{"report_id":"b7d22f6e-544a-435c-9f5e-7f67d2697b80","version":0,"status":"done","tags":[],"date":"2026-09-04T16:00:29Z","url":{"schema":"http","addr":"deai-btc.com/","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"deai-btc.com/#/","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"title":"deai-btc.com/#/","dom":{"size":105367,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14469), with CRLF, LF line terminators","md5":"c5ef7c1d9ad145c78ac3512c11ab7cba","sha1":"99cacec0016f5436d231214588b98cb1c7b54398","sha256":"a4c1b357942aa60a08dcb2a78d0ee4c779127780d5e1ceb6648523b2439598db","sha512":"6d9225416eced36382a9a04d753586a9a96b9980cd495b8c241c10129cbda87a7044f2cede716270026e390dc91547ed7a564455ede3f91b48fdc5b398204264","ssdeep":"1536:5ORJ5DCC8KUlYj+UlYj3ftla+eYk5sfwksf4isf4Wsf9osfUBW6YEJJS+:WIvhYJYLXn","tlshash":"2ba35420b692246bfa37c4e2e4ebbe197187d739c2054655fbec36299fcacf01921354","dom_hash":"domhash4b78375d0e75544b42742e4777376123","first_seen":"2026-09-04T16:00:36.28602Z","last_seen":"2026-09-04T16:00:36.28602Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"deai-btc.com/","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-09T16:00:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"api.btc-boxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"deai-btc.com","ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-14","domain_rank":0,"first_seen":"2026-09-04T15:42:08.255403Z","last_seen":"2026-09-04T15:42:08.255403Z","alert_count":90,"request_count":30,"received_data":1615373,"sent_data":15125,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.btc-boxx.com","ip":{"addr":"104.21.54.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-13","domain_rank":0,"first_seen":"2026-09-04T15:42:08.255021Z","last_seen":"2026-09-04T15:42:08.255021Z","alert_count":52,"request_count":14,"received_data":121130,"sent_data":7973,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-08-28T22:48:01.920941Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":547,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":1324,"sent_data":590,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"deai-btc.com/","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9a0cfb2b12b0d5fd302c8da798559423","sha1":"0fef1580b9a039bfccace4c70afe5d3abfe99c86","sha256":"e5ba608c8aa5918b7c2ffdbb93b3658079c60e9326fd25fdc2aafdd01d2862db","sha512":"6cebb9515fc9ea629e0d8401bd68522bea7fcbb86bec7aa3932345a6837f99841d54f93762c26f34c8cbe2880dc313b700faf41be5a6bdc4db75bbaedd5f982d","ssdeep":"","tlshash":"6fe0618250e72d1c11218325358998171f750577dec14d413c8c27684f64f0ac05f808","size":408,"data":"","first_seen":"2025-08-06T14:47:16.585511Z","last_seen":"2026-09-04T16:00:36.314287Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/js/chunk-vendors.4d76fd42.js","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a4d422da91efa6f1b91f6ae762a7c48","sha1":"03153aee855798388a92f6cc4551882410a5713a","sha256":"8f660da3b73c2c798d3db2a0d4452393fcc2488bc7a37a5d1e40e1df687ff81f","sha512":"f9efd63fc174e2571a5dfdb666d2a6dc931351e33bc69245331f53ca85d933fa3287219a6ab0dff4fafa0b049d06dc6e6d01e6e96cda9d9dfa54210a0eef8fb9","ssdeep":"6144:IAP2TfucU9bwYhcPsFBEvmElZuWh1bg3SMv7zmim56DxKhSzeACukWgoTJ:IE2TW39b1hcuOZcv7zGKKieA7NbTJ","tlshash":"1e05088df282b0b60be760b5403f220bb2376959b40a84d4f675e4d4ad7894e6237f7d","size":819983,"data":"","first_seen":"2025-08-06T14:47:16.547612Z","last_seen":"2026-09-04T16:00:36.297372Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/js/index.8fa92f89.js","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da3816c458f770cd4d18414d0cf441ed","sha1":"ce17631f7ab6e4e23f7e3e20240376fd6453cf1f","sha256":"a344fd604b40c68bd4607f3b967008f4b082ebdcdd5df9ca10190882c37ccc45","sha512":"7ed76ba8c1aab6b0201245c70516646e154cdac96ed104a686ce69f7fa7d7049d70a4e81c9aa8722dcb46d494af3ed7720e5a08a97d0361acc5124460de74edb","ssdeep":"6144:PLxdRKSSgVRfu9ZSHenflAoG/L+Ar/Rm62PoOfuTteZ/Fegbkt:dKqRfu9A+nflAoG/L+Ar/RmjwOfwKK","tlshash":"d9546e77f98a69cc1456b80fe04ff70a31552cb6be8960c0e7ec9da45be4649c232f64","size":280014,"data":"","first_seen":"2026-09-04T15:42:14.182077Z","last_seen":"2026-09-04T16:00:36.310763Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/js/pages-home-home.b8acba5f.js","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b5fb54a06d0e72639dee4d0e96d5a2f","sha1":"cee83817aa22811bcc1884a6d967250af737ca4c","sha256":"746202e7a90f34cead2ade82e18330574439ab8a4c46fbd102e685a7caeb8574","sha512":"76eac1edb805c6dfb46e8a8410ba6701fa7c22fda621ec9dbd4562b31b4d8bdbdbb34fa98c910c59fb5eda1b1b01ef17ce413446e9770b155ebb71cb34fa094e","ssdeep":"384:vc6l9mVt3EisIDr/HIbLThvc91t2Ksl7/xm9sW9jUkSh/W6xLWq4qYTqwqA/:vc6U5sKIbLThvc91IKsl7ZUskYkSp+","tlshash":"aad2b514b983e0ffcd6fc221207b152990326ef1e115e98ad7b8c5c18ed5c89266fa7d","size":28944,"data":"","first_seen":"2025-08-06T14:47:16.527404Z","last_seen":"2026-09-04T16:00:36.312451Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"langen","filename":"https://deai-btc.com/static/js/pages-home-home.b8acba5f.js","line_number":1,"column_number":17596}]},"http":[{"url":{"schema":"https","addr":"deai-btc.com/static/image/mores.png","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.900Z","timestamp":1788537598900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/image/mores.png HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\netag: \"6a7f392b-1fd\"\r\nexpires: Sun, 04 Oct 2026 15:41:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1102\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uCj9WrLPYmsm4ZDLQCvdNglWRl65FrL%2BKQ3a6afrPFc9Ue%2BYh7JHYqy1nj4IRUbzC6XpDBYU0H%2Feb%2FPtI18TWNB0Wbc83LaZScgkMU7gxQavLn61WvjD09wefFBznU8%3D\"}]}\r\ncf-ray: a35e34592956b512-OSL\r\ncontent-length: 509\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":509,"size_decoded":1333,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"49dcb5bfae28accc065141bcbceba65b","sha1":"a69cb142a860ea96c680b37770263046f98fe612","sha256":"1dcd47fe3403f53080acee25bb1bf2af5fc6d185f24b4ff267da43432c1558cd","sha512":"f6024e581fb40ad09022a34a9d0a8e29632355e697741d4bf46e39f43206319116b20b0cd69d6c1624947aa87367dd17fa00d049e5a08a065834c3753b5ddcda","ssdeep":"","tlshash":"17f020c2228a8231d62f72e2327a6874947e2e14c1800e100021f2e5b1024a779d0ac2","first_seen":"2023-06-11T17:08:27Z","last_seen":"2026-09-04T16:00:36.287308Z","times_seen":259,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/footer/trade0.png","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.788Z","timestamp":1788537598788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/footer/trade0.png HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f392b-6b0\"\r\nexpires: Sun, 04 Oct 2026 15:41:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1103\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EnCMAqc%2F2gkKr0NRYI2Q8e8ydWrOouqmuoL5r7VTmlvz%2F8kdJhivwqQQr5%2FPqbM%2F9oujjNrRWIPXSRd8jgP61C10UuKYGbkStQ8dASCvjzsLQ0pz0Celcnsiyyrj4oE%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a35e3458693fb512-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1712,"size_decoded":2407,"mime_type":"image/png","magic":"PNG image data, 78 x 78, 8-bit colormap, non-interlaced","md5":"265606b2f0d15d309ceb561a0d120f4c","sha1":"58ba90a24ffd5beeccc3257bb1b874ea065c7e07","sha256":"c03f74504e4118235d434f4f8076e47b47addc0eb930539cadb0ab6e6b286fc2","sha512":"2307f9a7bf7ac2c9a823d17b09f612158b96b501d2dc7ef4e66d01715bdb94ed19f18976b23885bc9e3f096feff3a06f18eabe9b75f722fbc66b8f57e3a07217","ssdeep":"","tlshash":"fd31d6418fb38cd576a4df4b000d307aee5e584361ab15ddd674fb506a2160c0af7c70","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-09-04T16:00:36.287879Z","times_seen":183,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.btc-boxx.com/api/default/setting?key=popup_on","fqdn":"api.btc-boxx.com","domain":"btc-boxx.com","tld":"com"},"ip":{"addr":"104.21.54.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.828Z","timestamp":1788537598828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:32:17 GMT","end":"Wed, 11 Nov 2026 14:29:40 GMT"},"fingerprint":{"sha1":"4A:05:76:C2:25:25:02:AE:79:07:D9:57:94:55:33:77:A3:52:7B:E7","sha256":"BA:B7:F3:2B:66:81:AA:90:1D:92:63:D7:F3:3D:26:11:B9:1A:09:44:04:C9:3D:B9:F9:B6:DC:79:11:0D:36:B0"}}},"request":{"raw":"OPTIONS /api/default/setting?key=popup_on HTTP/1.1\r\nHost: api.btc-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,x-requested-with\r\nReferer: https://deai-btc.com/\r\nOrigin: https://deai-btc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, authorization, lang\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ndate: Fri, 04 Sep 2026 15:59:59 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WMt5MVFx3xHZ4F2D2G1kdqsiW0HSOA7SKi9o3RTGd3Vz51WXhkgrtFoEPXVVhVmbVRQw03IVaJAaXfxZlikhkdg%2B3ismTG4mfk%2B%2F%2BX%2FK%2BuJLR2c6Jz1twIQy0Yihe302SAFC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a35e3458eee6b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":853,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":705,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":671,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"api.btc-boxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.btc-boxx.com/api/kefu/service","fqdn":"api.btc-boxx.com","domain":"btc-boxx.com","tld":"com"},"ip":{"addr":"104.21.54.