{"report_id":"cb90e4ad-ab3b-4248-8f6e-cf16a3202127","version":0,"status":"done","tags":[],"date":"2026-08-10T19:05:21Z","url":{"schema":"http","addr":"bitrefilll.info/","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":0,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"bitrefilll.info/","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"title":"Bitrefill - Buy Gift Cards, eSIM \u0026 Airtime with Bitcoin or Crypto - Bitrefill","dom":{"size":5212063,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6033)","md5":"7bc7cb16df2a2d7dcd92cd51abe51c4b","sha1":"fa3ea6f001d3b24c4ec7749aedb0085897a7f829","sha256":"9370e4aa1ccc28d968648b8eb88719db92cf9080a2b0f6eb2bccc3cef1dcc366","sha512":"0740f0ad80c623d9b57e39bc66ec33b2d0f1d532020b087258659f5736feee00a010af13ecc2936cf9cf128bfa5b96e788ce2f0ccef45ea8458050f8629bb8da","ssdeep":"49152:QP7uX3x0842eVOhk10yE9b9oUl3nCBy8dGJyCbavg8apIAzQgCvBGf23i9foWttI:hI","tlshash":"e336d09eb3823075ebb7a594507f264f263e34e3e45488c9f149ccd41a74ea70226b7e","dom_hash":"domhashd717033c1970d5d1abb38c02ab4f4630","first_seen":"2026-08-10T19:05:29.996472Z","last_seen":"2026-08-10T19:05:29.996472Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bitrefilll.info/","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":0,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-14T19:05:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"bitrefilll.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"d2wy8f7a9ursnm.cloudfront.net","ip":{"addr":"143.204.233.66","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2014-05-01T07:51:58Z","last_seen":"2026-08-09T05:04:53.953855Z","alert_count":0,"request_count":1,"received_data":41552,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"www.bitrefill.com","ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-24","domain_rank":608780,"first_seen":"2015-04-02T16:27:03Z","last_seen":"2026-08-10T18:23:57.239536Z","alert_count":0,"request_count":181,"received_data":1051126,"sent_data":88776,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rbgu1rfy.bitrefill.com","ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-24","domain_rank":0,"first_seen":"2025-07-07T17:43:46.566461Z","last_seen":"2026-08-10T18:23:42.895737Z","alert_count":0,"request_count":3,"received_data":1562,"sent_data":1732,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bitrefilll.info","ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":14,"request_count":14,"received_data":5239377,"sent_data":6320,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-08-09T22:53:32.360554Z","alert_count":0,"request_count":2,"received_data":1137,"sent_data":2023,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-09T22:33:32.164957Z","alert_count":0,"request_count":2,"received_data":535818,"sent_data":1374,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bitrefilll.info/scanner/wallet-scanner.js","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"6fb4b6f60f95603ac4de36e305cae6db","sha1":"741b02088612ecfb7a91d55a0d859f03258b9292","sha256":"a7ea556bcbb2ffabffacecc282b68ea0f2808377440a63b9700ce61bc0786e17","sha512":"91880a80355cf438c1ccb744a9ec899a260610bec5e74fa102b294d3bd71e3cae531f9b547bd7da148e368b85a39c3d402743177d12f0838cf8d43af582ae7c4","ssdeep":"192:9gAko4TaANXDRRBiQDC5/UdC7CZ2VUtn/1FFt1QHOREgRR30PbV7g5zZ2/7:CBTFMz","tlshash":"a032428db8e330565423727e8adf9201b17ab403044c9e10bd9c92b46f6917f6a79fec","size":11017,"data":"","first_seen":"2026-08-10T18:23:56.600997Z","last_seen":"2026-08-10T19:05:30.0909Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2wy8f7a9ursnm.cloudfront.net/v6/bugsnag.min.js","fqdn":"d2wy8f7a9ursnm.cloudfront.net","domain":"d2wy8f7a9ursnm.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.233.66","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e63788b8657ac52b3cdbb970e551c2a4","sha1":"2b935f0ad428278fac78be458abda4a9ae42ddb0","sha256":"4ee4197ae3e7bac4347e8443d7e264781c7d154e24d27da0eec14b9d4bfc1d61","sha512":"33965d920f3fe6ba5bc6b32caaad434fa876a94844637df4de3ac898811fb1316d7824beb61bb83a7fb48f9608db96f72518e57224c3fe1a48f9fa6ecfb5b3f0","ssdeep":"768:7qT8GH+Fj4rDWrVbo2GSbH/FnOFiBH/LjYziSGG:O1H+l4rcxLj0","tlshash":"ca03e7ce72d6b4764a636031603f600bb23a5da9345d90b4f220d9e9bcb594d937bf2c","size":40961,"data":"","first_seen":"2023-03-08T14:25:21Z","last_seen":"2026-08-10T19:05:30.12527Z","times_seen":400,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d5534f20d9c380bffa07a1e8397df62","sha1":"d8c99453e94a22794b7f946a06b16017cb8e052a","sha256":"bcc251bf404ab9802ddcded0b24566fbbe2d95506c09b5fef9ea38d0c6ba8fc5","sha512":"03826c21f0bf6c89e4e5089357b49f4513e4ff16ffdaf58227382a5402d5a6cb35ceff1c8233f5f2d5006672a836546bad5857c0f10e71dbf0a8169eb02bb506","ssdeep":"6144:miJV+WuiWBFNUyBVmebVnpSc5JGaE9Q3dpxE0q3w3X6bI9+:m6V+bBTURepEuHJ+","tlshash":"94b4f9ceb3d674669396f478503f01cba57b29e2b49cc89ab189cce02e3455a4127f7c","size":512868,"data":"","first_seen":"2026-08-10T18:23:56.732602Z","last_seen":"2026-08-10T19:05:30.142586Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"887548ad272d1023a1853d212fa04c2b","sha1":"24becf4e622c74c21d46070a1c5b4a1eb1dda90f","sha256":"311bad3d5dbe68ffb4f57691ab696b43085a892ec405940bd0e727f1ad0e17f7","sha512":"e6605ff4a5f7fa8a444c38062f212f43c521abd43f60b1d7ea5ff62bbadb9d7ae49214ae42fc1cce48c1323546010c05017d3fd535b2ab638e7aa058a25bb8eb","ssdeep":"384:fQNfSKZ7HABe89uOtDD2QCH38NS+YJ8ip6GTOBOIfajeGOYJs8q/fvaZLaWs3CFw:fQNaGA1gOtDD250ZMIyiMJs8qXvaE9xH","tlshash":"d3a2c7ceb2d6b0358393685e203f6106e236693934ced590e57ad884dc68b4e42b7f5f","size":21680,"data":"","first_seen":"2026-01-08T23:49:36.906037Z","last_seen":"2026-08-10T19:05:30.14308Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"551e834dee1e26aa7c71543e666d24b1","sha1":"ca5ffbdcad8ef64bd0883dbb741e6b678cd4227f","sha256":"007900cc94e705ed9f84655baa18c88e47ec7e3f561678eec26aa05ca92def8a","sha512":"b232ebc95e162fc0546986ab6c1185a4578d2ce5067fbf1613d7c468c0e90406523fc29450e6545d79db4c9e2b05aec668706dab811fb475983e0b06685b51e8","ssdeep":"6144:4NSNWuiBTNUyBVmebVnpSc5JGaE9Q3dpSnt9q3wBXyd:4NSNuZUReotbFyd","tlshash":"7ba41acdb3d674629392f478903f018ba57a69e2b44cc899f189dce42e3465a4237f7c","size":450808,"data":"","first_seen":"2026-08-10T18:23:56.735579Z","last_seen":"2026-08-10T19:05:30.143606Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"4cebaeca01dcea1271eca8385f56e342","sha1":"b7e4fea64a6302cd01cea14a18320dd5d273c54c","sha256":"6970b8261e7c4c690a0a5c7f9b7f9bdccd7c9c0591e1e3074a8b63c20111a0c0","sha512":"e364e4f43d9f2ba40c0d9fa39c99c2acdece384b5071d7f724e24edbf0363a30a48391d5b1f65fdcbc19128972bd72e333e665d61ebf7739bbee632f3629dc2b","ssdeep":"6144:GNVeuuXK5AWuiq1TNUyBVmebVnpSc5JGaE9Q3dpTzgq3wHXOfQ:GNVeuuXKKHZURe7zK3eQ","tlshash":"d5b408ceb3d674669392f478903f01cb697a24e2b44cd895f189cce42e7469a1223f7d","size":533202,"data":"","first_seen":"2026-08-10T18:23:56.73684Z","last_seen":"2026-08-10T19:05:30.144386Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"7aa7e774551056b44435d195fd03df83","sha1":"fe6615022e902103104b7f807626edeed07862fe","sha256":"18cd244863f2d3305d749abeeeaa9b0538ce6904d445a1397896e7a3a8f437e6","sha512":"1c681e292c363bef4b8aeb6c498f92d4495857b1bc7a89a595c8822aa7555548e58740c4801d2254d4e9eeac3c78c7090386e9afde077e8c64df60dccb549034","ssdeep":"","tlshash":"ec80008a8030ba0080e0000c23032aa3320080208ac2800002aaa023f082e233a88888","size":28,"data":"","first_seen":"2026-08-10T18:23:56.737967Z","last_seen":"2026-08-10T19:05:30.144961Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"48e7101cab1a4ab3e18c70eb0c8f0cad","sha1":"85e775a7f12119ff80b9868e119674dca17c233d","sha256":"d3fa47f1a22bba55e8ccc40301fe4a9117a584d4c3a9d1e92331152442ac065f","sha512":"975e526bbcacbdb8783abbe5f71bd72f82a0dc79b0d4e0307185541d57e28d88a1d3dea389ef26cca9a182b43df66f199ff896084376cacfcb4cf41293f1f6e4","ssdeep":"","tlshash":"454131d8b914143322bb41e776db3e4d270b43243837fac6969d02066dcba87a1e27dd","size":1977,"data":"","first_seen":"2026-08-10T18:23:56.739519Z","last_seen":"2026-08-10T19:05:30.145448Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"77642f2f6ff49adfddd5f45334a9b455","sha1":"cce3db46081ce0e994eaba70eb9d82bda42b09a9","sha256":"e6076fa728fc983c591fffb616cb15d82b629ba204da13995f9721ad7db10c3f","sha512":"35e418830803ca8e8559a7e94bf47c26c0dd765522841f63b1adfa785beaf374850ccb7ce938d507df3bdb2c02211e25eab7d2dbe63ddf275de005d59fd6de76","ssdeep":"","tlshash":"96f0dcbb74122876666a55fa23b476267143160da8060822bcafc8142f5c98b4c22288","size":465,"data":"","first_seen":"2024-08-20T03:23:41.344899Z","last_seen":"2026-08-10T19:05:30.146017Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f7163de8d2d0d60feeab3d9c281a6e5","sha1":"e9ca4e8e01b90136745c6f7b106db77ac35c2cec","sha256":"dbf4bb78bd0a56cad49468640006152621c33d0dedc1f6117009c9d3f12274ee","sha512":"de802bea4c2bc5d65f2afc6f912bc3eaf3cf09902f3dfa9e0984ff19ab476e55996b9767fe1df0e0e009c02f36debcf337a6a32058ec7dc00d81ed8955c95ef4","ssdeep":"","tlshash":"d490028130118600881a5c4b5a2048800538ed6985c240063438cd4081e90944307144","size":46,"data":"","first_seen":"2026-08-10T18:23:56.741348Z","last_seen":"2026-08-10T19:05:30.146511Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa826d800cf474849b3759cb3038884f","sha1":"57beb13321791dc1c7504cb4c6400240b38d5ced","sha256":"fb3d2cc07c449f32ad16a5b0cb94dc715c2fa6bceabd6b4a5c2f3fdb1212e12a","sha512":"5825797807ce5a1bc2ce70d4aa5a9551d4bad10a17ad79f507825e67c76c49f432ef5e43c96658c35611a51c3fdeb1beca90baed83e2f0f1da5b2e6a8671081a","ssdeep":"","tlshash":"e6a002532f841428c19e132a8948d5d80b44cba59d6ec10d6844754374b24604289428","size":66,"data":"","first_seen":"2026-08-10T18:23:56.742658Z","last_seen":"2026-08-10T19:05:30.147049Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"f34ba8d1a940f5f67778ffd030c26eab","sha1":"62c90acc3666ab4a976dd0ef8376e56da5e066d2","sha256":"f371349cf473e4dad23961bae11474ffe287a78be24816cbc3884ee244e2d497","sha512":"b3a48da927a4cb67a3c82059147a5f7f3d7e2b53eb2985568d6323e7ac70e9cb6a1fc82deb27c3ce8e35dc71ac418998acb1f4447b42fb0dc2854381c75aa787","ssdeep":"6144:U9b9oUl3nCBy8XNGJyCbavgUhapIAzcpgCvBGf2f/i9foWttqh5A6UeayNqPhZRD:U9b9oUl3nCBy8XNGJyCbavgUhapIAzcM","tlshash":"3844f95c805d2c39eba101e42c777f1a6cbc21b3d6859de7f0ac5ee190f470b292696b","size":267102,"data":"","first_seen":"2026-08-10T18:23:56.743835Z","last_seen":"2026-08-10T19:05:30.147551Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"0853bb7135c4645bbe02d2251a9f5472","sha1":"57051143513e3a744765ab2eef4ca5a9cda4a2ad","sha256":"b3c781fa4f4d8659c076a53307e8cfb9993568fb156eac0aea11bea44d333cbc","sha512":"039f75dbb9eb50e2f0740e256ddbc41d0ef11d410457f67b3795738f5b8f92fbc914355aecb38a468a259b202eb2747e8056e8c2312f85cc37c47cd4d3287696","ssdeep":"","tlshash":"f37000f0f300000c00300fc300030c0f0c030fc00003c00c00000f00f00003033000cc","size":18,"data":"","first_seen":"2025-07-05T10:40:04.000888Z","last_seen":"2026-08-10T19:05:30.148051Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbgu1rfy.bitrefill.com/integrations?source=%C2%BAw^~)%C3%9Et","fqdn":"rbgu1rfy.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd704719699c2453fd0009eac80cb86e","sha1":"69e9772bca3c433d08bf16a7dc0e848cd158acc1","sha256":"a6e9e1722cffa254dc5061e3d89fc40a4faec0cd7d44819923657d498e8df822","sha512":"9374fb6e51ec60e1bc1a17eaa9757925868b0dc73d45f1c280af691ed66383b553eccd61b906f2e65835e6d03c506b0cbe2c94035f0646ead3c84e385e432f19","ssdeep":"","tlshash":"649004c13011c700401f1c4f4d3040400534dd7d45d300133d1cccc0c1d00d44747140","size":42,"data":"","first_seen":"2023-03-07T01:31:26Z","last_seen":"2026-08-10T19:05:30.015317Z","times_seen":432,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbgu1rfy.bitrefill.com/jpuid?jsonp=RB.jsonPUID","fqdn":"rbgu1rfy.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8722a8d1b462c1504643516f795549d1","sha1":"d9ce1653836e9e51285c0dee7106384952c5cbd5","sha256":"ac00d1313bef1709af45ab760347893a68d8b453438ad97e990d7e50773bb0cc","sha512":"d980b5748888d81c40aaa413bb09d1df196b8e6e08ccd1436dc0443b67fa58b86edd0dbe0ccf7bbde6ef16c50c7011bb8e6305681ae1642ba9637280fa247aa4","ssdeep":"","tlshash":"b6a002041c40557095d9774d5819a142886acfe3e126e62565a99b13e4195524688041","size":67,"data":"","first_seen":"2026-08-10T19:05:29.999246Z","last_seen":"2026-08-10T19:05:29.999246Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/scanner/wallet-overlay.js","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c984f1274050ecf0516c5e839594d0c","sha1":"0ef69c68fe1b250fbf82376cf14a232d4d65d1d0","sha256":"b565e6074a2d93f9c3ee6613d03b75d0a2d76e104f99e73f0b2102aed329ee98","sha512":"43aba363c24b1bd733123929948ad77fd4313d02f6799e50ea8ca794e9ebcba41ea7c2f3c630faf64a114c0fc7ba71a8141f2e9191f36b0f0b524be33343b984","ssdeep":"192:9+WLWEJVIpREOgMBvSSAkfhLo8py5s9XUuZ:0AVIpREOnBvSSvUOZXUuZ","tlshash":"81226639faa3156904a7939d67abd29c312e04036d04ee203b9c979c4f5ceaf14b1bdc","size":10593,"data":"","first_seen":"2026-08-10T18:23:56.719554Z","last_seen":"2026-08-10T19:05:30.014781Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-P5SL845","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"920bfeaf0cd47ba94b7f8c68805033ec","sha1":"737b7325b27a97f2c8596a906fc7039723fcbf59","sha256":"10eff77fa667ce7844e9e6eff33df8e07db9b5a3b3ca07cdf4ab443e2e8330b1","sha512":"99cabf87f9d94298dc97d9aebdf69ccd738a9e9c18cdf302b968a5313fb1c802a6ab2a74f9e4d7201d4b22b9a401b09402a1d813a4b16be3edc76df178ac5a5e","ssdeep":"6144:6NVeuW2X5iZ7i+Q+o/FWDEsoGQ4xOx0fcPbvTEaI3sI6jkd8TS1LQMwkwr:6NVeuW2XY2+o/5urxac8ewr","tlshash":"c6b408ceb3ca74659396f478903f018ba97e24e2b44cd895f089cce42e7465a5223f7d","size":534966,"data":"","first_seen":"2026-08-10T18:23:56.708662Z","last_seen":"2026-08-10T19:05:30.033495Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj80 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[FirstJS:map[configurable:true enumerable:true value:790 writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://bitrefilll.info/","line_number":3134,"column_number":9},{"level":"debug","text":"[bugsnag]Loaded!","filename":"https://d2wy8f7a9ursnm.cloudfront.net/v6/bugsnag.min.js","line_number":1,"column_number":40777}]},"http":[{"url":{"schema":"https","addr":"www.bitrefill.com/assets/toNumber-DlqArtbw.