerprint":{"sha1":"97:86:CE:22:91:D7:E3:1F:69:BD:55:12:0E:98:EF:15:BC:81:C7:79","sha256":"AF:9B:97:5A:62:CE:06:34:27:5E:F9:FD:5C:85:46:66:7C:86:20:F2:74:B1:F5:5D:40:7C:74:66:80:A2:AB:74"}}},"request":{"raw":"GET /6bb5a139-0ce3-4bb4-bc10-d73bc3286ab3.js HTTP/1.1\r\nHost: bitcoinhypers.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoinhypers.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 25 Aug 2025 22:47:07 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 15 Jul 2025 21:30:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1638437\r\ndate: Sat, 26 Jul 2025 22:47:07 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5145081,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"110ebe3a23a5d26d620d1c605133c09a","sha1":"a40917318db948306f33db405f8aedae28c1e3eb","sha256":"fd338dcde1888e2196abf5fed571d5c1ebc8a8ff514b847e9a9b06485d88e97f","sha512":"89985b02430ba2963c76d36957d7f72648fa74c6cd75f23f0d5d0faf20b6151ec4b0fa57812f13e68694582518446f5e191a433b09b089da584729b2ea0ab86f","ssdeep":"12288:VzBe6kEdOxQoMA3ar3Qxwj7Vv/Ufa/4yVzGPGsFblUa5E:qsd2QE3Zs7VHUfFGlV","tlshash":"872519906a135030cbe71ea5c4e30a4bdc346a127c8d4c99f65ddcd263adf7398daa39","first_seen":"2025-07-26T22:47:36.4893Z","last_seen":"2025-07-26T22:47:36.4893Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1092,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":984,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-26","alert":"Sinkholed","trigger":"bitcoinhypers.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}