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.828Z","timestamp":1788537598828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:32:17 GMT","end":"Wed, 11 Nov 2026 14:29:40 GMT"},"fingerprint":{"sha1":"4A:05:76:C2:25:25:02:AE:79:07:D9:57:94:55:33:77:A3:52:7B:E7","sha256":"BA:B7:F3:2B:66:81:AA:90:1D:92:63:D7:F3:3D:26:11:B9:1A:09:44:04:C9:3D:B9:F9:B6:DC:79:11:0D:36:B0"}}},"request":{"raw":"OPTIONS /api/kefu/service HTTP/1.1\r\nHost: api.btc-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,x-requested-with\r\nReferer: https://deai-btc.com/\r\nOrigin: https://deai-btc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, authorization, lang\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ndate: Fri, 04 Sep 2026 15:59:59 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XwOvzmfrw00p1Hp90UNQbYOE0WiyyVp7kqIntg%2F%2Bu%2FfD3QryMRDtH%2F%2BGC2VbnMAryGajHHeFT8metxH86WFfERgkiihiNQxzfOqlfl8xytvYHX7ECQg2QaVSo3sSvC6UdlOf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a35e3458eee7b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":851,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":702,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":668,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"api.btc-boxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/image/ru.png","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.882Z","timestamp":1788537598882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/image/ru.png HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\netag: \"6a7f392b-d8\"\r\nexpires: Sun, 04 Oct 2026 15:41:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1103\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Co1FPIZJalrqFZoLVyqBQp0LQ8bGIyGh9sYjT2DsVXjZwZboT6BE4BzEo4wj0Xckrg5C17Xa6jnEzL73%2FUpERE6pcGBtByyo1xeZpLBSLK9HkdlNnNUjYoQys3O9JSM%3D\"}]}\r\ncf-ray: a35e34590950b512-OSL\r\ncontent-length: 216\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":216,"size_decoded":1033,"mime_type":"image/png","magic":"PNG image data, 182 x 121, 8-bit colormap, non-interlaced","md5":"14124102b4ea20d15fea44eebe3a271c","sha1":"18080d1276ff6b0d021970bf2fb5ff41e5e6ee8c","sha256":"57ed7257d589d646417a4de7d35b2704ea166e04f07ccd6b7ea0de388c837cd5","sha512":"6ebb3150136005ea69e0ce49a3b2dddf0205a9e0ca5ecf310f2be68c8ce4b7c6dcf0f5de3ca10471f53697d54824f2981a1be6a1b2d14665b7ef05aad3e0010d","ssdeep":"","tlshash":"91d0a9a1cd91a920ce0e4438cdc0842a28a56b084e3b0e4a0730e3d00833824e22200f","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-09-04T16:00:36.289458Z","times_seen":33,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/image/hk.png","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.871Z","timestamp":1788537598871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/image/hk.png HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\netag: \"6a7f392b-28e\"\r\nexpires: Sun, 04 Oct 2026 15:41:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1102\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SWj37TCjZXtBWDKy4AfUwkJx99bGAdf%2FjNOkS7mhH9Vxq0C4U9TiEGpwYo6i8vEV9PBH4m3g8sM2pmqP830Cddzd1FID%2FGd7bwgA8rGoXRHMiiM%2BRLpRLbi0PgwCEek%3D\"}]}\r\ncf-ray: a35e3458f949b512-OSL\r\ncontent-length: 654\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":654,"size_decoded":1476,"mime_type":"image/png","magic":"PNG image data, 120 x 80, 8-bit colormap, non-interlaced","md5":"8fd479f23d4f86bc65420b03d04c958a","sha1":"862e63af58e9a20570dfbc2f8023b6465beabb23","sha256":"0b3719b66340ddcc887e3d6788aa47141de853fc42aa1a33aa1b2777e4baee6d","sha512":"dba666636b9b1878f41801dfda7a8bbd259fc320964ca1078a81248ecf80bce0eadf47e6ea7cfee096fe7e5647a9b4100aab01a8a6cf6b9dcd646a3122f9c811","ssdeep":"","tlshash":"c1f062a43a108e35cd806735feaa8cc6c7a5353b2182df93320f30faa82fa04748d1d5","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-09-04T16:00:36.290344Z","times_seen":37,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/footer/index1.png","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.785Z","timestamp":1788537598785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/footer/index1.png HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f392b-8e5\"\r\nexpires: Sun, 04 Oct 2026 15:41:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1103\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AjouWouhGhjb84M5jkxW28zG1bTEEm4m2ofNDhCYyp74GzllC%2FNVXpH7ney4DyYlZGL7YMeqJ0XAhBnJIWz6wdieg3dN22qKjesdarZh6cmA4LaD2ZwWp9KXdCOkwpM%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a35e3458693db512-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2277,"size_decoded":2839,"mime_type":"image/png","magic":"PNG image data, 78 x 78, 8-bit/color RGBA, non-interlaced","md5":"70eda83bf7de9438882ee030fff4ac46","sha1":"1d4c3d86354ee196abeb2ed9ccba70d7c827eb33","sha256":"5eccc9f6c8641a057d543958d433b201b8ce31caf784e5270df0032c9f7af031","sha512":"279a6373cfe0a2a9922f1531bc226519215d83f163cc4b510a8dc126896521d1059fa796303a84f5046db4afa20c64d188839b27e8fca774feee0743d623248d","ssdeep":"","tlshash":"fb410cc8ed061e61917a94d135f1f1460a356d98eaf8e039048bd44be5593f785fe0cf","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-09-04T16:00:36.291276Z","times_seen":183,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/image/id.png","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.880Z","timestamp":1788537598880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/image/id.png HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\netag: \"6a7f392b-117\"\r\nexpires: Sun, 04 Oct 2026 15:41:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1103\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zxKEgfq%2F4jwQnd5RVMpCqLBB3mahWPnOh%2BwETdbeJOkz8BEZQWg2ykySOHpj5YJc51LVcoiqanTEerGUX0z%2B4nkDCXh6Lc0sUYzO2MHqG1F44IbF79QoTDh6hw4CD9A%3D\"}]}\r\ncf-ray: a35e3459094fb512-OSL\r\ncontent-length: 279\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":279,"size_decoded":1101,"mime_type":"image/png","magic":"PNG image data, 275 x 183, 8-bit colormap, non-interlaced","md5":"82bea8770d70c58928050b2b15d44b2d","sha1":"12107c57cc6d71ab17d55663d9e3e4a6fddb79d2","sha256":"14943d3c5d0e9605ce3c5770ebd276db1de35a07aab61b3aed8b5790029f286f","sha512":"20acbad8b895507ead775f30bf51f26fdc2bafc0f0cdf255cb81d4865ebd0e919e9f718c025a5f7d47ecd0bcda36392aa20bc14a039dd0dfc55fa180c94a6a04","ssdeep":"","tlshash":"ddd012a591500c68cc02cc32d5c303e0fb3614233f5743129d0ebc2b31d012d825d203","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-09-04T16:00:36.291968Z","times_seen":30,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/image/head.png","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.864Z","timestamp":1788537598864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/image/head.png HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f392b-143e\"\r\nexpires: Sun, 04 Oct 2026 15:41:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1102\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CS71Xa6cnKr%2BaaO%2FgbCvZU%2Bn7%2B0dPlsAAFY0jtKCHYJeovNo2tc2Wr7UXMJUc9%2FniwM8KEoXGcCp1tccW3S8rCFjkhPk%2FYnQFhvA3nmxuPY%2FEyNelKD%2FMi%2Ff44b5Kjk%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a35e3458e945b512-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5182,"size_decoded":5785,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit/color RGBA, non-interlaced","md5":"dba98711bdff990a5f6250c01f53c3d5","sha1":"006c5851806c3c23b22723bb5c155e4f980b1d49","sha256":"329e0cb0896e7b07cb6d67918d3aa5685250ffe855a264c3d0d25f02c163f02a","sha512":"ba2571b04d27f68f1632c5c3d9ebadb1697c3e71eaa770909c4564abc1761f416aff4a1a025f410ccef4fbe7646727113119b590ebc5f11f58d96be70d44d094","ssdeep":"96:ao7F525V5kJ4R6JT3tRuRisSjDfVENSKP+TY3uhogY/iyOE8otJkoCdXIApC:b7FSV5S4R65uor3fVEvPcYVtJodXImC","tlshash":"57b16d08a684b380d02dbd5114f78072eb76b56146fce1dde8cfec524e391d58655cdb","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-09-04T16:00:36.29253Z","times_seen":176,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/image/sucerty.png","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.902Z","timestamp":1788537598902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/image/sucerty.png HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f392b-61f\"\r\nexpires: Sun, 04 Oct 2026 15:41:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1102\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J0%2Bbk9h5aVYFJKmzGxCvZyRQ%2Bymx4DJUsR6ab6ONyKeIIulywkoPnTbdtT2QkWGvgvOiTib5ClzjbKm%2BKeILB%2B5X2KsspRW90FDFdRn4%2BeTCcYWZtGoAY75pC0rj7%2Bg%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a35e34592957b512-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1567,"size_decoded":2122,"mime_type":"image/png","magic":"PNG image data, 46 x 52, 8-bit/color RGBA, non-interlaced","md5":"ebf697517ba45578234659402ddc5166","sha1":"32f16a23620699ae20c779ea5bb7989def4fbb54","sha256":"ef6a9bd4eb66bd449654bf7f57dc3b3eb523a9e3f0fb2e93f7188940c9efc268","sha512":"a164343d8fc40e413a7e59629fb19733e9ec6c9c5a13ce3d12eddd69c7046f286d81824eb90bd9893df10a0ba9e36c81db653836220a50436e3b085f52e5854b","ssdeep":"","tlshash":"b431930dea80ad81564ce0c028f6d0328b3b56801da4f857bdcbf8151cba0baca1d9da","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-09-04T16:00:36.29356Z","times_seen":229,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static//image/account_order_manager_image.png","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.903Z","timestamp":1788537598903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static//image/account_order_manager_image.png HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\netag: \"6a7f392b-1f4\"\r\nexpires: Sun, 04 Oct 2026 15:41:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1102\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SVkrN2MKbXe3NnFTV3%2BgeMKYkwg6MTnVfprA2fGlIhBRER5939g7kNAvJKbk25CCRIridE6TR9sKN2pgvaI%2B9sc8qWgVpzKx98hQWX9WbuOON2386bflBo7tzeoBEBY%3D\"}]}\r\ncf-ray: a35e34592958b512-OSL\r\ncontent-length: 500\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":500,"size_decoded":1320,"mime_type":"image/png","magic":"PNG image data, 66 x 66, 8-bit colormap, non-interlaced","md5":"e3315d591c49a606bfd736263f00d51c","sha1":"6c40923482e99fd5a3078430b8139e1e38b3e1df","sha256":"1606c567dc049d705ca7480c2453869f6f724dbf01b748095a0ef4e3aa25ffdb","sha512":"0a8f3da56c9cfa4060b74a626bc447c32bf7b60cedb495abf40f9de9dd0a83038ffc462c41d33439f2a51903e4fbbf69a697b1c1e41a625ce2c4e0d183549f69","ssdeep":"","tlshash":"adf054b5564f6938add94379a1cc0bb08487f111703704f7a0e2667c7c2083002acf70","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-09-04T16:00:36.294239Z","times_seen":29,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/favicon.ico","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:59.511Z","timestamp":1788537599511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:59 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4NZhGW9TXN6AGZLqQPAfOl1ZmoF4K%2FEeMvATbEbwfPEk9vZ21Z49lc8e2jaiZLM7FhLPBEhoxnyOKXalkwyyouWoiaQufELQqxLMW88WB8sGbuSz%2BeGZiracXXdFjo8%3D\"}]}\r\nlast-modified: Fri, 14 Aug 2026 15:47:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=6,i=?0\r\nage: 1103\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a7f3892-3e67e\"\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a35e345cf994b512-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255614,"size_decoded":109542,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x-14, 32 bits/pixel","md5":"91025c21bfdebbca32d5ed61457bdee8","sha1":"51baa89a27fc2a9740acb771b88f5b78a5e0aac9","sha256":"31cfb47b7ff7df7eb5fe008fc8f6c7ff853853e7be4a9a755f26b9c91612e0f8","sha512":"7b2b530484b39ef17ec1bccc44daa79731888594c1bf459428dd17a53516e51117bc67ece09c26afe143190db23f11bd762bfcb02b7ec464b8215b2a851da39a","ssdeep":"3072:lYRJd35z7UP/KFcQz+f4ujaoK1YuWR4d1pkAWs62qtsN0nsUPAx7WoQHOw7dgXLw:k98BIgjuWuzpkcot1soAJQzRgbBbrq","tlshash":"b04482eae90010f9dca3baf9d43f1a62537ba87ff4ac1c51298532515af56bb0473807","first_seen":"2026-09-04T15:42:14.169719Z","last_seen":"2026-09-04T16:00:36.294848Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.btc-boxx.com/uploads/20250730/d50d2b46af7d79cc7e5cf9d223895efb.jpg","fqdn":"api.btc-boxx.com","domain":"btc-boxx.com","tld":"com"},"ip":{"addr":"104.21.54.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:59.813Z","timestamp":1788537599813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:32:17 GMT","end":"Wed, 11 Nov 2026 14:29:40 GMT"},"fingerprint":{"sha1":"4A:05:76:C2:25:25:02:AE:79:07:D9:57:94:55:33:77:A3:52:7B:E7","sha256":"BA:B7:F3:2B:66:81:AA:90:1D:92:63:D7:F3:3D:26:11:B9:1A:09:44:04:C9:3D:B9:F9:B6:DC:79:11:0D:36:B0"}}},"request":{"raw":"GET /uploads/20250730/d50d2b46af7d79cc7e5cf9d223895efb.jpg HTTP/1.1\r\nHost: api.btc-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:00:00 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tAtIRUPV2yIom9ZO3AJMy%2F61stlltHB%2BveEZTpkZqV%2FNlh4DmUNaQJNEfyBxFqkUe0zgSSOEzvBp%2FkVzrShnMh3C60Mp1kAZwX7kxCrcjAwoTCby9x0YGi68zf5uhzMl2r4s\"}]}\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a35e345edf6bb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"api.btc-boxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.btc-boxx.com/uploads/20250730/78b7988ba1b8c764f35d8db1f310bc56.jpg","fqdn":"api.btc-boxx.com","domain":"btc-boxx.com","tld":"com"},"ip":{"addr":"104.21.54.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:59.815Z","timestamp":1788537599815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:32:17 GMT","end":"Wed, 11 Nov 2026 14:29:40 GMT"},"fingerprint":{"sha1":"4A:05:76:C2:25:25:02:AE:79:07:D9:57:94:55:33:77:A3:52:7B:E7","sha256":"BA:B7:F3:2B:66:81:AA:90:1D:92:63:D7:F3:3D:26:11:B9:1A:09:44:04:C9:3D:B9:F9:B6:DC:79:11:0D:36:B0"}}},"request":{"raw":"GET /uploads/20250730/78b7988ba1b8c764f35d8db1f310bc56.jpg HTTP/1.1\r\nHost: api.btc-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:00:00 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xu9Y0bMerWmq8H2hie6BfUMqMVeDf%2FusK4b3Se6r700KZ%2BY7zBa0Y5HC03sNrpi25E%2BSNWq7BRFL95Ka2cON%2BERe0R%2B54VIvByMh6PfeupXsnjmHwU6mf8WRo8pp5K1IrCFJ\"}]}\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a35e345edf6cb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"api.btc-boxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/image/en-US.jpg","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.867Z","timestamp":1788537598867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/image/en-US.jpg HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f392b-bd1a\"\r\nexpires: Sun, 04 Oct 2026 15:41:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1102\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CJdg1Ve0dF6L70AA8tCJmyP8tK%2B63QVqkIOeej4G%2FQU%2FnujnMgfyPI8j56I9TZKx0%2FMpblZTqjDkFSKyYm3Mfdv9TY6bgW59n%2FuBh8jgkjKGZCHpqZsim5nI6Nwq6ME%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a35e3458e947b512-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48410,"size_decoded":31734,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1235x650, components 3","md5":"6d614c6625636fa6a4fa5ead60e8197c","sha1":"97d0890f2a081eb0fe2a1fae27617828a0f6db86","sha256":"59ec5075c5018d1d87c5fed876f5802a8c88f3fa35359a67855845ca098a88ef","sha512":"73abb66d5cb4dec484fa01360b73778b294d5d93ceb16348cd90fd2074539d30d9897e48bd55e9f887b49b1f8180c581ae20f86260bbb4b0bb0231d90313fbb6","ssdeep":"768:SzTXsG2S6dV4joEizTUFBgkF+yLDOb4Zc0csi6a3:Sz4fSyV4mfUFBNF+yvObZ0hI","tlshash":"ab2339ff7bd99a29fc08b0f35a9327124da53eab9e15b6c6c190104cb3c45a2fed4095","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-09-04T16:00:36.29615Z","times_seen":29,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/image/jp.png","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.873Z","timestamp":1788537598873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/image/jp.png HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f392b-4ec\"\r\nexpires: Sun, 04 Oct 2026 15:41:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1102\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S8h2S4qhkafFL0g0zXQTR38nL8oIqEzqRKfEktFIqi%2BRg%2B7yMK2Xu35SNr3A95hHMS6F4PTuk67EnJ8KFlNn9bGRKLXhKcXoOGp%2BkGUxHLqOPiBCbsxeqV%2BNidLvIuA%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a35e3458f94ab512-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1260,"size_decoded":2071,"mime_type":"image/png","magic":"PNG image data, 48 x 32, 16-bit/color RGBA, non-interlaced","md5":"2ae746493820e82075bc8d320d1a5631","sha1":"9785c05e05be1e7ab2a7f4f1234af4d9f10f9da9","sha256":"33af3236be5d4c21418afbf43f36266e03f581fe2aa4203b4bb46370289cb8e0","sha512":"de59c603d743d42c8bb773d4f9e753a28fdcbabbbebf7db2ae3a68e82a99ada82e8a2fb855c1afbbcd4d4670a86acc389201254eaa9f157d0202d4d3bac7db27","ssdeep":"","tlshash":"1121bafaf6511299c00df829bd38161871b5c691123db0ad6640e24d922c4f833c7ef1","first_seen":"2023-05-06T18:37:16Z","last_seen":"2026-09-04T16:16:06.877054Z","times_seen":324,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/js/chunk-vendors.4d76fd42.js","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.487Z","timestamp":1788537598487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/js/chunk-vendors.4d76fd42.js HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f392b-c830f\"\r\nexpires: Sat, 05 Sep 2026 03:41:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1105\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KfH9N%2BrW1Qp0Y2EFkqVs4P8l3rEhetnzK7RuxompTFzorQwM88qFc3Z7n%2B%2FMsiq%2Bx94qfJ4mkYO%2BOPMy6bjMavPpqQnXou5s89zopD%2B%2FfOokTMHYjtXIOwOTzwdzbig%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a35e34568914b512-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":819983,"size_decoded":254588,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65192), with no line terminators","md5":"5a4d422da91efa6f1b91f6ae762a7c48","sha1":"03153aee855798388a92f6cc4551882410a5713a","sha256":"8f660da3b73c2c798d3db2a0d4452393fcc2488bc7a37a5d1e40e1df687ff81f","sha512":"f9efd63fc174e2571a5dfdb666d2a6dc931351e33bc69245331f53ca85d933fa3287219a6ab0dff4fafa0b049d06dc6e6d01e6e96cda9d9dfa54210a0eef8fb9","ssdeep":"6144:IAP2TfucU9bwYhcPsFBEvmElZuWh1bg3SMv7zmim56DxKhSzeACukWgoTJ:IE2TW39b1hcuOZcv7zGKKieA7NbTJ","tlshash":"1e05088df282b0b60be760b5403f220bb2376959b40a84d4f675e4d4ad7894e6237f7d","first_seen":"2025-08-06T14:47:16.547612Z","last_seen":"2026-09-04T16:00:36.297372Z","times_seen":13,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/footer/gang0.png","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.786Z","timestamp":1788537598786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/footer/gang0.png HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\netag: \"6a7f392b-1f1\"\r\nexpires: Sun, 04 Oct 2026 15:41:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1103\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BOKzG6aV1yI0Z4%2FvRJI00eJhiT64cwXGx2gAeDNXdx5en57%2BbQhFrE7%2FshzbfHeuiK%2BjN8yEJQkcZqwrSJqe8Lv9kIcbCgHZ3kmbpVByMzizPNChbkSDsc0AYvYy%2Fng%3D\"}]}\r\ncf-ray: a35e3458693eb512-OSL\r\ncontent-length: 497\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":497,"size_decoded":1323,"mime_type":"image/png","magic":"PNG image data, 78 x 78, 8-bit colormap, non-interlaced","md5":"5f32114b2c2eef750a1402dcfd5c430e","sha1":"8fe008b191837e853fd9ab79b8b7a081ac12803a","sha256":"103c431185f5f14c3292904b81071a6ef2a474cc38b3cdc2ed0a8bf8177b667b","sha512":"f8e4ad7fb68a3542715a43f11e58eaef3fea6bde3515725cd39c4ce0346d62e094ca1c2b9a368bfadf153e0a16ec8bea94bd2164d295c619a9fca4ebb7ce11c7","ssdeep":"","tlshash":"06f0f8c3804ecc74a6e4c823700813f94c9a1938b7fa43a2c09086584aca22382e0333","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-09-04T16:00:36.297989Z","times_seen":188,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.btc-boxx.com/api/news/list?category_id=2","fqdn":"api.btc-boxx.com","domain":"btc-boxx.com","tld":"com"},"ip":{"addr":"104.21.54.