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.295Z","timestamp":1786388687295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/toNumber-DlqArtbw.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af9859dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:24,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1360,"size_decoded":1325,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1314)","md5":"6d88c1636a86b43bcd4c068ac7c7da91","sha1":"f78e31ca66b438252b5c63d2717be6017d4ae5ca","sha256":"7b22d66b0970be74cd612a36a4d410233b35f692eacfe557a79fed51403d4a9a","sha512":"18170ff62a28032faed0f0d49f0b77d1b5dd6cf9bd58a859eaedd29461078c63020321f7af36265e50663b06ba4a1126090f06d1bf719eac832a16e19a946dcc","ssdeep":"","tlshash":"de21fcccb8c6f1a403628e72806f5d15f1ba68f541acbea0e291d1f1ac7285dc922e57","first_seen":"2026-06-11T21:29:59.550607Z","last_seen":"2026-08-10T19:05:29.997463Z","times_seen":5,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/object.omit-CGsdJ1f1.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.321Z","timestamp":1786388687321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/object.omit-CGsdJ1f1.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afb86edfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034448\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:41,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":852,"size_decoded":1158,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (803)","md5":"2c4cb2d7b501d0a1f2be66fb37cbfb01","sha1":"36d61990c003de961dcd8b2e7baf2b0c241fc961","sha256":"6a8f0eedacfda4b2043cceb36d1739a49e1bf0ce45107e97e513e73b2971a8a7","sha512":"a993ff3b17205ef0aff76d8b4df971bf1573d290d2cb73d37a72f3b6edd53cddc59a2346764b898e84b9609f3e1d715c19cb9f7fdca6d01d4c360780ef642bc2","ssdeep":"","tlshash":"1001afc37de2a060622a9995401f8c2ef12691e0789ef145a381d5f0b8f784ed103f2e","first_seen":"2026-08-10T18:23:56.717058Z","last_seen":"2026-08-10T19:05:29.998113Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/Stack-N6v5bZnC.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.329Z","timestamp":1786388687329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/Stack-N6v5bZnC.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afc874dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034448\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:3,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10318,"size_decoded":2800,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (10275)","md5":"abb29c5a8d7f5059952401e019d8824b","sha1":"ac5f869518b40388c04777745f0964f120ed041d","sha256":"5251bf7a846f45b4fd07ba760af39de5ff306bbea287d5b87eb6f0dc2ed70019","sha512":"f5e503760c0c911bf6443753b8d4f51ef4293ec9f0d91bc0659ee3de2356ab1bc3457014084605512b27d1d37aee68dbe8b2e43fa7c00d32f52f12475054c0a6","ssdeep":"192:+mvM/TM8eo+tB7JR86HN7b6fUwTuw8lkIgrLPjWNS38qHqRq2v5keoeqgqbq6WUh:+p/T8xi0+xLUBmtW6ELoFF","tlshash":"6a2237181cf3897e4d9e974828ae7661c3f37cc8d81489d02b8fe9a70586eef1792d44","first_seen":"2026-08-10T18:23:56.580698Z","last_seen":"2026-08-10T19:05:29.998627Z","times_seen":4,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbgu1rfy.bitrefill.com/jpuid?jsonp=RB.jsonPUID","fqdn":"rbgu1rfy.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.608Z","timestamp":1786388688608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbgu1rfy.bitrefill.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 19:17:47 GMT","end":"Mon, 21 Sep 2026 20:17:37 GMT"},"fingerprint":{"sha1":"40:83:E8:0C:D5:2B:D8:A8:26:A8:FA:22:3F:C6:CD:E0:44:AF:E3:81","sha256":"D0:81:77:EE:5D:86:63:53:E7:92:5F:AB:1C:90:D7:9A:7D:A0:35:26:0E:77:BE:8F:A8:17:E4:A3:7D:FF:43:60"}}},"request":{"raw":"GET /jpuid?jsonp=RB.jsonPUID HTTP/1.1\r\nHost: rbgu1rfy.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npriority: u=3,i=?0\r\nset-cookie: rbuid=rbos-ec28ae0b-873c-4e36-8e47-456a54dabbb6; domain=bitrefill.com; path=/;Max-Age=2592000; SameSite=None; Secure\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nvary: accept-encoding\r\ncf-ray: a29144b7c82f0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67,"size_decoded":625,"mime_type":"text/javascript","magic":"ASCII text","md5":"8722a8d1b462c1504643516f795549d1","sha1":"d9ce1653836e9e51285c0dee7106384952c5cbd5","sha256":"ac00d1313bef1709af45ab760347893a68d8b453438ad97e990d7e50773bb0cc","sha512":"d980b5748888d81c40aaa413bb09d1df196b8e6e08ccd1436dc0443b67fa58b86edd0dbe0ccf7bbde6ef16c50c7011bb8e6305681ae1642ba9637280fa247aa4","ssdeep":"","tlshash":"b6a002041c40557095d9774d5819a142886acfe3e126e62565a99b13e4195524688041","first_seen":"2026-08-10T19:05:29.999246Z","last_seen":"2026-08-10T19:05:29.999246Z","times_seen":1,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/LandingFooter-B_mvHeLI.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.534Z","timestamp":1786388688534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/LandingFooter-B_mvHeLI.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: application/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b75b8cdfec-OSL\r\ncf-cache-status: HIT\r\nage: 994529\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: de\r\nlast-modified: Mon, 10 Aug 2026 18:23:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:16,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21930,"size_decoded":8151,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (20622)","md5":"7044240fda46188da3c4c7adca3381a3","sha1":"87108266d223b3d49a1ac81d7a1ccab5ac57259a","sha256":"4798bc47aaf3ee52d1b50d49a821809976e0336351ba7c9dc0f052a82591f2a3","sha512":"e95317ce48132f8289e1b374deee70d797ec994434fa6547fc5f1cf9f5693bd044423f2248d321ce5af5999eb0388f1e736a7a97f3287adfe627567fd1981fe8","ssdeep":"192:EdRsmumzNyisKYnmST+PDpX9wJbW3BDQtp+xSisskNc3B6I42hL5JkO8RziMQqES:EdRstmhyn6tt4WBDa+xSNDpWMjIyL","tlshash":"b9a2c91fb5542bfcf4ca0ee9806f911d772f91549a8984a8bf19683022c69dcf11bfd2","first_seen":"2026-08-10T18:23:56.638542Z","last_seen":"2026-08-10T19:05:30.000171Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/prop-types-Bp_Qa1XW.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.522Z","timestamp":1786388688522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/prop-types-Bp_Qa1XW.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b73b79dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864963\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:12,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":851,"size_decoded":1219,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (803)","md5":"2e85e5f4f3dfac7c7dcd1345448379fe","sha1":"b169ab168dd45d183ee8c75603868c4705ea6291","sha256":"2e946f79d1324e38ffdf890219731d94191d426e1f623c80389a0b1b46f623d1","sha512":"3d7a9a512c0a909839622c8724f42439d963b466a680aa94725666b623b51d7058401b563113bf02600a33c2d6ebff7265f2a7db3a28fbfb65e55bb6b4956796","ssdeep":"","tlshash":"ec015207b690a5b85f020a72c64912e7d152d884ab5e750c70d8c6dc7b2c86c265fb24","first_seen":"2026-08-10T18:23:56.645968Z","last_seen":"2026-08-10T19:05:30.001043Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/defineProperty-DFXm_1Md.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.207Z","timestamp":1786388687207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/defineProperty-DFXm_1Md.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af2826dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034452\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: GXFLNzmCFb:656,t8\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":707,"size_decoded":1075,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (707), with no line terminators","md5":"489a6e8420626ba7812b1b715b5ed17e","sha1":"bd93a298e8ac04a7f152ee151dbf4c783a58ff01","sha256":"c2ae68c1ad7462e777ccd4e1e3f84b3bc07ab81458f0dd0ea042a9e1b4d23afb","sha512":"3b75e2b29df199b8bedd375fccd9afc047f685551d16b647c6c75291f25d66c55181180e1ab1401d1f81709472a9ecf1b4ecaba09e9b75d7735c7ef273e04647","ssdeep":"","tlshash":"ac0110c97081f2328347d635004ff40bf63866a1509f7410f2a8e871bbbb85c8275f0a","first_seen":"2026-03-10T05:23:16.222734Z","last_seen":"2026-08-10T19:05:30.001586Z","times_seen":2702,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":6,"connect":20,"send":0,"wait":28,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/url-p2sLEQGS.js","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.166Z","timestamp":1786388687166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefilll.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 12:59:55 GMT","end":"Tue, 27 Oct 2026 12:59:54 GMT"},"fingerprint":{"sha1":"5E:7E:3B:2D:6A:52:36:1D:0D:AB:E3:B3:E5:4A:D0:A2:71:6D:29:38","sha256":"EC:76:1A:7A:EB:6D:5B:0D:56:5B:44:A3:62:68:DD:68:AF:63:DA:23:03:A5:40:82:6A:AB:33:C5:67:B4:76:ED"}}},"request":{"raw":"GET /url-p2sLEQGS.js HTTP/1.1\r\nHost: bitrefilll.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Jul 2026 12:56:49 GMT\r\netag: W/\"b52-657bf7d1fa35a\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T20:57:30.364837Z","times_seen":17824307,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"bitrefilll.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/star-DeRqut5K.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.314Z","timestamp":1786388687314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/star-DeRqut5K.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\ncf-ray: a29144afb867dfec-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 1034449\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:37,t12\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226,"size_decoded":865,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"0c8bc2a382e4e677045cbb5948090fa2","sha1":"91f707bb69794c3216907f01f4079d174d63f2a0","sha256":"c156483b755bdc2b35cc22dc5eb30ddfd15dba8e575d4d160c877e393a24d270","sha512":"9fa458f42b09f0a33e730494cff6915c56c3c527f48ada44fc0ad6bc57a4057e75cefec0c084aa03554ce63240c3fe968a9ca21a9e308c4ebadaeece90d2827d","ssdeep":"","tlshash":"dcd0a72fdcf05db9e8084deed02f4c5e7b14d05883860120e94c9674a5660d1e565e92","first_seen":"2026-08-10T18:23:56.668586Z","last_seen":"2026-08-10T19:05:30.002683Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/EmptyState-D6qTjUS1.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.389Z","timestamp":1786388687389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/EmptyState-D6qTjUS1.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b02891dfec-OSL\r\ncf-cache-status: HIT\r\nage: 994531\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: de\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:8,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1107,"size_decoded":1160,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1059)","md5":"5ba699c27e6abae955fed2408e58cb3d","sha1":"8ebdbb130c8c2bc1a78e30e01b5058970ebb3531","sha256":"bf4e161f767b50cc343ce7b0a4ceae4f19bcc59f491ad5af6ad47d05c72bc2e0","sha512":"3b7cfc38b3274f1fa65a799ee02ba89d584e65ecdf1624f210eefbfb400e8b7887b817be1b03c7b9bf284b43713625d45360fac83a1eefaf029155f3b2e87cee","ssdeep":"","tlshash":"39119846fa2a65f8b4265c8cc05e824fbf19c1dcd70f8ebab49a113002d14b0f616fd6","first_seen":"2026-08-10T18:23:56.680835Z","last_seen":"2026-08-10T19:05:30.003296Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/constants-CHvX7pyq.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.670Z","timestamp":1786388687670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/constants-CHvX7pyq.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b1e8fddfec-OSL\r\ncf-cache-status: HIT\r\nage: 994529\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: de\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:37,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4958,"size_decoded":2681,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (4911)","md5":"8bda5a36e200ca2a3268909873c73a85","sha1":"13f7b257b85414782ec2c73bc7fb9d7a7ddf8a45","sha256":"4421b1fed60e62f1af8a676e4fa9cbfc9602c013aa64c416844fe167fe5b5b31","sha512":"05822c42ce8be4f8bf48e0dc97706790c956510c6796ecd23d93aaf30ccb5dc93d35e471c462f52080a39a050b9338d0b326a611853fdfb216fbf385be975995","ssdeep":"96:PZ1///FwrH/co4/muySjY7ljTvnSNl0cV9F59ieQEO80R9mRLoygg7:PZ164AuViTSNl0cVziT8k9mvgg7","tlshash":"92a185cbd06c85b7b686b2d4a1102607e07967c4883cc9e8b4946f0c02ee95fe7cfd59","first_seen":"2026-08-10T18:23:56.607177Z","last_seen":"2026-08-10T19:05:30.003788Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/invoice-BDy21LZ5.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.684Z","timestamp":1786388687684,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/invoice-BDy21LZ5.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b20905dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034444\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:38,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7473,"size_decoded":3587,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5537)","md5":"c10a16b03a1d71fedf8857bc9e28f508","sha1":"aa1153a8474c9bacc08989f83a63f77df8082b3d","sha256":"cb7d8a46d9b9070d9e4fff55226fff1cd63835867f2a25912a8cc8ba0f43244b","sha512":"3c849c3a45a73d03068ffc70d43480136ca3cadf2dc2d934cfec4164bd666cb76a084b201ddf29951ff1628d208809ba498c798fa65828a3d5562aa4c0b19e17","ssdeep":"192:6fURomorCX/toTo6CT2TzdUDGntZWNlcyJG5E+apPUQTfL:BkCQvCsUDllcgpUi","tlshash":"bdf13bc977f1f27249e6db61e0bf9343f23c5404e839a040b51588e87b90ca7a4abe18","first_seen":"2026-08-10T18:23:56.659259Z","last_seen":"2026-08-10T19:05:30.004385Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/sui-icon-ZwWR2L2C.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.574Z","timestamp":1786388688574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/sui-icon-ZwWR2L2C.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b79bacdfec-OSL\r\ncf-cache-status: HIT\r\nage: 864963\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:59,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1626,"size_decoded":1565,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1580)","md5":"6e5f7d83edacf2735a0c56011f935dd8","sha1":"f6e09d8718856ec8bf44a6016ca6feb245213602","sha256":"0a728a8c0c258e9bf724de0e3fe56386b3c04336d5c6b600b092de289bb41cfb","sha512":"c42c62989f89d4e342343d7b2a2bd199d1eed26c4a708283a2b58f2e218b33b422c6a065da85a91c5fb61dd7a1517af0a45094f0a728d05d4503fee5fedc31f2","ssdeep":"","tlshash":"0c3114ce6bb10dc4408c8fde6f92d45e7c14c5725ede4915e4681fa83681ce86aa6b83","first_seen":"2026-08-10T18:23:56.528131Z","last_seen":"2026-08-10T19:05:30.005012Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/withTranslation-CT9Mmz6u.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.524Z","timestamp":1786388688524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/withTranslation-CT9Mmz6u.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b74b7bdfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034444\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:47,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":569,"size_decoded":1076,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (516)","md5":"08222ca6725af02710017c074eb0550c","sha1":"74a40319499a9171c9ef80336b1d13abf5bb44e7","sha256":"033a65149a65134b7069b631754956381a2e2297023c63a391f3239a26f0af2e","sha512":"d69f0dcbe0fe06821f2eefd40508a678a863dce5a0c96a19c91ad0001d4f6801d0f8c5f2f77878cbbdac19fe149b63185f27f705d240052a2ef8906af840f448","ssdeep":"","tlshash":"d3f0e10ae4e389a690cf0097857f918172a38c994c39100db40d896c6b325c2c63ab04","first_seen":"2026-08-10T18:23:56.647104Z","last_seen":"2026-08-10T19:05:30.005531Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/PreferencesButton-BCGBJcJQ.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.401Z","timestamp":1786388687401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/PreferencesButton-BCGBJcJQ.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: application/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b03894dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 18:23:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:11,t4\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":963,"size_decoded":1274,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (908)","md5":"e55e4952886844b47f54c1083bd4c1a2","sha1":"de13415a5e28680cc2c8a445267d067328bf6d49","sha256":"c07cf2fd8aeab9bf650bf6b2125593b4fa002a3931863f00e8fb571576987bcb","sha512":"ce994d2ddd5080c461f99ec2dac83d12e105a335c0f1519c744ed45ed4a45abd7d215ca83bc4adc2ed3de611c98e04d37640a1620a79f25cfabb0743d55cec8c","ssdeep":"","tlshash":"7611218be12011fc60394c9ec24e1227b72e92b5e3428e50c49d77a867a08e58c55e47","first_seen":"2026-08-10T18:23:56.660297Z","last_seen":"2026-08-10T19:05:30.006085Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/favicon.ico","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:49.004Z","timestamp":1786388689004,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefilll.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 12:59:55 GMT","end":"Tue, 27 Oct 2026 12:59:54 GMT"},"fingerprint":{"sha1":"5E:7E:3B:2D:6A:52:36:1D:0D:AB:E3:B3:E5:4A:D0:A2:71:6D:29:38","sha256":"EC:76:1A:7A:EB:6D:5B:0D:56:5B:44:A3:62:68:DD:68:AF:63:DA:23:03:A5:40:82:6A:AB:33:C5:67:B4:76:ED"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bitrefilll.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nCookie: rbuid=rbos-ec28ae0b-873c-4e36-8e47-456a54dabbb6; _gcl_au=1.1.1324689728.1786388688\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 19:04:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Jul 2026 12:56:49 GMT\r\netag: W/\"b52-657bf7d1fa35a\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2898,"size_decoded":1633,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-10T19:05:30.006838Z","times_seen":7479,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"bitrefilll.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/string-L_WAgRM_.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.235Z","timestamp":1786388687235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/string-L_WAgRM_.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af382cdfec-OSL\r\ncf-cache-status: HIT\r\nage: 994533\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: de\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: GXFLNzmCFb:655,t9\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":993,"size_decoded":1247,"mime_type":"text/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (947)","md5":"1ef39db3e4a19087755f17cdaed26180","sha1":"7aab62b9a7ceb5c908b54116967bc2f7d683c17b","sha256":"5a2c9a1aa3fc2107d3c8a39af5ac36eb565b035bf62cb7b874c7b2630cace4e3","sha512":"dd7f5d6c5b89b5d63e2efa615c81912859411007022713c07a8be99e353cbd905a56665b86465b77d7a892f9d148bfdac79f1542c9e004ae46aae5811435e521","ssdeep":"","tlshash":"8211c2de73d27677a30234b458b780aae17caad2059d4524f00174d63874034d37bd68","first_seen":"2026-08-10T18:23:56.576559Z","last_seen":"2026-08-10T19:05:30.007469Z","times_seen":4,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/tslib.es6-BUJt3w2S.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.280Z","timestamp":1786388687280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/tslib.es6-BUJt3w2S.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af784fdfec-OSL\r\ncf-cache-status: HIT\r\nage: 994533\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: de\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:15,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11234,"size_decoded":4623,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11187)","md5":"2fc2880665667c1c5ffcf89d8769f029","sha1":"4fe80be1d2787906d751babbe116dbfd5406cfa7","sha256":"a48ae57454ccfa2f52c1934d0d65b8ad6c40df262a33504770cec9e5f50edb8d","sha512":"bbcaae1cd68aa4bbfa5e9dad05f34a980cf647bce4e62b75fe002db0a6bd53129db8f384069afdeacb974d8055fd699a626c97fe6cd640b43ad3032d897e59b8","ssdeep":"192:rR7IwAvffyVkzGRHpM4N67sDH/icavJ7b/Cl4ZTF/Pof+cSdxGGrjipDEnSew1xQ:rRdAvnylRHpMs6IDaB/CmTtfH3KEnJwM","tlshash":"db32b6ddb2d0f0a253a73671c42f984bf3395806a95c64507324f9e1b9b586ec26bf38","first_seen":"2026-08-10T18:23:56.57936Z","last_seen":"2026-08-10T19:05:30.008131Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/styles-DccuBpyY.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.552Z","timestamp":1786388688552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/styles-DccuBpyY.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b76b9bdfec-OSL\r\ncf-cache-status: HIT\r\nage: 864963\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:21,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":763,"size_decoded":1067,"mime_type":"text/javascript","magic":"ASCII text","md5":"1ff6fc5ab28816f46e1be4382fd13271","sha1":"3cd6b7f4cb0fac90682ca722b35f9a38c8fc91e8","sha256":"766d258da6268ce7fc455b19c1647d3d37f7b184540831f9af8ef96c801c6021","sha512":"6d25d918024567bdb68f9213a3f13b239e93a7cf66387650dd6342b758ae3830a7d4636128efc21bd80d44567c7f0ddf90495ad51a190647cb1d7a9c994cf80a","ssdeep":"","tlshash":"0b018942e9e3556c35235429002af3f8bd7d184453194d3593ec32b03a91ef642a3d2a","first_seen":"2026-08-10T18:23:56.690523Z","last_seen":"2026-08-10T19:05:30.008585Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/useQuery-C1bZKuDQ.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.215Z","timestamp":1786388687215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/useQuery-C1bZKuDQ.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af2825dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: GXFLNzmCFb:654,t8\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27269,"size_decoded":9260,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (27223)","md5":"ccff070832d35de3bcb2835fec9b342d","sha1":"52e60b6fb67426f0e0b088970e0cf0f7060b5331","sha256":"69715e8acaaeea570620f26ba5aa8fc736ac9808c56c39678d7b54842bb4c003","sha512":"b7785b336ebf7ade85e543a5c2d2d944899494f3814abe7a1192d63f53d47b093b25121930e544b59449132dc7567a7b2d4716dbb3cc7528da9fcf66c215a138","ssdeep":"768:Z9aWx42UkV9EFtbSlc/QwLNoYJCdmsD8MHzA373Ql:Z9F424G9wy+QPzkrQl","tlshash":"d8c2c6ddb743b17629f6c181406f4027e2246a166c1a402c71aedee676b0d4ef6faf31","first_seen":"2026-08-10T18:23:56.574594Z","last_seen":"2026-08-10T19:05:30.009122Z","times_seen":4,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/dist-BQ9maCMW.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.268Z","timestamp":1786388687268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/dist-BQ9maCMW.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af6849dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:11,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1371,"size_decoded":1343,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1329)","md5":"2fede905158b45bb113421ffee040510","sha1":"ab8703adf78eec8a5593d296bfaa880df927f4df","sha256":"3d785245eca9d6a4a7d805f3bf327d30a46416809af62a35fc0818870f7fee42","sha512":"ca2d021d104994ff737ea06561b93a21e204cf831d51e58d8d5aee28129a7d598bf9c598e1d657f0482730e95d914814a90f50a0ed045c7f712cf59948f6e723","ssdeep":"","tlshash":"5d212c91b040b370d1ef9ed0c06b44b9a63ba551a14903a4f4b88a08496a2a0b277f9f","first_seen":"2026-08-10T18:23:56.643584Z","last_seen":"2026-08-10T19:05:30.009875Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/createLucideIcon-CZmzEqbV.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.297Z","timestamp":1786388687297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/createLucideIcon-CZmzEqbV.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af985adfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:25,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1234,"size_decoded":1351,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1180)","md5":"5d51c68a08570babf52bd6813614d880","sha1":"a06f031aa21af98c6c59a3e0a07410bf1a7e987b","sha256":"6aba83ff10e53cd5651c64030aecfe233001254ac22f2f219cbe773b22fbe9c4","sha512":"a8d34ff51d00e349a891793e4847a1faa50f5f9d54561d4ff5433a8a35643dce90b90eac65988d2146eefa3e5be32d2618e0dace6fb508a3fceac0da767aacf9","ssdeep":"","tlshash":"a6216244f7a9393a632a84cd871c1115d497c314be830618b0bd0e2db63b4c077b7ac4","first_seen":"2026-08-10T18:23:56.683208Z","last_seen":"2026-08-10T19:05:30.010677Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/Divider-vvPQtMVN.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.548Z","timestamp":1786388688548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/Divider-vvPQtMVN.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b76b98dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034443\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XTdDrwigOB:16,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":396,"size_decoded":972,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (351)","md5":"71ce7385c78a2f913fd6829bc5fe093d","sha1":"c862e028d3f2395c0582bf549e06e5cf7bf652ed","sha256":"5f9edb539f49681d9b291a1ad725ad490672b76d08841685177ebda71fc8b97f","sha512":"c24c4ce89ffdfc8da996b11cb7105ba26c4c5ac840721e5030fcfd65aeed6b535927b0b34f3216c8a0bd063cdc07f92953ba9877a473f400a4f5551ad24189e9","ssdeep":"","tlshash":"70e0611ef8b8607880261cefc01edc97b239e780cb418564d09e5a50d6274e9d934fa9","first_seen":"2026-08-10T18:23:56.631412Z","last_seen":"2026-08-10T19:05:30.011215Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/cart-BvbGaxU9.js","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.176Z","timestamp":1786388687176,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefilll.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 12:59:55 GMT","end":"Tue, 27 Oct 2026 12:59:54 GMT"},"fingerprint":{"sha1":"5E:7E:3B:2D:6A:52:36:1D:0D:AB:E3:B3:E5:4A:D0:A2:71:6D:29:38","sha256":"EC:76:1A:7A:EB:6D:5B:0D:56:5B:44:A3:62:68:DD:68:AF:63:DA:23:03:A5:40:82:6A:AB:33:C5:67:B4:76:ED"}}},"request":{"raw":"GET /cart-BvbGaxU9.js HTTP/1.1\r\nHost: bitrefilll.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Jul 2026 12:56:49 GMT\r\netag: W/\"b52-657bf7d1fa35a\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T20:57:30.364837Z","times_seen":17824307,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"bitrefilll.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/Backdrop-DdxU77oI.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.353Z","timestamp":1786388687353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/Backdrop-DdxU77oI.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afe885dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034448\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:7,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":630,"size_decoded":1112,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (584)","md5":"a921e37e270f857efde96d04c1dcccff","sha1":"9b7ec6d0f024c9e907170e52121befe9a67f3f88","sha256":"b0c3820282f0bf66011792fa39bebbe07a9b2339550bcae690c0c6068cba757b","sha512":"8d35e86dbf92e20adafa444892019df17a8623e62cc63b63f4aae4edefb1b96ca255cc3a8166026564088b99fa17d58bd0f8bc1bfbd91998fee2f4d0aaeff104","ssdeep":"","tlshash":"0bf0dddddde0187a911bacfcc05f4a57732a90e4d3966fdca0ec1a581363ad8e45af10","first_seen":"2026-08-10T18:23:56.590877Z","last_seen":"2026-08-10T19:05:30.011849Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/utils-ioJT42NH.js","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.175Z","timestamp":1786388687175,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefilll.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 12:59:55 GMT","end":"Tue, 27 Oct 2026 12:59:54 GMT"},"fingerprint":{"sha1":"5E:7E:3B:2D:6A:52:36:1D:0D:AB:E3:B3:E5:4A:D0:A2:71:6D:29:38","sha256":"EC:76:1A:7A:EB:6D:5B:0D:56:5B:44:A3:62:68:DD:68:AF:63:DA:23:03:A5:40:82:6A:AB:33:C5:67:B4:76:ED"}}},"request":{"raw":"GET /utils-ioJT42NH.js HTTP/1.1\r\nHost: bitrefilll.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Jul 2026 12:56:49 GMT\r\netag: W/\"b52-657bf7d1fa35a\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T20:57:30.364837Z","times_seen":17824307,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"bitrefilll.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/striga-BlAZO8Zw.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.503Z","timestamp":1786388687503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/striga-BlAZO8Zw.