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.819Z","timestamp":1788537598819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:32:17 GMT","end":"Wed, 11 Nov 2026 14:29:40 GMT"},"fingerprint":{"sha1":"4A:05:76:C2:25:25:02:AE:79:07:D9:57:94:55:33:77:A3:52:7B:E7","sha256":"BA:B7:F3:2B:66:81:AA:90:1D:92:63:D7:F3:3D:26:11:B9:1A:09:44:04:C9:3D:B9:F9:B6:DC:79:11:0D:36:B0"}}},"request":{"raw":"OPTIONS /api/news/list?category_id=2 HTTP/1.1\r\nHost: api.btc-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,x-requested-with\r\nReferer: https://deai-btc.com/\r\nOrigin: https://deai-btc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, authorization, lang\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ndate: Fri, 04 Sep 2026 15:59:59 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eCCojb90p04gs55BjK7SsdsQGUvkcVauBGurY%2BdC3pqKjihE1CifXIjaJ11SD36Va4BJo9yJXIf4sCIT3fI1N7bGqN4JrBDUpAWKswkwXvtOjVi%2BmOHFQ1c0bupbrMGsx1vi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a35e3458eee4b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":845,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":719,"timings":{"blocked":-1,"dns":28,"connect":17,"send":0,"wait":674,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"api.btc-boxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/service.png","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.862Z","timestamp":1788537598862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/service.png HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f392b-15d2\"\r\nexpires: Sun, 04 Oct 2026 15:41:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1102\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CfQK2oD%2Bn3%2FhG1hGhZVw%2FVsAgCoi6Lk1eSqpIM8DESiDtFNL7lhn6EtAKG3D4XANbCovkf86TgnpPECNL0YALgyAVFu8o4HTgiESkD1FzD1AOzqT7Yf3PxrTmd0t5lE%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a35e3458e944b512-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5586,"size_decoded":6443,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"41e87a38517d3727380238d64b400f00","sha1":"f6f22132433443af143d4c5ef2dd370b0ff096da","sha256":"b48c0b686959042a70728796c1975584c517af72f594df591d0b19fb715327e4","sha512":"2adc113d28757856eb892d4d107e300251ae6a37c85e53f4f2e407280b22398707fd8b9075227bf2b2e4cb81ac854b066e1de4142278e41a6261a5b75e36bb49","ssdeep":"96:vLJIeWPuZJQ3hg9g8gBCgzFLRoJghhq1Qvy0TuS7S4IOnKIjLMPFq30K6Praf0z:lIefZ9+YgqPUS4nnKIjLMNmr6TaG","tlshash":"64b1b083e251f4c5cd30aaf6c279be57c74a4e03ebd002386a995dc28c7281b2e54dd1","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-09-04T16:00:36.298589Z","times_seen":52,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.btc-boxx.com/api/news/list?category_id=3","fqdn":"api.btc-boxx.com","domain":"btc-boxx.com","tld":"com"},"ip":{"addr":"104.21.54.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.820Z","timestamp":1788537598820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:32:17 GMT","end":"Wed, 11 Nov 2026 14:29:40 GMT"},"fingerprint":{"sha1":"4A:05:76:C2:25:25:02:AE:79:07:D9:57:94:55:33:77:A3:52:7B:E7","sha256":"BA:B7:F3:2B:66:81:AA:90:1D:92:63:D7:F3:3D:26:11:B9:1A:09:44:04:C9:3D:B9:F9:B6:DC:79:11:0D:36:B0"}}},"request":{"raw":"GET /api/news/list?category_id=3 HTTP/1.1\r\nHost: api.btc-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: application/x-www-form-urlencoded\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nOrigin: https://deai-btc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, authorization, lang\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: *\r\naccess-control-expose-headers: *\r\ncache-control: no-cache, private\r\ndate: Fri, 04 Sep 2026 15:59:59 GMT\r\nset-cookie: deep_session=eyJpdiI6ImhSa0phbzIxNnJuSGoxdDRsVjlDNVE9PSIsInZhbHVlIjoibDN4cFhJTHFscTlVSERxNjZ5dlpmdFlzZU9WcGljMStUWGl3bzNDSDhQWDA5RjEzbHZ3UmJMN29rSGNzMkdkalEwWnd1OTJHUnVRcU5ndGNJcCtsenVyZ1I3MVhtcGlOMVdXTE15WTBDbSs1c0lYbUhibGNPeURsZHdNVDYyK1giLCJtYWMiOiI4MGMyNGNjNDQwNTQ1OThhMDc2NzhhZGFiMmJkNzM5NzRiOGQ2ZGE3ZDUyYWZiNzQ0OTQ4ZmFlN2U4ZjY4YTcyIn0%3D; expires=Fri, 04-Sep-2026 17:59:59 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mzNQLP0vHZD6WL%2Bzk%2FqQanhspeZsSjyor0ZzWRM9%2Fz5%2F3fLwZ2eks%2BpDTiap%2FvAMo1rthhDC%2FJ8F%2BNRECM6j56qWe%2BzhGQGSm4e9mRSadDMyw%2Fq%2BhuBBNsv4LgE522C%2BpF9F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e345cdf51b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"deep_session","value":"eyJpdiI6ImhSa0phbzIxNnJuSGoxdDRsVjlDNVE9PSIsInZhbHVlIjoibDN4cFhJTHFscTlVSERxNjZ5dlpmdFlzZU9WcGljMStUWGl3bzNDSDhQWDA5RjEzbHZ3UmJMN29rSGNzMkdkalEwWnd1OTJHUnVRcU5ndGNJcCtsenVyZ1I3MVhtcGlOMVdXTE15WTBDbSs1c0lYbUhibGNPeURsZHdNVDYyK1giLCJtYWMiOiI4MGMyNGNjNDQwNTQ1OThhMDc2NzhhZGFiMmJkNzM5NzRiOGQ2ZGE3ZDUyYWZiNzQ0OTQ4ZmFlN2U4ZjY4YTcyIn0%3D","quoted":false,"path":"/","expires":"2026-09-04T17:59:59Z","raw_expires":"Fri, 04-Sep-2026 17:59:59 GMT","max_age":7200,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"deep_session=eyJpdiI6ImhSa0phbzIxNnJuSGoxdDRsVjlDNVE9PSIsInZhbHVlIjoibDN4cFhJTHFscTlVSERxNjZ5dlpmdFlzZU9WcGljMStUWGl3bzNDSDhQWDA5RjEzbHZ3UmJMN29rSGNzMkdkalEwWnd1OTJHUnVRcU5ndGNJcCtsenVyZ1I3MVhtcGlOMVdXTE15WTBDbSs1c0lYbUhibGNPeURsZHdNVDYyK1giLCJtYWMiOiI4MGMyNGNjNDQwNTQ1OThhMDc2NzhhZGFiMmJkNzM5NzRiOGQ2ZGE3ZDUyYWZiNzQ0OTQ4ZmFlN2U4ZjY4YTcyIn0%3D; expires=Fri, 04-Sep-2026 17:59:59 GMT; Max-Age=7200; path=/; httponly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16582,"size_decoded":6327,"mime_type":"application/json","magic":"JSON text data","md5":"84900c8995431f7d41ae9e9ff70dc618","sha1":"724f6744d9b156fdace133a2cfe7373dcd75456e","sha256":"0647213ac3b4aa999507da36da1a30a100a77a4872c595ffdbe5869311d497b2","sha512":"b6e9d3fee4b493237d139e2b9eb99443a74c6c4cf2c360d76b32ae5bcfbaa960339523c26123e2b49390b7afd5492c6160edd691ba6e291b10247e2bea6c070c","ssdeep":"192:yLTi9fssrTsssaX6ssX7ussSisse+dss0itsstMY1TiFsg6lN7mss/JIwgssxssy:dfTlA7t+qzg9J6V5rT1lmYQK","tlshash":"8472679dc7c807b3429201d139db55c7ba39709827a38d8e5ad4854c03d6ebc4b3b2eb","first_seen":"2026-09-04T15:42:14.16661Z","last_seen":"2026-09-04T16:00:36.299519Z","times_seen":2,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"api.btc-boxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.btc-boxx.com/api/default/setting?key=popup_on","fqdn":"api.btc-boxx.com","domain":"btc-boxx.com","tld":"com"},"ip":{"addr":"104.21.54.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.823Z","timestamp":1788537598823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:32:17 GMT","end":"Wed, 11 Nov 2026 14:29:40 GMT"},"fingerprint":{"sha1":"4A:05:76:C2:25:25:02:AE:79:07:D9:57:94:55:33:77:A3:52:7B:E7","sha256":"BA:B7:F3:2B:66:81:AA:90:1D:92:63:D7:F3:3D:26:11:B9:1A:09:44:04:C9:3D:B9:F9:B6:DC:79:11:0D:36:B0"}}},"request":{"raw":"GET /api/default/setting?key=popup_on HTTP/1.1\r\nHost: api.btc-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: application/x-www-form-urlencoded\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nOrigin: https://deai-btc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, authorization, lang\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: *\r\naccess-control-expose-headers: *\r\ncache-control: no-cache, private\r\ndate: Fri, 04 Sep 2026 15:59:59 GMT\r\nset-cookie: deep_session=eyJpdiI6IkRYNnZcL0Zjc0sza0NISFNpUG41aXB3PT0iLCJ2YWx1ZSI6IlNoMlJZaTRnZVArdmVxc1U5TzRUSGhtNFNHTlFiem5INTIyY2dmYTVQMncxQWZqOGFZRnA0SlE2cFo2dTVtZEo2UFRXd2JiT1huK1IzK1lmMWJcLzJJMHh3Z3p2VUFiN3d1RlpkNDR4NHZPTTY5dExIVXZMN0dtWDk1Nlpaa3duaiIsIm1hYyI6IjkwZjRjY2RkNzdlZTRiZGJlODI1MGU0ZDM4MGE2NGRmN2RhYWJjZDRjNTA0Mzk4Nzk4YTljNmE1ZTc0ZmYyYjEifQ%3D%3D; expires=Fri, 04-Sep-2026 17:59:59 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VaBlDTXlzmavNVNe0%2FZo%2B8OvGWo5YSAunfMVHGcWpejWlliAKQGFCssvTpfRhJkXMh9xk4OHCfEn4UWTMB0LMZd1Mw%2FrHIh7jECBxXVwcQTE078CEFz5OLf2a252nrPN0KQA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e345d1f53b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"deep_session","value":"eyJpdiI6IkRYNnZcL0Zjc0sza0NISFNpUG41aXB3PT0iLCJ2YWx1ZSI6IlNoMlJZaTRnZVArdmVxc1U5TzRUSGhtNFNHTlFiem5INTIyY2dmYTVQMncxQWZqOGFZRnA0SlE2cFo2dTVtZEo2UFRXd2JiT1huK1IzK1lmMWJcLzJJMHh3Z3p2VUFiN3d1RlpkNDR4NHZPTTY5dExIVXZMN0dtWDk1Nlpaa3duaiIsIm1hYyI6IjkwZjRjY2RkNzdlZTRiZGJlODI1MGU0ZDM4MGE2NGRmN2RhYWJjZDRjNTA0Mzk4Nzk4YTljNmE1ZTc0ZmYyYjEifQ%3D%3D","quoted":false,"path":"/","expires":"2026-09-04T17:59:59Z","raw_expires":"Fri, 04-Sep-2026 17:59:59 GMT","max_age":7200,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"deep_session=eyJpdiI6IkRYNnZcL0Zjc0sza0NISFNpUG41aXB3PT0iLCJ2YWx1ZSI6IlNoMlJZaTRnZVArdmVxc1U5TzRUSGhtNFNHTlFiem5INTIyY2dmYTVQMncxQWZqOGFZRnA0SlE2cFo2dTVtZEo2UFRXd2JiT1huK1IzK1lmMWJcLzJJMHh3Z3p2VUFiN3d1RlpkNDR4NHZPTTY5dExIVXZMN0dtWDk1Nlpaa3duaiIsIm1hYyI6IjkwZjRjY2RkNzdlZTRiZGJlODI1MGU0ZDM4MGE2NGRmN2RhYWJjZDRjNTA0Mzk4Nzk4YTljNmE1ZTc0ZmYyYjEifQ%3D%3D; expires=Fri, 04-Sep-2026 17:59:59 GMT; Max-Age=7200; path=/; httponly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48,"size_decoded":1422,"mime_type":"application/json","magic":"JSON text