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\ncf-ray: a29144b0d8b1dfec-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 1034446\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:20,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":208,"size_decoded":845,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"55a6aa9e4b225dad0340875a7f990241","sha1":"bc4610e9856b3960ba0d8071320fc8fbc408e6fe","sha256":"d4e09ff84ef977fa06b5f8acb1b0e7a8d8424d984d13e79c5bda0225c7ee63b1","sha512":"5544571a16a84d85a6d13bbefb20f2faba73101deb59ff1cd333777211a7093ebbcda1771e602654e963b4ae5cdfde6defd211f8ce1e934a06b85ae3fc53cdb9","ssdeep":"","tlshash":"ccd0234dd1e05cb4d518086c91294455f338f4d897c14717d18902946fa40ede13fe29","first_seen":"2026-08-10T18:23:56.658323Z","last_seen":"2026-08-10T19:05:30.012511Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/Input-CBK5fcBb.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.463Z","timestamp":1786388687463,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/Input-CBK5fcBb.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b0a8a8dfec-OSL\r\ncf-cache-status: HIT\r\nage: 994531\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: de\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:47,t8\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2652,"size_decoded":1759,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (2609)","md5":"4c1a373e097182fd90ccfb257fbaec9d","sha1":"7bcc862fbf1d2330c74869b92968c7a89bba7219","sha256":"b03bf2ca69cc00638ad483a43aae0c85fad35fcf25d3a46add1fb8a20852ec02","sha512":"60fba037b33c979f040fb29cd28be5a2556a53698ee1dc598773dbd06e0014d281d96e1ee15ada59a89e4cc341707199c9086c896753b6d1646544580f4a37fc","ssdeep":"","tlshash":"a95143cee82078b6e43f89dfc1ee441b37176064e6030574bd3467392b015ad6e1aeab","first_seen":"2026-08-10T18:23:56.598372Z","last_seen":"2026-08-10T19:05:30.013101Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/Combobox-R7bPJd9Q.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.513Z","timestamp":1786388687513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/Combobox-R7bPJd9Q.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: application/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b0e8b7dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 18:23:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:21,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4048,"size_decoded":2427,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4002)","md5":"8cc8486912f696cf45f5c566115b6856","sha1":"bf9950559c4f99754552c298c3fc66053d4e4150","sha256":"52aa4d95667752eb52d47ef7e651fd1dc023f18de6d4285b77d968a06f232a27","sha512":"23d7e718d93ea469bf0aa0889d63dbe58d8b6cb72665e7c18f07a0d9841306c429b74137b3924aaff8e9aa476becbce860ba521792f7aca7622f0a9c31f188d9","ssdeep":"","tlshash":"b881864dd06032f9e71e48e5802b815e72eea2589b0dc1a6e8ba5c543375580f2effd2","first_seen":"2026-08-10T18:23:56.559546Z","last_seen":"2026-08-10T19:05:30.013706Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/apple-touch-icon.png","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:49.006Z","timestamp":1786388689006,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nCookie: rbuid=rbos-5fa23409-ea72-4d1d-a29f-be4664155797\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-cfw: ypNECmjeuL:27,t5\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Aug 2026 19:04:49 GMT\r\ncontent-type: image/webp\r\nx-powered-by: Lightning\r\ncf-ray: a29144ba4c4edfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 8858\r\ncache-control: public, max-age=86400\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 14:23:04 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept, accept-encoding\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: ok, orig_size=1044\r\nx-xss-protection: 1; mode=block\r\nx-tag: p2\r\npriority: u=4,i=?0\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":596,"size_decoded":1323,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 72x72, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"714f4fd87440a96a2ae2c84982196343","sha1":"590788ce086094bb1648acd483b295f75876668d","sha256":"2a72d4f8933aa241e8882fe28203acb6e94f182cdfa07efc2277b0b17cb20e35","sha512":"e632848c44e5681cad98757b818c2cf8ccc6b884b3d4d118bbd4b50f1957399b2b8b2553ef842fc40e8da7fd0fe97f0fc47988fcb5ebf6964eb9366c7264e46b","ssdeep":"","tlshash":"b9f00236dc324544b0e0a8727a63da0dc6e9aed63901a7d14b099dd2d2419d7ae98064","first_seen":"2026-01-08T23:49:37.080299Z","last_seen":"2026-08-10T19:05:30.014248Z","times_seen":18,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/scanner/wallet-overlay.js","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:46.803Z","timestamp":1786388686803,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefilll.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 12:59:55 GMT","end":"Tue, 27 Oct 2026 12:59:54 GMT"},"fingerprint":{"sha1":"5E:7E:3B:2D:6A:52:36:1D:0D:AB:E3:B3:E5:4A:D0:A2:71:6D:29:38","sha256":"EC:76:1A:7A:EB:6D:5B:0D:56:5B:44:A3:62:68:DD:68:AF:63:DA:23:03:A5:40:82:6A:AB:33:C5:67:B4:76:ED"}}},"request":{"raw":"GET /scanner/wallet-overlay.js HTTP/1.1\r\nHost: bitrefilll.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 19:04:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 29 Jul 2026 04:30:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6981ec-2961\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10593,"size_decoded":3339,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"0c984f1274050ecf0516c5e839594d0c","sha1":"0ef69c68fe1b250fbf82376cf14a232d4d65d1d0","sha256":"b565e6074a2d93f9c3ee6613d03b75d0a2d76e104f99e73f0b2102aed329ee98","sha512":"43aba363c24b1bd733123929948ad77fd4313d02f6799e50ea8ca794e9ebcba41ea7c2f3c630faf64a114c0fc7ba71a8141f2e9191f36b0f0b524be33343b984","ssdeep":"192:9+WLWEJVIpREOgMBvSSAkfhLo8py5s9XUuZ:0AVIpREOnBvSSvUOZXUuZ","tlshash":"81226639faa3156904a7939d67abd29c312e04036d04ee203b9c979c4f5ceaf14b1bdc","first_seen":"2026-08-10T18:23:56.719554Z","last_seen":"2026-08-10T19:05:30.014781Z","times_seen":4,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"bitrefilll.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rbgu1rfy.bitrefill.com/integrations?source=%C2%BAw^~)%C3%9Et","fqdn":"rbgu1rfy.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.123Z","timestamp":1786388687123,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbgu1rfy.bitrefill.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 19:17:47 GMT","end":"Mon, 21 Sep 2026 20:17:37 GMT"},"fingerprint":{"sha1":"40:83:E8:0C:D5:2B:D8:A8:26:A8:FA:22:3F:C6:CD:E0:44:AF:E3:81","sha256":"D0:81:77:EE:5D:86:63:53:E7:92:5F:AB:1C:90:D7:9A:7D:A0:35:26:0E:77:BE:8F:A8:17:E4:A3:7D:FF:43:60"}}},"request":{"raw":"GET /integrations?source=%C2%BAw^~)%C3%9Et HTTP/1.1\r\nHost: rbgu1rfy.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\ncf-ray: a29144aea9ff7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":438,"mime_type":"text/javascript","magic":"ASCII text","md5":"bd704719699c2453fd0009eac80cb86e","sha1":"69e9772bca3c433d08bf16a7dc0e848cd158acc1","sha256":"a6e9e1722cffa254dc5061e3d89fc40a4faec0cd7d44819923657d498e8df822","sha512":"9374fb6e51ec60e1bc1a17eaa9757925868b0dc73d45f1c280af691ed66383b553eccd61b906f2e65835e6d03c506b0cbe2c94035f0646ead3c84e385e432f19","ssdeep":"","tlshash":"649004c13011c700401f1c4f4d3040400534dd7d45d300133d1cccc0c1d00d44747140","first_seen":"2023-03-07T01:31:26Z","last_seen":"2026-08-10T19:05:30.015317Z","times_seen":432,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":255,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/URLStructureRouter-BDz4_ap_.js","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.170Z","timestamp":1786388687170,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefilll.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 12:59:55 GMT","end":"Tue, 27 Oct 2026 12:59:54 GMT"},"fingerprint":{"sha1":"5E:7E:3B:2D:6A:52:36:1D:0D:AB:E3:B3:E5:4A:D0:A2:71:6D:29:38","sha256":"EC:76:1A:7A:EB:6D:5B:0D:56:5B:44:A3:62:68:DD:68:AF:63:DA:23:03:A5:40:82:6A:AB:33:C5:67:B4:76:ED"}}},"request":{"raw":"GET /URLStructureRouter-BDz4_ap_.js HTTP/1.1\r\nHost: bitrefilll.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Jul 2026 12:56:49 GMT\r\netag: W/\"b52-657bf7d1fa35a\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T20:57:30.364837Z","times_seen":17824307,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"bitrefilll.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/search-FFyVCrIp.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.517Z","timestamp":1786388687517,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/search-FFyVCrIp.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b0f8bbdfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034446\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:49,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":471,"size_decoded":1041,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (427)","md5":"b0b94b0748cb7d6e662fcd99a49c09d1","sha1":"03767a02b15e4e31193bc75f16fff49520c384c6","sha256":"a961ebe7ba0517a1cf0875b2101a9958ab4877c767b5d759d740b29fa0eeb907","sha512":"4b27ea38b0c4f1060a47eb81c7e6e9e35062dad345fc9da57d073c5912e4464911bb00825e05c632012a42bb02faabf928b17f336159991b2883bc456cf921f5","ssdeep":"","tlshash":"23f0971fca790cbdb42a4c9cba69b80fe9bae1a49f861514a2dc2a7453015c06221bc0","first_seen":"2026-08-10T18:23:56.622808Z","last_seen":"2026-08-10T19:05:30.015867Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-10T19:04:46.473Z","timestamp":1786388686473,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefilll.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 12:59:55 GMT","end":"Tue, 27 Oct 2026 12:59:54 GMT"},"fingerprint":{"sha1":"5E:7E:3B:2D:6A:52:36:1D:0D:AB:E3:B3:E5:4A:D0:A2:71:6D:29:38","sha256":"EC:76:1A:7A:EB:6D:5B:0D:56:5B:44:A3:62:68:DD:68:AF:63:DA:23:03:A5:40:82:6A:AB:33:C5:67:B4:76:ED"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bitrefilll.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 19:04:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Wed, 29 Jul 2026 12:53:42 GMT\r\netag: \"4f8015-657bf71ed2180-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5210133,"size_decoded":2187816,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6033)","md5":"b2ff6c35e620d24f7e1af252a09a8fa2","sha1":"3e5972c965a14a563f557e44ad36c118f55ce702","sha256":"2220b59eb67997f0f645543d9081e89af78d64d38ce9d6c874d1ccb6447f2e0b","sha512":"a25464352dc0ab196351f32891e6f27d2f2570a5b83b10d7f94c3a648fea2a20f7db86cc1d4f26ea83d440950825f567b4c3074b7c20665718c7c3640f67f079","ssdeep":"6144:hiJV+WuiWBFNUyBVmebVnpSc5JGaE9Q3dpxE0q3w3X6bI9fnNSNWuiBTNUyBVme5:h6V+bBTURepEuHJfNSNuZUReotbFy8N0","tlshash":"2e2519cdb3d674669396f478903f01cba57a24e2b48cc89af189cce02e3465a5127f7d","first_seen":"2026-08-10T18:23:56.585071Z","last_seen":"2026-08-10T19:05:30.016682Z","times_seen":4,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":4,"connect":22,"send":0,"wait":58,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"bitrefilll.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/classPrivateMethodInitSpec-dEFXBvX6.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.217Z","timestamp":1786388687217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/classPrivateMethodInitSpec-dEFXBvX6.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af2827dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034452\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: GXFLNzmCFb:661,t8\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":448,"size_decoded":948,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (448), with no line terminators","md5":"a466c7bedaa3c5fca782618d4c78ac58","sha1":"63356458d633e628ad40c4b69e225c8ed04b1d83","sha256":"8b8f87752910e1f56a948a20a87a059b50ab11adaa7069df87aebf9480422d06","sha512":"57f943f545804b8cb35099520ceda0065125cddf7d218cd12014e21dc0261030b5fb11616010c500c295d1938e8b3689d99f037907be2b5b03e11ce17948c789","ssdeep":"","tlshash":"caf0278d79c4f112973b01368567400fe730a8992d1a9f005184e5d33e3583947abc1c","first_seen":"2026-07-16T00:57:04.798202Z","last_seen":"2026-08-10T19:05:30.017233Z","times_seen":8,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":33,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/dist-Dnnxrx2v.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.269Z","timestamp":1786388687269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/dist-Dnnxrx2v.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af684adfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:12,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5452,"size_decoded":2645,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (4691)","md5":"f3339c5d08d3266f386585db57e13203","sha1":"41854a2138d4c8fa4f76bc9859efd6d54cb0e2e7","sha256":"a55d26f45b2efd52826cc7b79873107b21e068d3ba107ecef1b635fac11fafcf","sha512":"22ff9f40447f03089f698bf3f0bdc18e15d32cf1347cc489c55a9c9dbd432678998f06476851b357d4c5f42343909830c78219cbba035d783a693af1135f91f2","ssdeep":"96:HiNP4RHbk1UyPyAgUybyobIyw78yDCRLIygjKEQGZscjuKcBRO5CncVhdH3cHP8:c0bHm6LojNZsXKpDXc0","tlshash":"cab1a6de302573e49edcdcaa4a23003d5b1a9989558e011db9ca8f2002693c4fbe7f99","first_seen":"2026-08-10T18:23:56.671808Z","last_seen":"2026-08-10T19:05:30.017902Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/customerio-segments-BKYi5QAj.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.799Z","timestamp":1786388687799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/customerio-segments-BKYi5QAj.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: application/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b2b95fdfec-OSL\r\ncf-cache-status: HIT\r\nage: 864963\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 18:23:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XTdDrwigOB:12,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":996,"size_decoded":1288,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (939)","md5":"625e768e8452b4e4ba749a0dd8367feb","sha1":"5237a1cb07488cac79f0b0fa4162db7ee5ed72db","sha256":"fea6ef63d906449ceeba94389ea5f6f6ef010825104e3193146f0b75021d0923","sha512":"9e39302d2aabaea8041a1c9b9c0d32b5d5a6aed71716327b6d20b6f81119e5b8746098257b09514239357452be153a4a5ca420e12c35669ae8c7660fe65f598f","ssdeep":"","tlshash":"891158ccfcb951b1b9880d72843e4957f11cc463675c824660bf78543625b51836af71","first_seen":"2026-08-10T18:23:56.629598Z","last_seen":"2026-08-10T19:05:30.018542Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/LiveDataSubscription-Ck-K9VVf.