data","md5":"60ba79708ace198be4a3b3c3aec0e680","sha1":"fde39d9bf60fe1190a9611082923c03c2f898d5d","sha256":"4142d1ed50218aad6549bb16ceec1194726531b7438797f2529efb97ae638e61","sha512":"e7f85f7d512048887072263148d7a58659ca2ed8f23ed7e1284aaac4de0ebfb4b6fa1948c00be1ca36278b5bbea57f994b52e7b80a00079ec92b065d12652300","ssdeep":"","tlshash":"a8900282241b00828606104894088f09105961821400432a5d8e91218e9d1552142430","first_seen":"2023-08-30T02:43:34Z","last_seen":"2026-09-04T16:00:36.300191Z","times_seen":41,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"api.btc-boxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/image/bibi01.png","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.904Z","timestamp":1788537598904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/image/bibi01.png HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f392b-187d\"\r\nexpires: Sun, 04 Oct 2026 15:41:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1102\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Cj6pWbN%2BXvwO86CMwL3oaOudV4P1V32PhW7F5b%2FnZCZjhPIKU9%2Fj1rsTwnX0aiieITF40XN7O4KClSI%2B0RYGw3CTyl6IYZtMUMmTJnHrrYysphYBBkF3NeVGaiT4RU%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a35e34592959b512-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6269,"size_decoded":6865,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"56bec1bfa37bbeeb32dc57829598a194","sha1":"c2de87a0ab2b2e6978648d0e92f410368e4097bc","sha256":"18634e742b98dce5e49bd30c815bba95735d26aed6fb7c89080f023178887be6","sha512":"1aaf5e8da3ca3ee8558b4bd7985858f2aa066871c0e45814c1cb1383d6e56d13c95c9b2fe42fe985231bc321930d6ef5fc4742770ddc33266a7ead881e8eb5c4","ssdeep":"192:m7FW7X5DJRNvMU3QWLfe6PsYGZd+M5zLbceG:mM7fMUgiPsYGlZct","tlshash":"ced19e88fd642e027364b1d639d5acac4b07bb50724df65010facc21a6b22985cdf2ef","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-09-04T16:00:36.300954Z","times_seen":30,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/footer/mine0.png","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.789Z","timestamp":1788537598789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/footer/mine0.png HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\netag: \"6a7f392b-1e8\"\r\nexpires: Sun, 04 Oct 2026 15:41:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1103\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ELt47ogalBKcHoMFgt2eDAmY9rcXdYh2d2NtvcY7ffudQ8HSlmwipiwbpW1Z%2BDtRcF%2BdfHDq8EEjfNSo%2FOK1ZCaKZXVBp%2BHs9OEzCv64cZNBGydfpkpjSrYaeAkJg6g%3D\"}]}\r\ncf-ray: a35e34587940b512-OSL\r\ncontent-length: 488\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":488,"size_decoded":1312,"mime_type":"image/png","magic":"PNG image data, 78 x 78, 8-bit colormap, non-interlaced","md5":"32aedebb56d1ace381a815e659f3c007","sha1":"40473cae63b693219888e217ff66efbfc4652654","sha256":"45a8e7f70a1847b3528cde3e9c90c7aee8209157dfa26441121eb655e5a52656","sha512":"a705c9e963150eca8025a057bfb5cf19e5a553c0edfd310d4190d0925906894f13c21fb8bda16772babe6d9a24a5b83cdcf119a6efc4db06dcae4d125b58400f","ssdeep":"","tlshash":"9af054c387562f10d7b0463326647a7e0fa4903cf4833ce050f6b785ba1416a03f3624","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-09-04T16:00:36.301657Z","times_seen":190,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.btc-boxx.com/api/market/currency_matches","fqdn":"api.btc-boxx.com","domain":"btc-boxx.com","tld":"com"},"ip":{"addr":"104.21.54.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.826Z","timestamp":1788537598826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:32:17 GMT","end":"Wed, 11 Nov 2026 14:29:40 GMT"},"fingerprint":{"sha1":"4A:05:76:C2:25:25:02:AE:79:07:D9:57:94:55:33:77:A3:52:7B:E7","sha256":"BA:B7:F3:2B:66:81:AA:90:1D:92:63:D7:F3:3D:26:11:B9:1A:09:44:04:C9:3D:B9:F9:B6:DC:79:11:0D:36:B0"}}},"request":{"raw":"GET /api/market/currency_matches HTTP/1.1\r\nHost: api.btc-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: application/x-www-form-urlencoded\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nOrigin: https://deai-btc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, authorization, lang\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: *\r\naccess-control-expose-headers: *\r\ncache-control: no-cache, private\r\ndate: Fri, 04 Sep 2026 15:59:59 GMT\r\nset-cookie: deep_session=eyJpdiI6Ik54ekhqckZYR01yd3poM0R0RXZmdUE9PSIsInZhbHVlIjoiOUtZclpLYnVJaThKTnlhRkpQS05tZ2lMRWY2NzI3WE9ZYWRXN2tHK0RqZDhGN2hER1hVMTVXYWVGM1IwUUdPWVc1cThGZ2JHS1NBYXVsaVpoc1hTU2YrMERISEUwZFNJdUtvSzExbVFBUVRGSWhWWUhWaTN6TCt0TzB3dXBweXQiLCJtYWMiOiJiN2QzNzA1YTU5N2U1YzQxNGRiNmFkMmQ5M2EwNTAxM2EyYjRjNWI3Mjg5MDI2NDYzYTg5OGRhYWFkNTEzNjc4In0%3D; expires=Fri, 04-Sep-2026 17:59:59 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=shBLEq%2FID1hq2L2o7sLVrH%2B3hJfPR3pqY3IcPENHz8qw%2FQqUXwhFfrKmkhiXp9jvMQyJfoRZr8cH%2BqgKduB2pXlyi1sfgTsy%2FrKlsthLDvyEWuMQ9yy2CKu7pleUFi9%2BYZS8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e345d2f54b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"deep_session","value":"eyJpdiI6Ik54ekhqckZYR01yd3poM0R0RXZmdUE9PSIsInZhbHVlIjoiOUtZclpLYnVJaThKTnlhRkpQS05tZ2lMRWY2NzI3WE9ZYWRXN2tHK0RqZDhGN2hER1hVMTVXYWVGM1IwUUdPWVc1cThGZ2JHS1NBYXVsaVpoc1hTU2YrMERISEUwZFNJdUtvSzExbVFBUVRGSWhWWUhWaTN6TCt0TzB3dXBweXQiLCJtYWMiOiJiN2QzNzA1YTU5N2U1YzQxNGRiNmFkMmQ5M2EwNTAxM2EyYjRjNWI3Mjg5MDI2NDYzYTg5OGRhYWFkNTEzNjc4In0%3D","quoted":false,"path":"/","expires":"2026-09-04T17:59:59Z","raw_expires":"Fri, 04-Sep-2026 17:59:59 GMT","max_age":7200,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"deep_session=eyJpdiI6Ik54ekhqckZYR01yd3poM0R0RXZmdUE9PSIsInZhbHVlIjoiOUtZclpLYnVJaThKTnlhRkpQS05tZ2lMRWY2NzI3WE9ZYWRXN2tHK0RqZDhGN2hER1hVMTVXYWVGM1IwUUdPWVc1cThGZ2JHS1NBYXVsaVpoc1hTU2YrMERISEUwZFNJdUtvSzExbVFBUVRGSWhWWUhWaTN6TCt0TzB3dXBweXQiLCJtYWMiOiJiN2QzNzA1YTU5N2U1YzQxNGRiNmFkMmQ5M2EwNTAxM2EyYjRjNWI3Mjg5MDI2NDYzYTg5OGRhYWFkNTEzNjc4In0%3D; expires=Fri, 04-Sep-2026 17:59:59 GMT; Max-Age=7200; path=/; httponly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88737,"size_decoded":13653,"mime_type":"application/json","magic":"JSON text data","md5":"ce13c76fcb7ada2c4045d64d34450a63","sha1":"69a2ef361e31cbc80fcc6aa86c9c12a959c870ae","sha256":"150596d69e0236b6232a20b9f126a0362c52ee5551880f49788e533974473aa6","sha512":"e9c024c8d455dbf17ad5219a8c6cebb611f6e389aacd66352127c14123147ac519489e1095f9af282f4005eab0f2a27e577d7a7b3a230c884cc924f1562d247a","ssdeep":"1536:104F1G5Kdt52hbYaQzsX+FhAFUXeTECczknKnNei/9trWxp291nctPsKuFXzw:104rG5Kn52B/SkqyUe3conKnNei/9try","tlshash":"58837392323c4db9c5f39d81a7efb79510bd7577c8c98b4cdbdc4a9b02ca68b2506812","first_seen":"2026-09-04T16:00:36.302213Z","last_seen":"2026-09-04T16:00:36.302213Z","times_seen":1,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"api.btc-boxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/image/it.png","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.883Z","timestamp":1788537598883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/image/it.png HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f392b-544\"\r\nexpires: Sun, 04 Oct 2026 15:41:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1102\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=05%2BoJxyH%2FbJHoYV97rdCfrpZPho1aoUh%2Bri7%2BWGkjch%2FcJ9B2Of0Z%2B4Nk4HKQDdTGNDYcPbtdiCzBwB4YfOfpON2VcvSlyw3ekgytid38JJfGdL4JWuG14IfVsW%2Fpd4%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a35e34590951b512-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1348,"size_decoded":1133,"mime_type":"image/png","magic":"PNG image data, 1200 x 800, 2-bit colormap, non-interlaced","md5":"158a375a73164b3d4b335f170799de37","sha1":"424f7c1eca85524e33f67827a44f19a4bc53f591","sha256":"d16131039a5ca5a76f879c3ac5ac5dee7a1ec257a7ef7973df33794aa41940f3","sha512":"b6aa00158628459be46eaf7cee900960a1f4c3a61ff45fa09ae4a2ebd44fbbc7f0fde756b5efc59f5f330ccf0871599cfcee7f5ae03d43237b61e4f716b127d2","ssdeep":"","tlshash":"17216dc15174b990b40d023f67235e40a96d26ceefeb4639ec1af98b0fd8a445176b8e","first_seen":"2025-08-06T14:47:16.577041Z","last_seen":"2026-09-04T16:00:36.303513Z","times_seen":6,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/image/legal_card.png","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.893Z","timestamp":1788537598893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/image/legal_card.png HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f392b-dea\"\r\nexpires: Sun, 04 Oct 2026 15:41:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1102\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uA4GwL8MDH0kMfAX6YcqOdlekMUbGF0yKIHjrQ1fR5kbAQSGYw7sS0o7TO3VO8as0%2F4cLs9ibxRYJg%2Bllj%2BTb85CFZnrQKlKqVeSZLeWeJAlFeCla1%2BP%2BjpSHp7vBzQ%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a35e34591952b512-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3562,"size_decoded":4141,"mime_type":"image/png","magic":"PNG image data, 100 x 77, 8-bit/color RGBA, non-interlaced","md5":"dc5c5ef1ed04b3547563fb87b04e071b","sha1":"b06904c5dd8a276d1de99f92c2a17a28adc61ad1","sha256":"33ab657d3951cf30513d739794db93480937d83825e12869a812626b9f5c0cf1","sha512":"41ab4f522f1f0a264757fc41bf45ce1eecbdadeb1bd3871e81e4c7cfe65855db2a1c2ec5d7fb8c2c4d7a588bf69319911d82b30eab8aacddd9d7930c859d6e9a","ssdeep":"","tlshash":"ce713d8af7d1e982d937da005c7d9127a61b44c0a5e1d0b9d5df80a2c6e6abb191a0c2","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-09-04T16:00:36.304295Z","times_seen":181,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/footer/gang1.png","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.895Z","timestamp":1788537598895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/footer/gang1.png HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f392b-58a\"\r\nexpires: Sun, 04 Oct 2026 15:41:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1102\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jv%2Bd8VEEXOV0w9H5Y1yFnYy2D2BUD9W6ixtgxhW5aGlYEFRJMvy4KoDyKf3321c%2BaaRLGqaBBOzcS5Y5g5b5Vxhni5yJZ6tWCz%2BmpvEurhTSsNsmqCsJjILPE8HIg0U%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a35e34591953b512-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1418,"size_decoded":1941,"mime_type":"image/png","magic":"PNG image data, 78 x 78, 8-bit/color RGBA, non-interlaced","md5":"383d7dda8fc6e7f3e92114d5f00f2184","sha1":"072c1ef4b4bf51f6200ef91b1921e40d86e12158","sha256":"8e485382fdd4377d5b4f7a6afcfbcc62f2b76e877e32c4f51c238891fcc78e54","sha512":"447aaae2126c0b1de9c76264736b071010f173a7ea2a46b68466885219f6ef5deca953a9a95242fb7e4a8be4b981ab95e1c30ebc435b196a7163773c2c8f0450","ssdeep":"","tlshash":"a821d80ad5805b419922d1612cf25037ab338da195e0a01dbec5dc9f1c3d1f8c6447f3","first_seen":"2023-09-10T17:47:20Z","last_seen":"2026-09-04T16:00:36.304891Z","times_seen":154,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.btc-boxx.com/api/market/currency_matches","fqdn":"api.btc-boxx.com","domain":"btc-boxx.com","tld":"com"},"ip":{"addr":"104.21.54.