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.800Z","timestamp":1786388687800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/LiveDataSubscription-Ck-K9VVf.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: application/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b2b961dfec-OSL\r\ncf-cache-status: HIT\r\nage: 52960\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 18:23:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:41,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5044,"size_decoded":2406,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4986)","md5":"e5d7257c8dcf754e4a1841dc5d648752","sha1":"fcdcde0aba64be703d9cfe24b0a4f9d645a6068d","sha256":"cca4e1b2f26b12a88d0aeae72a07f275d364b1b044e5441fe5fb7f57c588715b","sha512":"061da45059d53379618c7e0ee37ee30a2528c612a7ee463f241233002e17516565a80547a0030e9dad68fa345d83a2182451a5136e18fcb03cef94e51816ea63","ssdeep":"96:KUZ3ikM9RMhhJAPZ+dijMTvTSUgWIHOjUjsmx1VYepQYpUZrqTvfaTa:T5I1+dija7SbWRjUjsm3ieyYpUZrsca","tlshash":"3fa194c9f5d42422abd2a9a408b60e0b013c6b960557901cf67ecff67e25384b17bdf2","first_seen":"2026-08-10T18:23:56.60912Z","last_seen":"2026-08-10T19:05:30.019267Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/validate-PoDChnBI.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.556Z","timestamp":1786388688556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/validate-PoDChnBI.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b77b9fdfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034442\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XTdDrwigOB:17,t7\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":265,"size_decoded":896,"mime_type":"text/javascript","magic":"ASCII text","md5":"bf2246bd8e9e0ab4fef11f8d705c8402","sha1":"1524a5d362fdb350b4b02b740b59f6857fc1ddfb","sha256":"6d5ac0b8491706756fff9db45c34a0bbd6d052ed2e2bbc596027071c3d6f744c","sha512":"d8de7e8a1e383cba5e74ecbb81e7db7c77a9cf1585902d7b3e12671ba7caff0aab0fbabfd1e8e3d30fcb8173b4a2f33c13a7eefd4940432ac2dbf855c3e59902","ssdeep":"","tlshash":"0bd0a547d1e4f7d519253dee4cc3004139fdf9e4d015b65f521d45753c50065572dc09","first_seen":"2026-06-11T21:29:59.518912Z","last_seen":"2026-08-10T19:05:30.020008Z","times_seen":5,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/info-BFkQChlp.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.548Z","timestamp":1786388687548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/info-BFkQChlp.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b128c6dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:6,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":497,"size_decoded":1045,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (455)","md5":"86974c1b0dbdd95af7d36d524582b51c","sha1":"83de69f88c3136734a536c2e3caac36aa67e2b8d","sha256":"ade48031db9ad36531a16c6d2bb3b3cc5b07068b6c660234f4d08bfecc001c4d","sha512":"ea6bf32b410eefbcad15a5de3398085afb1e72c49a84f288c7010116bd04140a8a4dd06b13586a48be80861831ad68bca3eb0a214991d8a2911e64d971d4ca65","ssdeep":"","tlshash":"0af0594eda690cbdb0194d9cba6ee44fe5aae6a4ef865514f69c2a7452000c05722bc0","first_seen":"2026-08-10T18:23:56.616677Z","last_seen":"2026-08-10T19:05:30.020519Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/theme-DGnGx23V.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.553Z","timestamp":1786388688553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/theme-DGnGx23V.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b76b9cdfec-OSL\r\ncf-cache-status: HIT\r\nage: 994529\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: de\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:22,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":274,"size_decoded":909,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"423e34c6b38ec5fdc6584aef42b2a19a","sha1":"c17e2aa0c4f17327f7a2f1b04739ead36fbd8b03","sha256":"db1e6204810b044b1edf2e0692d088fcfe0f3690255bd57f4c5ec5ce1cf22316","sha512":"aeb7a83c46021d046a0701fff5e34005f1b5bd108e6005742da175bc52c8ea5e5bb2d0343848a97aeee4cdf2075253e44d0996c45440f1008377d80b26370d4f","ssdeep":"","tlshash":"0fd02b5635e056b4d0ca094ce419d644b23af405e667390df26d92d81e30cb31527e38","first_seen":"2026-08-10T18:23:56.729986Z","last_seen":"2026-08-10T19:05:30.021059Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=10\u0026frm=0\u0026auid=1324689728.1786388688\u0026dt=Bitrefill%20-%20Buy%20Gift%20Cards%2C%20eSIM%20%26%20Airtime%20with%20Bitcoin%20or%20Crypto%20-%20Bitrefill\u0026en=page_view\u0026dl=https%3A%2F%2Fbitrefilll.info%2F\u0026rnd=953046994.1786388688\u0026navt=n\u0026npa=0\u0026gtm=45be67s0v9104326907z8890364013za200zd9104326907xec\u0026gcd=13l3l3l3l1l1\u0026dma=0\u0026tag_exp=115616986~115938466~115938468~118897920~118897930~119724321~119896802~120124455\u0026apvc=1\u0026tids=AW-957004286\u0026tid=AW-957004286\u0026tft=1786388687672\u0026tfd=1229\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.637Z","timestamp":1786388688637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:05:56 GMT","end":"Mon, 12 Oct 2026 18:05:55 GMT"},"fingerprint":{"sha1":"A9:3F:6E:0B:AD:3D:D0:80:52:15:1D:D5:E8:C7:78:BA:77:A7:82:4B","sha256":"F1:7B:9C:4B:5F:76:59:53:51:8B:60:95:36:73:6F:F0:DA:9D:43:63:A0:64:4C:CD:48:FD:44:DC:79:FC:F2:DA"}}},"request":{"raw":"POST /ccm/collect?rcb=10\u0026frm=0\u0026auid=1324689728.1786388688\u0026dt=Bitrefill%20-%20Buy%20Gift%20Cards%2C%20eSIM%20%26%20Airtime%20with%20Bitcoin%20or%20Crypto%20-%20Bitrefill\u0026en=page_view\u0026dl=https%3A%2F%2Fbitrefilll.info%2F\u0026rnd=953046994.1786388688\u0026navt=n\u0026npa=0\u0026gtm=45be67s0v9104326907z8890364013za200zd9104326907xec\u0026gcd=13l3l3l3l1l1\u0026dma=0\u0026tag_exp=115616986~115938466~115938468~118897920~118897930~119724321~119896802~120124455\u0026apvc=1\u0026tids=AW-957004286\u0026tid=AW-957004286\u0026tft=1786388687672\u0026tfd=1229\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bitrefilll.info/\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\npragma: no-cache\r\ndate: Mon, 10 Aug 2026 19:04:49 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://bitrefilll.info\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":544,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T20:57:30.364837Z","times_seen":17824307,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/x-BzXNsF-s.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.315Z","timestamp":1786388687315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/x-BzXNsF-s.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afb86adfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034449\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:39,t10\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":454,"size_decoded":1026,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (415)","md5":"36bad16a69827ae09728894eb131a312","sha1":"83d91a3e7f99f4542a70385a8608e01deb5c02a4","sha256":"d64d22b8aebe8382880f2423899708e38d220e1552f69b22a37f49df4a8b6713","sha512":"b692cc4b55a4739010f8c93ac54a4bb7ac82c156748c2ad4285dae4df858f66ef3e564905879d6d6a84bc376f8dedc64b207d9904241f48ef9c1ae3b13102323","ssdeep":"","tlshash":"f0f0d40fce785d7cf0160dad5669b40fa566d1a4ef831514b68c197452010c05735bd0","first_seen":"2026-08-10T18:23:56.702639Z","last_seen":"2026-08-10T19:05:30.021765Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/solana-dark-DquOgJAf.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.573Z","timestamp":1786388688573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/solana-dark-DquOgJAf.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b78babdfec-OSL\r\ncf-cache-status: HIT\r\nage: 864963\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:62,t4\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1875,"size_decoded":1314,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1826)","md5":"4d122dc8a00d1faf5228fb3f315f0979","sha1":"8077bf771b020f5399518299c73b6b15af2306f3","sha256":"90761befc23851edfecebdc38e224fb91b5c4b254bfce729e4d829ba89c2c975","sha512":"28f04296ee041d0504b7eb614891b5aae9166f562dfd79a2f82679ad95454d16740ff8d39e50ff90fb8b5b30d5de409c11c83be52536765c6c6b28593eccc5bf","ssdeep":"","tlshash":"7931100b81a96eddf2058ca93f95542db29f1089dfe290a0fe4c7a5460210c0f74ffe1","first_seen":"2026-08-10T18:23:56.538618Z","last_seen":"2026-08-10T19:05:30.022506Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/constants-DNfgXCVi.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.424Z","timestamp":1786388687424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/constants-DNfgXCVi.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b0689ddfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034447\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:13,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":351,"size_decoded":911,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (304)","md5":"e1e10811c176b46758ae39b63b96dade","sha1":"710be2c54f15bf515c96741b43162613a4b545e8","sha256":"18fbd6991fe96616e9108a49dc09d017cb9d3831d998f7dd17b0edbd35abb236","sha512":"09a95ce884cfff76068078389e48435571bcef07c1f7708c1e4cc1ac590e4084e745630bcbe156f6fb89389722cb4eb76eabe824f4eb3b5ee94475826c20092f","ssdeep":"","tlshash":"58e0df2eb815167948c2ade902e3c1ede21ca040feb48980864f08004eb8e2aeb34842","first_seen":"2026-08-10T18:23:56.603266Z","last_seen":"2026-08-10T19:05:30.023237Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/redux-toolkit.modern-BgN9bWxF.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.242Z","timestamp":1786388687242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/redux-toolkit.modern-BgN9bWxF.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: application/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af3832dfec-OSL\r\ncf-cache-status: HIT\r\nage: 2579\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 18:23:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: GXFLNzmCFb:664,t11\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5435,"size_decoded":2921,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5377)","md5":"ac22b48c6d0c4f6cbbf285b041eca171","sha1":"1bf81ee2b3a831307c7f78e82cecfee0b63f513e","sha256":"89716a4e18c2f3f751348df46104017a0f11c183a41177d022125d8954ec5671","sha512":"5e181a1035fe6240f6ac203f970ca97fe70ca6dc2fb73e1b1cc1c0102d86b390af3103916aa70ff0e30c7cbb297be4ffd2065dd3943bbce2822062efd4a645b8","ssdeep":"96:GGLmIXXAC2VVdsYeKpN6kYgypUBVkmCkqjACK4AxRVAR28OtsL9:DRkVVds5KBYppBAHVARgtU","tlshash":"a5b1b6e9b7d1b0b397ab4863403f5c16f13d25aa009d6400d792a4b66df0d1eca1af6e","first_seen":"2026-05-31T11:11:55.61934Z","last_seen":"2026-08-10T19:05:30.02392Z","times_seen":8,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/useQueries-Dk-U6V57.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.632Z","timestamp":1786388687632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/useQueries-Dk-U6V57.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b1a8efdfec-OSL\r\ncf-cache-status: HIT\r\nage: 994530\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: de\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:33,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4310,"size_decoded":2345,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (4262)","md5":"ca75fad5a9d92a335ffaec6867ae8f9c","sha1":"0d41bb2e2666c40433680bfdbce877533d876a91","sha256":"5aef86ec95e22f82607727ddedc41cb0b66f2a012185ba807a5c783025140794","sha512":"b86fc1de3c77cb3455cbd7b0e0ac59b6913aa75aa65f8036a0214542fb5df73119dacbcdfb1fd881c3a05f25778cfb1d9c0785f882ba953185afca12b78179c2","ssdeep":"96:xQDzHEN1sua+jmd6O2YV18qfUInTOoTj2zZeT8AiLRSK4b73YPonZ4tmi84:ufY1sua+jmd67YV18DQSzAPiLGQwZi","tlshash":"8f9156ced753e1ba72fa98cac4bb8065f138e7150c1e0024b1984b461ae5a5ef6b1f31","first_seen":"2026-08-10T18:23:56.709879Z","last_seen":"2026-08-10T19:05:30.024631Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/rest-helpers-CIrHabCi.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.247Z","timestamp":1786388687247,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/rest-helpers-CIrHabCi.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af4836dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034451\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:2,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2796,"size_decoded":1949,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2746)","md5":"d3ca66870c23f77ab8a80653b2c139ef","sha1":"1f5a513aa07c522d3a3fa1a5c778184313a21736","sha256":"1c371e2649646f1609233a3db47f1f9ff196f56265aac2021ebc0b64e9b86bbb","sha512":"61a375744e654f40c92868db485df2113330bdc9ff78e6a9e6b2fc9807803c32a1c275cb97075428c63a036acab6a7095210e2683928ad8dd3cdffa455ad2e26","ssdeep":"","tlshash":"595185eca4e2b429e74ce433f82e072df8186927b819e95df9c8142b2114095bb73b75","first_seen":"2026-08-10T18:23:56.650635Z","last_seen":"2026-08-10T19:05:30.02515Z","times_seen":4,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/account-DEqEsba0.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.258Z","timestamp":1786388687258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/account-DEqEsba0.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af5841dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:4,t7\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1933,"size_decoded":1372,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1888)","md5":"e82f41d29a75cf5091daa66a6edb717b","sha1":"ec697f0e45dc5eec6b9d03b46e5c7bfc5c42fcbe","sha256":"41a97c8f44e5d5c2b948f06209b5c0dda1a38674833a86b9b0c8b413ed672ac0","sha512":"8340b5652c3b485db78f1f1446f7521a8e57f5291611c8393a6a2fab0dc66db626012807d221ccdcef1eb4cf741b45aee36445c44284052188ec74578bada546","ssdeep":"","tlshash":"bd41bb8fb4e6b7649fc38c72f17d42ab34baec21f5191ed4a194d09a26500cae036f70","first_seen":"2026-08-10T18:23:56.552523Z","last_seen":"2026-08-10T19:05:30.025749Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/Button-DXqSQlKG.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.318Z","timestamp":1786388687318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/Button-DXqSQlKG.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afb86cdfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034449\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:40,t8\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2059,"size_decoded":1660,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (2015)","md5":"5c71c13d388a2b7cd80668afc6af649e","sha1":"345adf22a1e58c0ba0a3fc113f195c5897e58245","sha256":"b3bd27cb91d668221872dee01b6b038e5d7068b01c4ce43bcb694ad93b95c6f3","sha512":"5ede741a41884db1de0a065cfbc6bae7cd28b39c168cf3e78248b3b61b08316825401c3b98f6bc129051f87f22b5e9d6d18b1dea895e6c5c551820b2c7d4f82e","ssdeep":"","tlshash":"b74173d4f3606878f63ecabac50641fbf326e26d9e062a55e010087453a27ad7034f55","first_seen":"2026-08-10T18:23:56.554154Z","last_seen":"2026-08-10T19:05:30.026257Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/Popover-CoQ4phoA.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.476Z","timestamp":1786388687476,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/Popover-CoQ4phoA.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b0b8abdfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034447\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:15,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":892,"size_decoded":1217,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (847)","md5":"7f070d218588b6806d2452f3629f2100","sha1":"61085af3a5cac5e0affd3f4fc12cb605f5fe8149","sha256":"8fbdeeadbff175a3398d538b2fea9199f0a9d1401bcb5f475169d766985c705e","sha512":"f7b0b3d321d8470c5421eb35f98ea3c48711655898c0f2b69247d794f04d4fa1f5b063e066cce94e213484214200135ab601c44f25c6a053aa40f45bac8d113a","ssdeep":"","tlshash":"6b11e39dacc063b8691ecdf9c02e007f731ae2b9c71e0990e4b694642e772b5d527f48","first_seen":"2026-08-10T18:23:56.611941Z","last_seen":"2026-08-10T19:05:30.02678Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/AcceptedPaymentMethods-BjuHaWPr.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.539Z","timestamp":1786388688539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/AcceptedPaymentMethods-BjuHaWPr.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b75b91dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034443\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:19,t7\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6503,"size_decoded":2458,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (6443)","md5":"a453c1d3c4093e23539ca2d5f8cc9ed7","sha1":"15acbcf437f77eb233cf7a1cb775e215650d95ad","sha256":"f78b8710212be1384b77663aa7cc952e4fb937eb8606e00ab0ef953580a52229","sha512":"61f7aed619c5a2ed261a633bc145f85e86bdfd338109152e9ac61dd8a15769cb537b2bed67ad3c7e63b127d6b9c1baa291ac3993e3a26b91e0e65ae088060bc9","ssdeep":"96:JrqtWMJfAbfRXKH+40f9k+Gh4dAjh8QYTCx6AcP1ziQ16fqtdxL:JutWIfaKH+4el","tlshash":"7ad1640e12c4354ca0518caed623242fba1af39e5f5b0d40cad1b818abd46ab7b15f6c","first_seen":"2026-08-10T18:23:56.514578Z","last_seen":"2026-08-10T19:05:30.027336Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/jsx-runtime-DUS_K0Po.js","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.173Z","timestamp":1786388687173,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefilll.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 12:59:55 GMT","end":"Tue, 27 Oct 2026 12:59:54 GMT"},"fingerprint":{"sha1":"5E:7E:3B:2D:6A:52:36:1D:0D:AB:E3:B3:E5:4A:D0:A2:71:6D:29:38","sha256":"EC:76:1A:7A:EB:6D:5B:0D:56:5B:44:A3:62:68:DD:68:AF:63:DA:23:03:A5:40:82:6A:AB:33:C5:67:B4:76:ED"}}},"request":{"raw":"GET /jsx-runtime-DUS_K0Po.js HTTP/1.1\r\nHost: bitrefilll.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Jul 2026 12:56:49 GMT\r\netag: W/\"b52-657bf7d1fa35a\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T20:57:30.364837Z","times_seen":17824307,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"bitrefilll.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/dist-DGz2fEGK.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.564Z","timestamp":1786388687564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/dist-DGz2fEGK.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b148cddfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034446\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:26,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18058,"size_decoded":5770,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18016)","md5":"544487ef9ee8bdeda1febf984d5516d5","sha1":"dc751b2617bbd97c0c868e5db3efe868c213fd38","sha256":"b1ba4216c870e3cc724fe150ae3239046f58efb24a05b94737bd5af57468f207","sha512":"faf73650ce0d83dc4e13af126df2a7de08f23864ab68f760c3c9265a3885799bb9bf36f9ebecc91c6d80dc43d958b94a58f0bc651e5ccb79d046b8e58519e347","ssdeep":"384:Aqu9zKJpTKMAFtKvRlK6ahpd/6YjPVPW8rBMjqne6CBovWtXFW5NMaKPypJ/nrwI:ADcxL6bjnFlnd6laHJ/ECZ/sVJ/EC8","tlshash":"6382c8ee609675f0e79cc455833bd43d6f2a5994300e4620f97a8d2c239e290f2dbfa5","first_seen":"2026-08-10T18:23:56.649399Z","last_seen":"2026-08-10T19:05:30.028072Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/fetchUserData-x764FQ7Q.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.797Z","timestamp":1786388687797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/fetchUserData-x764FQ7Q.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b2b95edfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034444\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XTdDrwigOB:11,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":668,"size_decoded":1124,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (617)","md5":"4ead035da07c522838eaa3b1d4527692","sha1":"a9db9866e1a04f931238bcd374708c19cfe5b57b","sha256":"618200be6c64947aa7dc6b568bd1f60059862ddab40eb80890c74a4b03b1b11f","sha512":"81b96c5a7bf3a4548922db90c76efd4f53c4412166417fb835448ef844c1e3466a87c6199d857f4230b7c4537205e2690771162589ec358fb8707db5e3ed62b2","ssdeep":"","tlshash":"250183ecbcf062710e5c4d30882d0a039132eda1df00968a7204712828d6e989f22e30","first_seen":"2026-08-10T18:23:56.594654Z","last_seen":"2026-08-10T19:05:30.028592Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/Tag-Dj83GBNu.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.461Z","timestamp":1786388687461,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/Tag-Dj83GBNu.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b098a7dfec-OSL\r\ncf-cache-status: HIT\r\nage: 994531\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: de\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:14,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":819,"size_decoded":1164,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (778)","md5":"e7c64f4b3245fb90de1fe598a17945a4","sha1":"9fa82f483c40d0379e73305ed515198f569a17a8","sha256":"1f4d0c72f351db39d23f02d4d3c8a1500bce39e0552d5f143ad114101563ca2b","sha512":"3eeeff10bfbc3a69c7d5d3a88861f94d0a5d8b61481653ffc08d07a06ba42dba8dec21544ec12043758a360291639b212b63cbce332413e7a5f3bc85cd79188d","ssdeep":"","tlshash":"f3016b4ea19426f9b01559fdc02b406f2b3bd188934f0eb5a425596052324f2b627fc1","first_seen":"2026-08-10T18:23:56.586037Z","last_seen":"2026-08-10T19:05:30.029244Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/Header-cCXT-cRL.js","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.177Z","timestamp":1786388687177,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefilll.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 12:59:55 GMT","end":"Tue, 27 Oct 2026 12:59:54 GMT"},"fingerprint":{"sha1":"5E:7E:3B:2D:6A:52:36:1D:0D:AB:E3:B3:E5:4A:D0:A2:71:6D:29:38","sha256":"EC:76:1A:7A:EB:6D:5B:0D:56:5B:44:A3:62:68:DD:68:AF:63:DA:23:03:A5:40:82:6A:AB:33:C5:67:B4:76:ED"}}},"request":{"raw":"GET /Header-cCXT-cRL.js HTTP/1.1\r\nHost: bitrefilll.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Jul 2026 12:56:49 GMT\r\netag: W/\"b52-657bf7d1fa35a\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T20:57:30.364837Z","times_seen":17824307,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"bitrefilll.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/use-reduced-motion-DpmjaA_Y.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.308Z","timestamp":1786388687308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/use-reduced-motion-DpmjaA_Y.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afa862dfec-OSL\r\ncf-cache-status: HIT\r\nage: 994532\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: de\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:33,t7\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258,"size_decoded":903,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"c0e03a64ff0a16d7d97ad3fa30ef6cc7","sha1":"0f00bf2280c90733446c18b98ddba5197b24492c","sha256":"ea82ac8724c8e37bb48f71f3b0771fbe7733baed90710306dc32553641a56386","sha512":"82c087126bb97f74a5259acf19d069dc679b36b1b87c77ec65b71823581d73c5f8caff110e8ea964658b8fa1c09c47a386de0997d0dbe2d8b6c974486e6b1723","ssdeep":"","tlshash":"e8d0954dbde1a971d60704dd50366d56453571f4574443c890141670561e4e1d435d25","first_seen":"2026-08-10T18:23:56.634485Z","last_seen":"2026-08-10T19:05:30.029908Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/circle-help-hzdcZlUr.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.334Z","timestamp":1786388687334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/circle-help-hzdcZlUr.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afd87adfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034448\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:3,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":539,"size_decoded":1068,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (490)","md5":"861a0defcb89f28beefbf6dc482a46a6","sha1":"b9854d2615a84ff633b84018cb6bd43c6e3114db","sha256":"554255cb4dadaa1e553c1c04c108edbd523aa2fc7a751e209659d2b1195c7f23","sha512":"6f6290a1696b796f5005b4ada8dd1a757a4dd6a4f50b8aca5fe1a7a51d4b9d3f13c722ed9ec46f3ab037b8d78abfd9db4fc70e4c599e31ef762c52e669be4839","ssdeep":"","tlshash":"64f08b1edaad0cbcb00a4cac7e6dd48fba6be1b0af460608f59c157442015d09332bc1","first_seen":"2026-08-10T18:23:56.695153Z","last_seen":"2026-08-10T19:05:30.030545Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/formatAbiItem-KW-bf6pt.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.531Z","timestamp":1786388688531,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/formatAbiItem-KW-bf6pt.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b74b8adfec-OSL\r\ncf-cache-status: HIT\r\nage: 864963\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:15,t7\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1352,"size_decoded":1338,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1301)","md5":"91c9e834640811182fff28dd61712f1e","sha1":"1e67531b2f16a40d6103ea39d31d46c8d391c449","sha256":"065c93117f7278b1eaa7f552d643f4e7805e50c708f00a44f7da3b4f9925ea18","sha512":"f5c07971286f20d707cbc6caf4012871da4440046684156cfbbbf2477772395f62692bc11a3bd53302a75bf76b928dd619411a8fee9140b701be4df8006df6f9","ssdeep":"","tlshash":"b42136cf3162f0539959e89594b91a53f0b5fc82800c692492788d332b9ee04c79df7b","first_seen":"2026-08-10T18:23:56.541198Z","last_seen":"2026-08-10T19:05:30.031218Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/account-ZG6hCbDh.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.239Z","timestamp":1786388687239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/account-ZG6hCbDh.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: application/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af3830dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 18:23:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: GXFLNzmCFb:662,t9\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1191,"size_decoded":1196,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1146)","md5":"a480b8910d0eb5bde24caac25e99f01a","sha1":"94a34ec8f3a3b41f4621f56f2ff265a0111552e7","sha256":"ac0885370fc423aebe3dabe12f0317d499f373c148ec8748c04f5e37e6457e41","sha512":"a27f9beaa5f71a70979ead7e7eeea2fce4770b124e9eaeaf91ee97ad2b73753f1726203f5da9559aaa46b2e0a6b1499b68226301f34e6cefd19ee9935d4559f9","ssdeep":"","tlshash":"0921f4def2003ca655b5ccf9e03d071d536068e9ae2c829dd05506fd2ba0870922bf37","first_seen":"2026-08-10T18:23:56.518863Z","last_seen":"2026-08-10T19:05:30.031669Z","times_seen":4,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/getAbiItem-CsMO8pmG.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.530Z","timestamp":1786388688530,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/getAbiItem-CsMO8pmG.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b74b83dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034444\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:49,t7\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14013,"size_decoded":4895,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (6594)","md5":"f60d873fac1f5bdb1030e770b1272a4c","sha1":"f5272babaa93a9ca75b0c89f9aa1c15c255993a3","sha256":"7c5f30261e276f2191b1fb5de4b7a30eb3d35768128abfa6ee74094a608d60d3","sha512":"15b491127b78bb97cebfb2d814e2573819f54c4c7e890d7843a5349102e7bca0915085d221448902865688603788089870d5d5fd9eee4a338b24c3b92dcb59a8","ssdeep":"384:uue4OkEgEQl5N4kHvCvnnE9m0R5isMboxGC88Eoq:/e4OkEgEQl5pP09BbooC+x","tlshash":"1052d6eff3e671f194e581e051eb0845f264b4b1f20840a4b5982ca63fb6dd882faf55","first_seen":"2026-08-10T18:23:56.562466Z","last_seen":"2026-08-10T19:05:30.032276Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/SiteHelmet-1K7YlJrA.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.560Z","timestamp":1786388688560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/SiteHelmet-1K7YlJrA.