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.831Z","timestamp":1788537598831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:32:17 GMT","end":"Wed, 11 Nov 2026 14:29:40 GMT"},"fingerprint":{"sha1":"4A:05:76:C2:25:25:02:AE:79:07:D9:57:94:55:33:77:A3:52:7B:E7","sha256":"BA:B7:F3:2B:66:81:AA:90:1D:92:63:D7:F3:3D:26:11:B9:1A:09:44:04:C9:3D:B9:F9:B6:DC:79:11:0D:36:B0"}}},"request":{"raw":"OPTIONS /api/market/currency_matches HTTP/1.1\r\nHost: api.btc-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,x-requested-with\r\nReferer: https://deai-btc.com/\r\nOrigin: https://deai-btc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, authorization, lang\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ndate: Fri, 04 Sep 2026 15:59:59 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lFSLLCuh8o4LDBghhSIlXbn2ZBtQPrXum3nB9kCktszCNdZlK04agHKCK%2B3ROv44nG1yglkGdEl6t%2BAV7P4bmICuvGPReD2UW9h7W8x%2BL%2BPE2I9FEsxzNGWtC91ioIRBYlXV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a35e3458eee8b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":849,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":704,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":671,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"api.btc-boxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://api.btc-boxx.com/ws","fqdn":"api.btc-boxx.com","domain":"btc-boxx.com","tld":"com"},"ip":{"addr":"104.21.54.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.834Z","timestamp":1788537598834,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:32:17 GMT","end":"Wed, 11 Nov 2026 14:29:40 GMT"},"fingerprint":{"sha1":"4A:05:76:C2:25:25:02:AE:79:07:D9:57:94:55:33:77:A3:52:7B:E7","sha256":"BA:B7:F3:2B:66:81:AA:90:1D:92:63:D7:F3:3D:26:11:B9:1A:09:44:04:C9:3D:B9:F9:B6:DC:79:11:0D:36:B0"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: api.btc-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://deai-btc.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: t3q9uPjMhzHRyaPetoszig==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 04 Sep 2026 16:00:02 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: P4KVEfu2FVBNvl9ROXh24LGeM+Y=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gUkpJL0uH%2FJpFvUSQaWbfjRRZpYf7FAA%2BCfKyOtas5w%2FCjiLaA%2FKY2zDqUPsgwwCK85cmkNdKkCb%2BK74iMlTlNPQbJ8%2Bk73Asq5BOct%2Brtrx5ZI25JgPke%2BPJVAkKOExdldt\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a35e346cbe043181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":630,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":6922,"timings":{"blocked":0,"dns":3180,"connect":3166,"send":0,"wait":562,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.btc-boxx.com/api/news/list?category_id=2","fqdn":"api.btc-boxx.com","domain":"btc-boxx.com","tld":"com"},"ip":{"addr":"104.21.54.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.816Z","timestamp":1788537598816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:32:17 GMT","end":"Wed, 11 Nov 2026 14:29:40 GMT"},"fingerprint":{"sha1":"4A:05:76:C2:25:25:02:AE:79:07:D9:57:94:55:33:77:A3:52:7B:E7","sha256":"BA:B7:F3:2B:66:81:AA:90:1D:92:63:D7:F3:3D:26:11:B9:1A:09:44:04:C9:3D:B9:F9:B6:DC:79:11:0D:36:B0"}}},"request":{"raw":"GET /api/news/list?category_id=2 HTTP/1.1\r\nHost: api.btc-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: application/x-www-form-urlencoded\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nOrigin: https://deai-btc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, authorization, lang\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: *\r\naccess-control-expose-headers: *\r\ncache-control: no-cache, private\r\ndate: Fri, 04 Sep 2026 15:59:59 GMT\r\nset-cookie: deep_session=eyJpdiI6IllSR1hNSmlwREY1OXY3TnlRR0V2UFE9PSIsInZhbHVlIjoiaHNuMXM2Z3V2ekJzNXpJVzhZbFhcL3ZoV3FiSDdJR1p1NmtCMFZpS1FyeEFiY3R5ZUgwd0VmVmpYb3JKM1ZPdkVXK1pNS0V3YnN5cWRsdk5RTDk2SjZvM05VVXN3WWZZb08wVFhuZWF5ek1PWWQ5b0lFXC9YRXlUclNxa0pzSFgwSCIsIm1hYyI6IjU5YjFjMDdlOTcyZTgzYjg2ODQ3YTRmZTE0ZDBiOGIyMDc2MjA3Yjc4NDkxMTE1ZTk5ZmUyNmMzMjM0NjVhOTIifQ%3D%3D; expires=Fri, 04-Sep-2026 17:59:59 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hitFZA5EZDwutmaoAsudAHUp9pyqB4LUItojiUR5xMhHo8jLm21giWUbibQcuun%2FrJLKvx4cIiOGRLUsyOZKNqVYkBUy8gQ7222lmIAY3DjEkpBbZqbDTJhie86MvSVqwFr9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e345d2f55b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"deep_session","value":"eyJpdiI6IllSR1hNSmlwREY1OXY3TnlRR0V2UFE9PSIsInZhbHVlIjoiaHNuMXM2Z3V2ekJzNXpJVzhZbFhcL3ZoV3FiSDdJR1p1NmtCMFZpS1FyeEFiY3R5ZUgwd0VmVmpYb3JKM1ZPdkVXK1pNS0V3YnN5cWRsdk5RTDk2SjZvM05VVXN3WWZZb08wVFhuZWF5ek1PWWQ5b0lFXC9YRXlUclNxa0pzSFgwSCIsIm1hYyI6IjU5YjFjMDdlOTcyZTgzYjg2ODQ3YTRmZTE0ZDBiOGIyMDc2MjA3Yjc4NDkxMTE1ZTk5ZmUyNmMzMjM0NjVhOTIifQ%3D%3D","quoted":false,"path":"/","expires":"2026-09-04T17:59:59Z","raw_expires":"Fri, 04-Sep-2026 17:59:59 GMT","max_age":7200,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"deep_session=eyJpdiI6IllSR1hNSmlwREY1OXY3TnlRR0V2UFE9PSIsInZhbHVlIjoiaHNuMXM2Z3V2ekJzNXpJVzhZbFhcL3ZoV3FiSDdJR1p1NmtCMFZpS1FyeEFiY3R5ZUgwd0VmVmpYb3JKM1ZPdkVXK1pNS0V3YnN5cWRsdk5RTDk2SjZvM05VVXN3WWZZb08wVFhuZWF5ek1PWWQ5b0lFXC9YRXlUclNxa0pzSFgwSCIsIm1hYyI6IjU5YjFjMDdlOTcyZTgzYjg2ODQ3YTRmZTE0ZDBiOGIyMDc2MjA3Yjc4NDkxMTE1ZTk5ZmUyNmMzMjM0NjVhOTIifQ%3D%3D; expires=Fri, 04-Sep-2026 17:59:59 GMT; Max-Age=7200; path=/; httponly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2274,"size_decoded":1934,"mime_type":"application/json","magic":"JSON text data","md5":"4162b269f299dc7e4d8a823da3bfc2da","sha1":"91cb7887104dec82a6b149479b99da4949e230ca","sha256":"aee4091863c5bec2a13f5c59acd6eb3378797146ef6a22db6ee7fc341c83f69c","sha512":"a6697e9c89db44ce808192ae1e2eed498dee59c2cc1786ae74616536bdbf9e9f9e60e35973915fad4ee510754ac6b4433f6cb07cee2ce1a05f2b85adeddab755","ssdeep":"","tlshash":"00415cb93f6c48b9c6b551c14c97bd8be4ee3a476f825df1bbd4cc5c80984e1040b195","first_seen":"2026-09-04T15:42:14.178804Z","last_seen":"2026-09-04T16:00:36.305665Z","times_seen":2,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"api.btc-boxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.btc-boxx.com/api/kefu/service","fqdn":"api.btc-boxx.com","domain":"btc-boxx.com","tld":"com"},"ip":{"addr":"104.21.54.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.824Z","timestamp":1788537598824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:32:17 GMT","end":"Wed, 11 Nov 2026 14:29:40 GMT"},"fingerprint":{"sha1":"4A:05:76:C2:25:25:02:AE:79:07:D9:57:94:55:33:77:A3:52:7B:E7","sha256":"BA:B7:F3:2B:66:81:AA:90:1D:92:63:D7:F3:3D:26:11:B9:1A:09:44:04:C9:3D:B9:F9:B6:DC:79:11:0D:36:B0"}}},"request":{"raw":"GET /api/kefu/service HTTP/1.1\r\nHost: api.btc-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: application/x-www-form-urlencoded\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nOrigin: https://deai-btc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, authorization, lang\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-methods: *\r\naccess-control-expose-headers: *\r\ncache-control: no-cache, private\r\ndate: Fri, 04 Sep 2026 15:59:59 GMT\r\nset-cookie: deep_session=eyJpdiI6IkpTOFlvRW1nbGRjdXZtVjUrVHBNS3c9PSIsInZhbHVlIjoiYUFvV0FBcmJvWGF4Q3B3Z3hEeDhlVHR5bUgxT3pJQ044R0RGdzJ2Tnl2NXdMN0tiS2tvc2dhUHpXa2lhckswVlRXR0Vza0M3Y0xJMEpDS1pKUXpSblN3MUhuTm1UdXBEbCsyYVdWSWdaUjY1RFZVWUYzdDVOUWpERnNTSWkrMkMiLCJtYWMiOiI1NDQyNzhiZTU1YmRjMTMxZWEyMGE1YmVkY2FiNDYyNmRhZDg0ZTBkMmNjYTEyNWRkNGI5ODdlNmE5OWViZWUzIn0%3D; expires=Fri, 04-Sep-2026 17:59:59 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JPyK1wmSZZKdKiHPgdaHj2EzGmQnCen5QpvD86a41nkn8w%2B10dF1ZmRtpu%2BErE%2BVFhkjSQwS5W%2Bk0xo2yHiLZm8pGHZBLhtO1fIqU9T7xAAgXvbz1U5O4tJ0NDwmJ8X1kF7j\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e345d1f52b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"deep_session","value":"eyJpdiI6IkpTOFlvRW1nbGRjdXZtVjUrVHBNS3c9PSIsInZhbHVlIjoiYUFvV0FBcmJvWGF4Q3B3Z3hEeDhlVHR5bUgxT3pJQ044R0RGdzJ2Tnl2NXdMN0tiS2tvc2dhUHpXa2lhckswVlRXR0Vza0M3Y0xJMEpDS1pKUXpSblN3MUhuTm1UdXBEbCsyYVdWSWdaUjY1RFZVWUYzdDVOUWpERnNTSWkrMkMiLCJtYWMiOiI1NDQyNzhiZTU1YmRjMTMxZWEyMGE1YmVkY2FiNDYyNmRhZDg0ZTBkMmNjYTEyNWRkNGI5ODdlNmE5OWViZWUzIn0%3D","quoted":false,"path":"/","expires":"2026-09-04T17:59:59Z","raw_expires":"Fri, 04-Sep-2026 17:59:59 GMT","max_age":7200,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"deep_session=eyJpdiI6IkpTOFlvRW1nbGRjdXZtVjUrVHBNS3c9PSIsInZhbHVlIjoiYUFvV0FBcmJvWGF4Q3B3Z3hEeDhlVHR5bUgxT3pJQ044R0RGdzJ2Tnl2NXdMN0tiS2tvc2dhUHpXa2lhckswVlRXR0Vza0M3Y0xJMEpDS1pKUXpSblN3MUhuTm1UdXBEbCsyYVdWSWdaUjY1RFZVWUYzdDVOUWpERnNTSWkrMkMiLCJtYWMiOiI1NDQyNzhiZTU1YmRjMTMxZWEyMGE1YmVkY2FiNDYyNmRhZDg0ZTBkMmNjYTEyNWRkNGI5ODdlNmE5OWViZWUzIn0%3D; expires=Fri, 04-Sep-2026 17:59:59 GMT; Max-Age=7200; path=/; httponly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58,"size_decoded":1426,"mime_type":"application/json","magic":"JSON text data","md5":"10d801e4c8cde745700b8f4ac035c6de","sha1":"93162dc3855931f50cd1f0153117d47d5e8c6b54","sha256":"7ce15f7b7ab537f3e3eae98bc85ee0b18f9749bcd3be1cf4ce047b8191470f0b","sha512":"785116bcc2e32dcb3c47c0d8e0ecb67c6bfc2fb5e67c01e5e5f334db43f8fcb69fd8e355d26a0fa5bf8968b3b8e3b937c3a2d592355932856f04da94ad0612b3","ssdeep":"","tlshash":"aca00293276e5702495762c8380c1656406e66537c6593112d4d5e3441285e459a6839","first_seen":"2026-09-04T15:42:14.172516Z","last_seen":"2026-09-04T16:00:36.30655Z","times_seen":2,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"api.btc-boxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.btc-boxx.com/api/news/list?category_id=3","fqdn":"api.btc-boxx.com","domain":"btc-boxx.com","tld":"com"},"ip":{"addr":"104.21.54.