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b77ba2dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034442\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:61,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4199,"size_decoded":2371,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (4151)","md5":"a770d9432d62c9dc9518630657cb2462","sha1":"976405bcd5d7a0d7d66ad3fafddb3eb0717d584c","sha256":"665acf8c75283a13f39816fb057ca332b0078795370e5ea4fd718a708f44b3c6","sha512":"16dd4f6c414a7744c5214c621d061fc95952f2eb670995ba9ebe427a5431fe101cadcc9dc8fbb4764937c043b543ac9872cc07f4a534de037e5063a6507bbda7","ssdeep":"96:didfS63x3lS9TAuCDiiXgJAj4rwzfVgfExwaaI1xGSmFigHCXDi:8df/x3ttpWwzfifEgI1xGSfgHEDi","tlshash":"4b8195e6d41079286fb74f329437241fb63dc18cc8fd88067aa91d090ad52d9e362b3e","first_seen":"2026-08-10T18:23:56.655233Z","last_seen":"2026-08-10T19:05:30.032958Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-P5SL845","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.788Z","timestamp":1786388688788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:06:08 GMT","end":"Mon, 12 Oct 2026 18:06:07 GMT"},"fingerprint":{"sha1":"BA:95:90:2D:24:46:69:E3:91:01:2E:0F:2E:73:5C:7A:52:38:4B:B4","sha256":"13:70:D8:3E:0B:A2:B9:38:B9:CE:9E:5B:8E:2D:0D:92:96:C6:06:EF:29:36:F4:A7:7D:E3:34:75:6A:A0:E8:08"}}},"request":{"raw":"GET /gtm.js?id=GTM-P5SL845 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\nexpires: Mon, 10 Aug 2026 19:04:48 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Mon, 10 Aug 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 173096\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":534966,"size_decoded":173746,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (34089)","md5":"920bfeaf0cd47ba94b7f8c68805033ec","sha1":"737b7325b27a97f2c8596a906fc7039723fcbf59","sha256":"10eff77fa667ce7844e9e6eff33df8e07db9b5a3b3ca07cdf4ab443e2e8330b1","sha512":"99cabf87f9d94298dc97d9aebdf69ccd738a9e9c18cdf302b968a5313fb1c802a6ab2a74f9e4d7201d4b22b9a401b09402a1d813a4b16be3edc76df178ac5a5e","ssdeep":"6144:6NVeuW2X5iZ7i+Q+o/FWDEsoGQ4xOx0fcPbvTEaI3sI6jkd8TS1LQMwkwr:6NVeuW2XY2+o/5urxac8ewr","tlshash":"c6b408ceb3ca74659396f478903f018ba97e24e2b44cd895f089cce42e7465a5223f7d","first_seen":"2026-08-10T18:23:56.708662Z","last_seen":"2026-08-10T19:05:30.033495Z","times_seen":5,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":33,"receive":47,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/contracts-CzlD5Nca.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.793Z","timestamp":1786388687793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/contracts-CzlD5Nca.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b2a959dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864963\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:39,t7\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7517,"size_decoded":2408,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (7470)","md5":"46d307956b452f864629288d82290a51","sha1":"a456122fc7cd94afe9c0bf2ef4f16f21dae267ca","sha256":"19e89b35a845a4a40f031e637fd4c739a646ff79ae1dbbb22481656f6fbb01cc","sha512":"9d7de7aad304fc745fdc1eab47f5ca83d8a5ec0384023d5015fd7b127c425b8a8e27b41abeb8cb6da1aa2d67520df076ac7cd101b188d97e18ba85221d0dadf9","ssdeep":"96:QKSrVUudROyORKOYR+C+Y829eiiHhWFPqMtxYQPtmrvFcvn/3dn2bB:XMtxYVbFcndn2bB","tlshash":"34f132e2d009b5c88d21454695c31a08d49edbd3ecdcc86be28cd93a1bfe466c62ef4d","first_seen":"2026-08-10T18:23:56.654177Z","last_seen":"2026-08-10T19:05:30.034027Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/invoice-DRtsOAtM.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.806Z","timestamp":1786388687806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/invoice-DRtsOAtM.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b2c968dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034444\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:42,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":420,"size_decoded":959,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (375)","md5":"4969d35c88c912095acbb11ffca75c07","sha1":"2224e3c4c4adab0b06b6bcfaf5d6dba0daaf4697","sha256":"53c058face8078aac128f11573cb7dfb05f9a151e8c38c3f052286b0bbd444fb","sha512":"b9f39bcb42df2c15f9be0897fb5645c46b1fa9d9242b2c4a6403871cdff88b87c6e2f921ac888d80d9d3ce96749b11ca219791c39ea381328094929fba8d2e1a","ssdeep":"","tlshash":"d5e02bcbdeb454fea02c8ec4c46653d95a12b085f3d52309f98a0af43b25059613ad16","first_seen":"2026-08-10T18:23:56.662562Z","last_seen":"2026-08-10T19:05:30.034552Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/prepayment-steps-DABH6At_.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.807Z","timestamp":1786388687807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/prepayment-steps-DABH6At_.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b2c96adfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034444\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:11,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":536,"size_decoded":998,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (482)","md5":"ced296b36e6aed56f39bdb38bd6c951b","sha1":"4136b4fa54a4eb90daca4b3d097072d83191cf7f","sha256":"b8532d6fbca22a846b189e0912b21cd26ca933de6a1e7c5457b4377046906fc8","sha512":"0a8cd72da32b6e1ca27c02aed0c83eabe5aa1963ad05260ef1c830c0a5248c77588c489b108584ca282de579a35d6a7e72fdbfe2a17c9b8656e0354ad585a321","ssdeep":"","tlshash":"04f0c0dd74d3b5aa61021712d07b44c9d738dc84c845166cb108c0a07e98472b372d2e","first_seen":"2026-08-10T18:23:56.614601Z","last_seen":"2026-08-10T19:05:30.035127Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/getSelectedPaymentMethodUnit-Cq2IP44h.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.809Z","timestamp":1786388687809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/getSelectedPaymentMethodUnit-Cq2IP44h.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b2c96bdfec-OSL\r\ncf-cache-status: HIT\r\nage: 994529\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: de\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:43,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":581,"size_decoded":1011,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (515)","md5":"a41b591f77d1679c7027bf13f27a4441","sha1":"af8b82274183b8192a47529e0819165c08c92106","sha256":"e42d092be2a64f188018f523b126a32620edad2a987c611aea6da55ee9e1bcc7","sha512":"a78a14cd7a5c1253d7aa18bc0769142c00857f68b436ab50f84ffc7a873ef57c7cdf74e571307c1d1ed4ea97cdbd7d1bea4d5879737b3da231184ed85763ee06","ssdeep":"","tlshash":"20f0218cb4fd05a1f09dde9c80335a5ad715f176a543ac9118cb0d581313b63c794b76","first_seen":"2026-08-10T18:23:56.522595Z","last_seen":"2026-08-10T19:05:30.035694Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/shopping-cart-DzysgZMO.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.302Z","timestamp":1786388687302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/shopping-cart-DzysgZMO.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af985edfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034449\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:29,t4\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":343,"size_decoded":953,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"424937eb5cade00b46c73fc049796d67","sha1":"0eb3863cfff953170beae8465c3757c2084796dc","sha256":"03a2ab2a3d153949d24732d78129d2e8d5ae77b4c2a74c69a5da498cd15a4506","sha512":"40b23aee100d5e5e96eed6156a4d2d863db9d57e7f0bc07349e62787adeeadf1c35eb619aafc36beb1be98423a312fb86de510c22749f718ba2afb55477cb2bd","ssdeep":"","tlshash":"80e02065aefe19bc16460c92612791a2975fc4dcf7174644709a43370bc4483e9b9f61","first_seen":"2026-08-10T18:23:56.731325Z","last_seen":"2026-08-10T19:05:30.036168Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/Spinner-ioUW87gi.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.326Z","timestamp":1786388687326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/Spinner-ioUW87gi.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afc872dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034448\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:1,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2075,"size_decoded":1449,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (2030)","md5":"6644266cd12a0a4c53aeee29640f4212","sha1":"a34779e78f1ee8e209e4d29aa43d168b08498941","sha256":"5e2c1d177c335396fa12e43ea0e02864de9d2f17a8edafc5f162363bcf7319e9","sha512":"9bdb7187d53d3205327da6f4d7975f988652c0f5f61e7318241f2101c9a85bd8c1d2c2341272d2abb1d670fd59fb2f7a947f93a4efe94911ece53e501acdda5f","ssdeep":"","tlshash":"84410feaf45079f8e6338aa1522d849e352ac168ce0f0db0e570a87c12344f53717fd6","first_seen":"2026-08-10T18:23:56.706018Z","last_seen":"2026-08-10T19:05:30.036624Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/canonicals-B42kG5lj.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.479Z","timestamp":1786388687479,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/canonicals-B42kG5lj.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b0b8addfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034446\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:17,t7\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1213,"size_decoded":1228,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1165)","md5":"a4045d93d7e9a3e712e6898288fc7ac8","sha1":"a9aa11430243c253fa7bca705fc88c1b02c6e9b2","sha256":"fffb6c83cb1167f4f1e5a68994682e480430fc3be740999e084e7fb9be891548","sha512":"3c667df41c0d91ed148ab2298c040cb1070243fc1cb6f38e6d460a98f27629f00b4b4d70197c978f328edecf361adf88f9f077abae1d46124f2be3e2cc9d41f2","ssdeep":"","tlshash":"76212e9f04ae21e42b2009bc92818e4eb5df85cc0196ecb8eca1e4a0f169c9130e6bd5","first_seen":"2026-08-10T18:23:56.525393Z","last_seen":"2026-08-10T19:05:30.037177Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/lib-C1nxEnBx.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.233Z","timestamp":1786388687233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/lib-C1nxEnBx.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af282bdfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034452\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: GXFLNzmCFb:660,t9\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59838,"size_decoded":14106,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (59797)","md5":"dd98c3c412352c4849777aa2b0914849","sha1":"dfc50d781c5bf9b06fb7e0eab03927d5d3e3df33","sha256":"b40329a421a0f56a7699df5c141cadfebfa8671995187316e5b5679b0368bb6f","sha512":"49032e598dc0e6621e0799462381c33a8b6477a41770670f163677438356df45262bc18324450bd45f23e13678e2eb31846788bd3700b476ba93f0bed34b2d2c","ssdeep":"1536:3F2lD+YGOUC+dpW9ANzMKbta+y71i4UAuHWXGUueejtbvVUA:3FPNgKbta+y0Au2Xaeej5vVUA","tlshash":"1943f9ca379560100bae908614b90543e3aabd9c451e54adf8ee94ef7b9dc41f3b3f24","first_seen":"2026-05-31T11:11:55.907746Z","last_seen":"2026-08-10T19:05:30.037655Z","times_seen":8,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/Notice-AyxQ5v2i.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.534Z","timestamp":1786388687534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/Notice-AyxQ5v2i.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: application/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b118bfdfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 18:23:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:23,t7\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1409,"size_decoded":1354,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1365)","md5":"c07692fc0b15e2fc212956b5813f2795","sha1":"2a880b4781f1ed8f0c15b32ecb95080658ecd85e","sha256":"be4dc57a42e37f1efa2a58bcba4b2d5af68818eca0a7133fc6dca40706f313c1","sha512":"113ba97eb0842b1096c02097bb7b917e33749f87c576dad8b31bf5a9229bc9007be29a18b963f375cc51eb2121c9a619d1f88dbb257dc710c84a61c86e4bb556","ssdeep":"","tlshash":"1e21e21bd001a2b8553eaee9e11ce0eb2339e15cc74101b4919e2d2d7b234a5ab13f53","first_seen":"2026-08-10T18:23:56.703746Z","last_seen":"2026-08-10T19:05:30.038196Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/queryClient-RoscAKm2.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.622Z","timestamp":1786388687622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/queryClient-RoscAKm2.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b198eadfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034445\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:32,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7592,"size_decoded":2975,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7543)","md5":"f5a857b7e40daaa35aad6eec68498d4d","sha1":"5a9633977d9e691d4a9cc4159bfa8866b48fe2e9","sha256":"3be474a573bc508365a7074555b0719c535bec975845a21b5f63d786c8df9169","sha512":"bbb9cb551ca7d47e169b5c42604bfcd2898daff98641e067e51ee27540890b9fc6f1d53f9970cb24dc3628fdda1f681b81f18c45664bb0bb639840206574a5c4","ssdeep":"192:8BVeHsuCNktp0Naa4nlv9vWha0GoAoFnDoI6hFXSe3:87hXklv9vWVed93","tlshash":"8bf1badab393f1760bf24443d07a81a1f2356e161c1b3028b1951da17996a0af6baf33","first_seen":"2026-08-10T18:23:56.617845Z","last_seen":"2026-08-10T19:05:30.038774Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/format-COIv72ph.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.645Z","timestamp":1786388687645,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/format-COIv72ph.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b1c8f1dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034445\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:34,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9740,"size_decoded":3179,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9696)","md5":"84418cc605029355d242a7dbb0452633","sha1":"25f3752f230b0c0b3ab618519cae92d7eb0c3541","sha256":"6e35e568de718d61495fcab48a3b346ef605b0f9426cb4f29b8a61bd4b16a3d1","sha512":"84260d38e7898d3055fefccd6484e907a60d5f4a439e50137fdeabcc0a4e12843d12a3271ce00eef5eed725a48c727a51f3eb1d71bb315848fbe35629147b84f","ssdeep":"192:qQ4TO/1gxXJGJGc1h4eMHdBhdy2lqMszc5J+KCb/:qQ4TmSxXqh4eUdvdy2EMMc5MK8","tlshash":"c212ffd4b9c3b12ea3e34e1d90751009f3ad5de1ed0e6e15f0a2c24b78a294598bafd1","first_seen":"2026-08-10T18:23:56.688171Z","last_seen":"2026-08-10T19:05:30.039481Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbgu1rfy.bitrefill.com/v2/rb?url=https%3A%2F%2Fbitrefilll.info%2F\u0026action=view\u0026source=%C2%BAw%5E~)%C3%9Et\u0026rb_source=%C2%BAw%5E~)%C3%9Et\u0026script_version=wxyz.rb.js\u0026sessionId=02a8db05-6773-4e53-94cb-414fe9a6e23a\u0026uid=rbos-5fa23409-ea72-4d1d-a29f-be4664155797","fqdn":"rbgu1rfy.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.714Z","timestamp":1786388688714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbgu1rfy.bitrefill.