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.827Z","timestamp":1788537598827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:32:17 GMT","end":"Wed, 11 Nov 2026 14:29:40 GMT"},"fingerprint":{"sha1":"4A:05:76:C2:25:25:02:AE:79:07:D9:57:94:55:33:77:A3:52:7B:E7","sha256":"BA:B7:F3:2B:66:81:AA:90:1D:92:63:D7:F3:3D:26:11:B9:1A:09:44:04:C9:3D:B9:F9:B6:DC:79:11:0D:36:B0"}}},"request":{"raw":"OPTIONS /api/news/list?category_id=3 HTTP/1.1\r\nHost: api.btc-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,x-requested-with\r\nReferer: https://deai-btc.com/\r\nOrigin: https://deai-btc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, authorization, lang\r\nallow: GET,HEAD\r\ncache-control: no-cache, private\r\ndate: Fri, 04 Sep 2026 15:59:59 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qcG6gmqL%2B9sZQO8vigb9z5%2FO03B1VfnnIjX3lC0S5Or%2B%2B6KvspZ16v0zzCeSx9Nr%2BM1A1lQGtkQXYoslir7oV%2F%2F%2B1pweb8ofiRPcfua%2BrxpuMlIylB1WCilCrd7%2F%2B0HsGlU%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a35e3458eee5b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":865,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":664,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":630,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"api.btc-boxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/image/en.png","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.865Z","timestamp":1788537598865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/image/en.png HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f392b-740\"\r\nexpires: Sun, 04 Oct 2026 15:41:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1102\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0zG916%2BbxFmJxBXHChEbbw3dXoKQqhIJj6Q%2BIDitpkvrWUcQvkvP%2F6B9koc%2B5gxnm5aM0wL%2FoklVOe7sJaXticHLAvs3JLLmZHiaBPg4pJ%2FA1kSPmeYVQTNQdGqbv6w%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a35e3458e946b512-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1856,"size_decoded":2713,"mime_type":"image/png","magic":"PNG image data, 49 x 32, 8-bit/color RGBA, non-interlaced","md5":"19e8aa640b1d129c94e299dfd580f210","sha1":"ccfa030c16120a11d224fa1ba72afd55f0776523","sha256":"7385aee2de7d89a525b33e6ff1e8c1246de9234fcc7346f5877ee7d3301f8ca1","sha512":"6ca9e3f44d4ce8a0f7734c8f814138fe54c3224f08905a6e0634f36f1c4de6ecef43281df8a7b29f473300a1096565b148ced5e51fb23b050457c63714af11c3","ssdeep":"","tlshash":"e4311bb469a26052fa5e2ad4be1045df4ef89c0605d89251e60645e13c9eef19f0c437","first_seen":"2023-05-06T18:37:16Z","last_seen":"2026-09-04T16:00:36.307279Z","times_seen":476,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/image/th.png","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.875Z","timestamp":1788537598875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/image/th.png HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f392b-129b\"\r\nexpires: Sun, 04 Oct 2026 15:41:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1102\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t4IsTJYhS8bpMOAanQJLpMPNDHwiy7ybYckJycN3Kz4HXadmvQuu5Uy7T6zOujF17DJzMTI3kC5vJX75srd%2BHxTRBl8nThoAE78NTHb5lK4wylyC%2F0CiuYGM%2BUI0vzw%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a35e3458f94db512-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4763,"size_decoded":3557,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75\", baseline, precision 8, 300x200, components 3","md5":"582a3e051cf365d314e6344a92ea64e1","sha1":"005fc2822d8607fa66a3222b0ecfb1292649ff9c","sha256":"b0648d14f5dadee00bdc6e416033be7b0ffd606f014db1542f9f5b95fc180bf2","sha512":"880f3dbc7067b20ce67270799f984a597e0d4c8a9093b0e88324e1d7d961aa7bb495ff4a24bab85e8f749b3b7c23cd0908777d8e550c89970be35090cb4e9261","ssdeep":"96:Pc35zNiJNofo/fhwYp7K8FP6FP6cZYmVvMrMKF4T7rYr8OKpFQFzTaSRR9hppppK:EtQyfQfhZhFP6FP6cZzMrMKF4T7rYr8H","tlshash":"0aa1e8a4b783fc30e114d2709b3e65ba616927b0e8ded84d5a73f45ccb6b1c8a94c58c","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-09-04T16:00:36.308336Z","times_seen":34,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/image/kr.png","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.879Z","timestamp":1788537598879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/image/kr.png HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f392b-30f7\"\r\nexpires: Sun, 04 Oct 2026 15:41:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1102\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rKkZU0ouwJ5UfFD%2B1RQkN5ODNIDdS9VjY3zkva8VVhk1Kd6UWwTLEpX%2Fhy8O9Fj0qHmDzeRb35dhOxbT6qxK8XqL8NoZWgBsGn66YJv7nUPYKv1jN16B%2FzlrrobHqLg%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a35e3459094eb512-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12535,"size_decoded":12535,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x333, components 3","md5":"9de5daf95f29b6691582603789962290","sha1":"82b86821e7583d4590a35a8c6878ef92180ed997","sha256":"551289184f2b338cf2f6c3ea32467c02e49813e8ae77447f83a0cd67a0456a1d","sha512":"d339aab660bdda345af924a4332a4ab518cbddf09912a32028b990487e9bd31a91e6bd2b350d8e7406d60c31e8e9fbd105f83849c7a64e4503d789d77bb10c1d","ssdeep":"192:mJybbbbbbbbbbbbbbbbbbCbbbbbsNRoDRk9RSzqHGbbboQem0R+OWIaCFiFF1Smr:Co0kbLQmhoMmtLO+jMPrJuleNVLUgta","tlshash":"954229435d52e83b660b4a351a51712c3743005157a782797a38acffe76eebc2dcf868","first_seen":"2023-05-17T21:14:30Z","last_seen":"2026-09-04T16:00:36.309071Z","times_seen":76,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.btc-boxx.com/uploads/20250730/396fc4d7e09e94584be5a6fd4e39febf.jpg","fqdn":"api.btc-boxx.com","domain":"btc-boxx.com","tld":"com"},"ip":{"addr":"104.21.54.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:59.816Z","timestamp":1788537599816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:32:17 GMT","end":"Wed, 11 Nov 2026 14:29:40 GMT"},"fingerprint":{"sha1":"4A:05:76:C2:25:25:02:AE:79:07:D9:57:94:55:33:77:A3:52:7B:E7","sha256":"BA:B7:F3:2B:66:81:AA:90:1D:92:63:D7:F3:3D:26:11:B9:1A:09:44:04:C9:3D:B9:F9:B6:DC:79:11:0D:36:B0"}}},"request":{"raw":"GET /uploads/20250730/396fc4d7e09e94584be5a6fd4e39febf.jpg HTTP/1.1\r\nHost: api.btc-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:00:00 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7hNt6fTiJnIEEELKvmUviT7lgOSvWGbYBy87jTVXpjE6ZA0GyGx4OWCJ7LyUMzw8O6F%2FZuSrx5LB2ZWfoLN5ReELF7aEMDbhqRC%2BtITD2D5QvxfEQ51lNNoPHOc2cXX70O3j\"}]}\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a35e345edf6db4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"api.btc-boxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"api.btc-boxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-04T15:59:57.291Z","timestamp":1788537597291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QWmPsn0DxgCvQhatngIj9%2BMCipl2DYZNPWr3G27fVrsuh18uWU3ucqHNzO4kop7w8qt3P59SMr2p0n0e9wOWIQvLU4UH3OQ%2B3BDfbT3mT9uVFhtsFGmgR%2BewQyfjH9c%3D\"}]}\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35e344f48c6b512-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1204,"size_decoded":1438,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"ddd5aeb70fd8dc5ad058c6929b576568","sha1":"1d239208805c62fd82fcfa6f290cbb874d2a3ab7","sha256":"ec507b5421f9743af1b9a91ed9822cbe3a1b7b0e07b6a27c8a33d4b20c94c294","sha512":"75ba7547b7f3cbaa6885d26eeeafe6b091da532cbd04a76ee93837966827af35289ae044b8dbad09d8c2a9728206c3874d2ea13b809f6345817d462efa9035ca","ssdeep":"","tlshash":"2f2137c69861e44e2330575171a5b52fd956097f9950dc117cdc1ead0bf0b8cc55fc0c","first_seen":"2026-09-04T15:42:14.179891Z","last_seen":"2026-09-04T16:00:36.309651Z","times_seen":2,"resource_available":false,"data":null}},"time_used":802,"timings":{"blocked":-1,"dns":5,"connect":18,"send":0,"wait":779,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/index.2da1efab.css","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.483Z","timestamp":1788537598483,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/index.2da1efab.css HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f392b-178f9\"\r\nexpires: Sat, 05 Sep 2026 03:41:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1105\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c4BKLajlGIJaC103Q82%2B%2BE3gziMW0KUlnPCtGXBazfwsqawa35353h8fm%2B6zXCdxHWAD6%2Fex7Joz4l932C5VFNTFG6Cr5XfcY8o5GdyLFN%2BVxI0iaYr7k7YkJdwon6U%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a35e34568912b512-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96505,"size_decoded":27315,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"73ae6c583d02d78f81e3f18860a2899a","sha1":"07df9233fc11dddc34fbf519b891d40b2ac29c0f","sha256":"e97de9a247807f12d74101e9f736250b2410be4e1ed3d17ed875e4b08cf66c83","sha512":"da54ba9dbe06d8d763f3cfd64cf5babb54e761e3208c7a2f23e845290c48db8c115bb86c24262cd6c9a96ff2e51674c6d86439e1814baf2de7980f5c06349921","ssdeep":"1536:OlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nKhlvbc:VApuK7hmVrS1Wu3iG41nKPI","tlshash":"1893f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2024-01-02T00:07:11Z","last_seen":"2026-09-04T16:00:36.310259Z","times_seen":6481,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/js/index.8fa92f89.js","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.488Z","timestamp":1788537598488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/js/index.8fa92f89.js HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f392b-445ce\"\r\nexpires: Sat, 05 Sep 2026 03:41:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1105\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QpV5yZyTU1%2BCTDJu4z4CLeZrdUEZaqh6YsDIrVZJpw7ve%2B74AG5Lvu71iyFNx61osq2WMwRX8qFGVaGUqPtbhZQmZNLxDzDhgLZurw7UvvTbzM0ZA9fN2OE4UcaPe0w%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a35e34569915b512-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":280014,"size_decoded":71428,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57982), with no line terminators","md5":"da3816c458f770cd4d18414d0cf441ed","sha1":"ce17631f7ab6e4e23f7e3e20240376fd6453cf1f","sha256":"a344fd604b40c68bd4607f3b967008f4b082ebdcdd5df9ca10190882c37ccc45","sha512":"7ed76ba8c1aab6b0201245c70516646e154cdac96ed104a686ce69f7fa7d7049d70a4e81c9aa8722dcb46d494af3ed7720e5a08a97d0361acc5124460de74edb","ssdeep":"6144:PLxdRKSSgVRfu9ZSHenflAoG/L+Ar/Rm62PoOfuTteZ/Fegbkt:dKqRfu9A+nflAoG/L+Ar/RmjwOfwKK","tlshash":"d9546e77f98a69cc1456b80fe04ff70a31552cb6be8960c0e7ec9da45be4649c232f64","first_seen":"2026-09-04T15:42:14.182077Z","last_seen":"2026-09-04T16:00:36.310763Z","times_seen":2,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/image/account_about_image.png","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.905Z","timestamp":1788537598905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/image/account_about_image.png HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f392b-85b\"\r\nexpires: Sun, 04 Oct 2026 15:41:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1103\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uZYNw%2BMh4rsA6AvcnemQbsm6hSdxE4liyNbIgbNQ74%2BEeHUe5sDImUO3wUApkYgaobw1PoI2rHBd2DkHTM3o7Unlb7tSMl1BFTADZJ%2BGOmebPUBmPGH5k4lchrVyLXg%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a35e3459295ab512-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2139,"size_decoded":2704,"mime_type":"image/png","magic":"PNG image data, 51 x 52, 8-bit/color RGBA, non-interlaced","md5":"2bf44584d1f172ff001d3495090b4c60","sha1":"a3a87c174a56a39d0422b8e1a1ce0669b5f7d947","sha256":"143465d0af689c99df324081dc2891bb612f179939c618e0ad5bdb1ba42f2036","sha512":"fcb026da62e1376eff873f6581db8651b91e992b732888e82ef162c076d3145550910aeca97e0a190e9a90befe636b17beb7ff998c9617991d9368214b86f875","ssdeep":"","tlshash":"bc41d76de75928204f4dddc018e2572ba87a088456f8d5265bffcc176d387aac02bbc7","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-09-04T16:00:36.311343Z","times_seen":218,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T16:00:01.610Z","timestamp":1788537601610,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200\u0026icon_names=arrow_back_ios","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.485Z","timestamp":1788537598485,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200\u0026icon_names=arrow_back_ios HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 04 Sep 2026 15:59:58 GMT\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":640,"size_decoded":1087,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"baa80f9cac655e75d0d3e6bdf317a336","sha1":"f30ae14ba54edb5c3efc77cf6b6e7078f28a54fb","sha256":"e0ca1c6d01d87479afd88cde3a80fc96451a4568c7dbc9b2f8da6883e1507cd3","sha512":"35121f8fe44bdb5116ee315f3e94692a61b8035a9cf8d451973e7a084330351dc3feffc176c77059f8470524ce1f9c5120f46f59abf266676cc2016e6e371f00","ssdeep":"","tlshash":"71f021686a559845a1540c57330f3b221e19441f794ad8beaf911e0d4efa4b74385b0f","first_seen":"2026-09-04T15:42:14.164343Z","last_seen":"2026-09-04T16:00:36.311855Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":35,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/js/pages-home-home.b8acba5f.js","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.758Z","timestamp":1788537598758,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/js/pages-home-home.b8acba5f.js HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f392b-7110\"\r\nexpires: Sat, 05 Sep 2026 03:41:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1103\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PEkt%2B2kiDwgqJsh%2FX3Q%2FTC8FyUVxOFICZb%2Fuo2RoKe3RSwe0gw16zS6hlgQLEFVD5rcbJngAdNRh1RH83bCEBF%2B%2BGHVKzDTY%2BMoiFcJO3I98ecOpTnFcMhQDlorcGKU%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a35e3458493cb512-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28944,"size_decoded":10163,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28813), with no line terminators","md5":"2b5fb54a06d0e72639dee4d0e96d5a2f","sha1":"cee83817aa22811bcc1884a6d967250af737ca4c","sha256":"746202e7a90f34cead2ade82e18330574439ab8a4c46fbd102e685a7caeb8574","sha512":"76eac1edb805c6dfb46e8a8410ba6701fa7c22fda621ec9dbd4562b31b4d8bdbdbb34fa98c910c59fb5eda1b1b01ef17ce413446e9770b155ebb71cb34fa094e","ssdeep":"384:vc6l9mVt3EisIDr/HIbLThvc91t2Ksl7/xm9sW9jUkSh/W6xLWq4qYTqwqA/:vc6U5sKIbLThvc91IKsl7ZUskYkSp+","tlshash":"aad2b514b983e0ffcd6fc221207b152990326ef1e115e98ad7b8c5c18ed5c89266fa7d","first_seen":"2025-08-06T14:47:16.527404Z","last_seen":"2026-09-04T16:00:36.312451Z","times_seen":6,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/image/zh.png","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.870Z","timestamp":1788537598870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/image/zh.png HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\netag: \"6a7f392b-23e\"\r\nexpires: Sun, 04 Oct 2026 15:41:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1102\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z33dXK%2FLcgk%2FqKfd9%2FEpnHpdD1WeggWVCiPpxl4UpkqloEm9u5H5A9gf%2Bgtidxc%2Bm2I5ureKs5IJ3PMfqjNldktn%2B7uWCYnS0XIdKdNqQP6eg4BGLx8N3H7tn3wNPWQ%3D\"}]}\r\ncf-ray: a35e3458f948b512-OSL\r\ncontent-length: 574\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":574,"size_decoded":1402,"mime_type":"image/png","magic":"PNG image data, 48 x 32, 8-bit/color RGBA, non-interlaced","md5":"09029b827b228c61914d429e5f098372","sha1":"2607dcd4c11f5518ca031ef5f053427ba64bce87","sha256":"d4b56d87fd85cde734c00c125f652f584523cf19d167948bf5c97fde047ed706","sha512":"22d7e76c58ff6d021495f9fb65c695f1a5a9f376d8c190982e0e40d03bf89478c1f9f154ee4739c896cd14cd345e0b5dd7febf1a5f2df46f73745bf6d5d9cdba","ssdeep":"","tlshash":"e4f09606628b7c142f1f9db3e2326430ac3eeccb91ca9436900c146153a0764f734547","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-09-04T16:00:36.313298Z","times_seen":309,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deai-btc.com/static/image/news.png","fqdn":"deai-btc.com","domain":"deai-btc.com","tld":"com"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deai-btc.com/","date":"2026-09-04T15:59:58.897Z","timestamp":1788537598897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deai-btc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 14:43:49 GMT","end":"Thu, 12 Nov 2026 15:42:40 GMT"},"fingerprint":{"sha1":"0B:53:74:93:AC:84:45:46:79:22:97:46:D8:49:16:E6:DC:A7:9C:55","sha256":"C5:CD:00:60:A8:A5:FE:52:B6:F4:82:1B:A5:4E:1B:DA:2D:A2:DB:07:29:E2:02:AF:25:71:89:CC:D9:BE:AA:78"}}},"request":{"raw":"GET /static/image/news.png HTTP/1.1\r\nHost: deai-btc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deai-btc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 15:59:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 14 Aug 2026 15:50:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f392b-1290\"\r\nexpires: Sun, 04 Oct 2026 15:41:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1102\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tC2Dh6IjBxr1xmQ9Go3OWBfKN0wZZa%2BljcB2ckCpAKIZ3qkg%2FVWdB%2BCP8ZQDXQtQ23kyri7bww48xKWfdClCbKKORkjfWWf5VrS8LjY%2FsAiG46rg4nirQqe20zkdyIc%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a35e34592955b512-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4752,"size_decoded":5596,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"c97d16a29867ca698f5a727c1df7f2c4","sha1":"6470daef60d50b052f28c4db9db92c639bb35a23","sha256":"61b497de3e125faa101394e7e78ff3167ce9545a8654499ba67107b17fa922c9","sha512":"629415eaf57f30812b07519105cff4bae6bcb4a539590929b16e2529962e5917a85ecf41790a7626418c7c5623f63b3107606fa3fb6e8aae5df4f40277ce85a7","ssdeep":"96:RuvFte9BTjTSXGuObds8iYvAtPr2H31QM8Bnuy0Bx36JF9ogwA1Td9Pw1v9:MtY9cViq8mtPiX1QMPyUxqJQeTdtQ","tlshash":"21a15d7f893caf1cb5c4416bec297d42686a109597f61b0890e1c856bb91af902cb1bb","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-09-04T16:00:36.313791Z","times_seen":164,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"deai-btc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"deai-btc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}