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 19:17:47 GMT","end":"Mon, 21 Sep 2026 20:17:37 GMT"},"fingerprint":{"sha1":"40:83:E8:0C:D5:2B:D8:A8:26:A8:FA:22:3F:C6:CD:E0:44:AF:E3:81","sha256":"D0:81:77:EE:5D:86:63:53:E7:92:5F:AB:1C:90:D7:9A:7D:A0:35:26:0E:77:BE:8F:A8:17:E4:A3:7D:FF:43:60"}}},"request":{"raw":"GET /v2/rb?url=https%3A%2F%2Fbitrefilll.info%2F\u0026action=view\u0026source=%C2%BAw%5E~)%C3%9Et\u0026rb_source=%C2%BAw%5E~)%C3%9Et\u0026script_version=wxyz.rb.js\u0026sessionId=02a8db05-6773-4e53-94cb-414fe9a6e23a\u0026uid=rbos-5fa23409-ea72-4d1d-a29f-be4664155797 HTTP/1.1\r\nHost: rbgu1rfy.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: image/gif\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npriority: u=5,i\r\nset-cookie: rbuid=rbos-5fa23409-ea72-4d1d-a29f-be4664155797; domain=bitrefill.com; path=/;Max-Age=2592000; SameSite=None; Secure\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\ncf-ray: a29144b878330b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44,"size_decoded":528,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"75e9566b8523b76993b790444d697848","sha1":"46bcf0fe72739cd1bc11b7d525d6fdaf4533a845","sha256":"039a8bb6d736466063dde3c2a80d71d54456a7875cb1654263058bc69c1c042d","sha512":"0c0f1c0395e1732bf4c41292a9a41fc121435cc651d7b0d1d51bfb13fb2bc66ad4a627c0b57482e652bf9f10b9ba3b3a283f12fb2a967e9ed2c320e73de44d01","ssdeep":"","tlshash":"bf900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03030","first_seen":"2023-04-05T23:50:17Z","last_seen":"2026-08-10T19:05:30.039924Z","times_seen":1263,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/dist-DPlGT_MQ.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.283Z","timestamp":1786388687283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/dist-DPlGT_MQ.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\ncf-ray: a29144af7852dfec-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:17,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":254,"size_decoded":877,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"26c22ae75c3360a9226367281655ceae","sha1":"976e2b99a8c5281796f4c029c24ac8236b15048e","sha256":"dad9ce4142d4c6665bbfb19943b845337b1d62cf0b13fbd04904b137b3ad0fe7","sha512":"0c02405ffe9a2b8c2a2f27134614f81dfcc9def192981314aa21b670ace3528b363710e5ad14abd0809133c675d908df1fb602e8e4c796be1f5a503d43b805da","ssdeep":"","tlshash":"a1d02b0ae6d083b0e3064cf6803691f39330f0a482898174901a8a9893a75e0b036e36","first_seen":"2026-08-10T18:23:56.691742Z","last_seen":"2026-08-10T19:05:30.040499Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/circle-alert-CqWbQ7a-.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.538Z","timestamp":1786388687538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/circle-alert-CqWbQ7a-.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b118c0dfec-OSL\r\ncf-cache-status: HIT\r\nage: 994530\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: de\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:50,t7\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":535,"size_decoded":1056,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (485)","md5":"2030230962c3b535b6c4bd1f03ace8f7","sha1":"98178a33563c1a8845356ef30ec93e119d620565","sha256":"2a3eaf7f8ee6cb5c805dfb9e137778f8d27c6c2944cfbb72a39f71f30cc50b25","sha512":"9a0e39bc8aaa70ea947bc2d2dd9730120a7e2e51b77fb52f051f3019b1132547f6780b1c51162175d8cb152b87aabd79bbee07a8d4b4d2819d2bb715f5d6e55c","ssdeep":"","tlshash":"91f08b5eea582cbeb4254d9c6a69d40bea57d296ef061504f98c26a4a2005d0b331bc5","first_seen":"2026-08-10T18:23:56.72614Z","last_seen":"2026-08-10T19:05:30.041139Z","times_seen":4,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/circle-check-big-I0clCyTC.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.539Z","timestamp":1786388687539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/circle-check-big-I0clCyTC.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b118c2dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:24,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":512,"size_decoded":1062,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (458)","md5":"f0ff46d19671d6f3be2f05a5a39babb9","sha1":"ff2c7293fc12b8923a4b51894b3b78d562234409","sha256":"8cdeb120828d777ca214914502d3c684dd7f11df7bdee7777296dbb86de4f5d3","sha512":"a99fcfcc17cd5e2833ffc6b217053222259942b1c97160178ccd612df823a83a86e949b091681013cce949795a5ef26f21ed80cb0dcf668b306d152390b61b5e","ssdeep":"","tlshash":"ccf0051fde792dbcf0164dfd9b6ea40bf65ec590af495614b3ec197442410c056277c1","first_seen":"2026-08-10T18:23:56.686964Z","last_seen":"2026-08-10T19:05:30.041687Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/useKycStatus-CkUrF60B.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.805Z","timestamp":1786388687805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/useKycStatus-CkUrF60B.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: application/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b2c966dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864963\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 18:23:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XTdDrwigOB:14,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":482,"size_decoded":1042,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (432)","md5":"6d6540d8fa89585db9f55ad2e4d7239a","sha1":"b47453cf77c3a649b1466b83998e3f610f652cfa","sha256":"eb5afdd9bce2e3367f37789df7d6932bdb2fb9466132ba7ce9538266ec4730a2","sha512":"a660c889935d49fa3bb55ae8ba466d9fc887c61a8e3b6388ccc767f11a33cc0b3fcc4085f6877d9e4b705309bac672941208dbb38dc2136b7142bce472d16659","ssdeep":"","tlshash":"42f00e88d2f810bdaa081c2de03601608abc700ae146ab38e1ff5730623c9e4d18c723","first_seen":"2026-08-10T18:23:56.718292Z","last_seen":"2026-08-10T19:05:30.04224Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/useMutation-CEuKcMtN.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.608Z","timestamp":1786388687608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/useMutation-CEuKcMtN.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b188e3dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034445\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:31,t9\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6904,"size_decoded":2818,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (6855)","md5":"0244779b5416eef7a84abbcbef3f7795","sha1":"f93c46c2fea0292fdcf8c74307520b860f7677cb","sha256":"f80052a390f371c27098d63520c0adfaad248264dfb26c60a5033076973fee4f","sha512":"99bcd94af1cb25c92e96ac01960f9919f6d4dba152fb75c67d7dfc14a49ee79f10453e478899953cb1b28c95c203e4340daee1397a53ca549a92ad84fadd177b","ssdeep":"96:wBXP0DpVsA1OXhPfNm7uJrDADCrDVDIuoLGHfxqQVZ67UTMPfEKeYgcmamKs0:I/0FVsWyHRcS5cuWGHfxqQHwArcmami","tlshash":"bae165ce961b25267dd68a80d07e022b913ca31a4c169468307dcbfa7ad054df5bff31","first_seen":"2026-08-10T18:23:56.542379Z","last_seen":"2026-08-10T19:05:30.042782Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/esm-Dtl7Cb1z.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.519Z","timestamp":1786388688519,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/esm-Dtl7Cb1z.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b73b77dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034444\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:46,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1698,"size_decoded":1522,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1657)","md5":"6cd628612b09068b0a2327427e829191","sha1":"f25c0df8398b675748d8191e6c90d8b8e80b7839","sha256":"92ab5d9b0dc2c44184a59279f0969c76c09de49687c3a266f16d0bf73b16b3b0","sha512":"d783dee3dcc09190cf005b1b971c8c4089e4425f20121ca7dc02ab9a1d7cd08d0c379723a97f4ed25124a74ad6bd020576d8d414b4d2978d6929763d2128f9c4","ssdeep":"","tlshash":"66314239b7747097235d2e8b48c794c6e17ada73504c681cf1162d172aa17f281def1a","first_seen":"2026-08-10T18:23:56.572222Z","last_seen":"2026-08-10T19:05:30.043549Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/useCardUserInfo-BuJW79Ky.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.804Z","timestamp":1786388687804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/useCardUserInfo-BuJW79Ky.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b2b965dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034444\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:55,t7\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":521,"size_decoded":1050,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (468)","md5":"b45f6e40f3ad4040453936c98009b9ae","sha1":"4b5b0c7b90eedb03f048e9c4b4d2f0a5e0e501c2","sha256":"a62a567dd05b360192df7fbeeac8f4ce1566d7c92ebfe4dbd85d62de91e8c844","sha512":"a8598d35a3ddc081720d18c237649a9883bdb62966fe87f6c73082a3d98a9716971a74ed6f91470d2cd044a7ca94a60f69caac12a4e5740027a7fb3a03b2cb92","ssdeep":"","tlshash":"c1f00587d4501cfe681e8d08c16f03895bd07851f5579f8cd4d54a7a66363a2fe53e23","first_seen":"2026-08-10T18:23:56.711331Z","last_seen":"2026-08-10T19:05:30.044255Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/chevron-left-DTvlINKS.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.300Z","timestamp":1786388687300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/chevron-left-DTvlINKS.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\ncf-ray: a29144af985cdfec-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 1034449\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:27,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":180,"size_decoded":839,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"4816ee6cb2a74b039c83e84d9d60ac69","sha1":"8c592e48d8a5bce3d4bdbea81f021f622e24efa3","sha256":"c800d330dde836e3c690a6c6851b40ce098ff2a269987d1fa969de896a0bb035","sha512":"9e7b52d68f5d3923839b616a5572eff457b466dc23217ea30788a7dcdb8efcb1be399e0c8f8bfaf98cf5445823f1ac82451a5d50ebb0fce34e6bf2bcf427e0a0","ssdeep":"","tlshash":"a0c0805ebdf42d750a440eb7615b4275894d709ce7f74d14f141175e01b5c8178ecf50","first_seen":"2026-08-10T18:23:56.692861Z","last_seen":"2026-08-10T19:05:30.044723Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/chevron-left-4pkp4afI.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.331Z","timestamp":1786388687331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/chevron-left-4pkp4afI.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afc878dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034448\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:2,t4\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":442,"size_decoded":1017,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (392)","md5":"1322cdc786f4a1686a1e317bb121a749","sha1":"a32f6210e062a9de2e56e9f52cad5f3f60cee015","sha256":"493f052e7d752c640dae777e1b016e13e0475426bb95adae473270d6cc547cef","sha512":"dc0b6d6b78d5d267603ad1a87000ab6bd10e6820e0de52839977a4f3a559e75242f907c787ea369826dce39c5433037a725942972d27bae0f63fde72ea300728","ssdeep":"","tlshash":"86f0231feea42c3cd01e4d9c9679e41fe5a5e2b0ef862104f29c057053014c06339bc0","first_seen":"2026-08-10T18:23:56.516487Z","last_seen":"2026-08-10T19:05:30.045446Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/PageContainer-DnwJQCKz.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.390Z","timestamp":1786388687390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/PageContainer-DnwJQCKz.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b02892dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034447\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:9,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":532,"size_decoded":1032,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (481)","md5":"4d66ab33c9140708b81262f138366e6e","sha1":"c9a0e0014b9aa52c66fa146804a9024c9e351b61","sha256":"0e2e26d91edf55b4bdd4937253bbae5e2e01ba2e0388ba7a5f8d6a2f628f82fb","sha512":"323f2bd97d8a3ee30a34657c102c6edca17dc02f1251fc8176c2a9e5795475a81dc0b08c607f099e370c2a01de058c7daf26a10d5b6645b1eb9e27923797c576","ssdeep":"","tlshash":"4df08b5dff121375e06bcced810d04bb6a12f257970a0a52e028c478d5b31e0a511ec9","first_seen":"2026-08-10T18:23:56.676906Z","last_seen":"2026-08-10T19:05:30.046063Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/Notifications-BAWqzzn5.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.559Z","timestamp":1786388688559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/Notifications-BAWqzzn5.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: application/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b77ba1dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864963\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 18:23:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:24,t10\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1357,"size_decoded":1406,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1306)","md5":"3cfbe993a345a7f335896931e1ac649e","sha1":"cf7abfd654a376f19eed58833deb850778d1363f","sha256":"2846915bf3f982d058357f62adbab89fe55934711bc47c1ef3c07f29f5356cab","sha512":"063962aa4101a88448c6f50bd52e2932b583cbd56f7f2ddd90854169ffeb905dcbcac143fcfa37b31934a19d85434c86c701dc4853cfa817f1f5c75fe327a214","ssdeep":"","tlshash":"7421414e92444ab0c84edceed42e60ab933ac098af098dd8d15f06811f371d1e55ff72","first_seen":"2026-08-10T18:23:56.592821Z","last_seen":"2026-08-10T19:05:30.046622Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/rmkt/collect/957004286/?random=1786388687639\u0026cv=11\u0026fst=1786388687639\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=gtag.config\u0026gtm=45be67s0v9104326907z8890364013za200zd9104326907xec\u0026gcd=13l3l3l3l1l1\u0026dma=0\u0026tag_exp=115616986~115938466~115938468~118897920~118897930~119724321~119896802~120124455\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbitrefilll.info%2F\u0026rcb=10\u0026frm=0\u0026tiba=Bitrefill%20-%20Buy%20Gift%20Cards%2C%20eSIM%20%26%20Airtime%20with%20Bitcoin%20or%20Crypto%20-%20Bitrefill\u0026hn=www.googleadservices.com\u0026npa=0\u0026pscdl=noapi\u0026auid=1324689728.1786388688\u0026data=event%3Dgtag.config\u0026ept=68\u0026gcp=5","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.634Z","timestamp":1786388688634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:05:56 GMT","end":"Mon, 12 Oct 2026 18:05:55 GMT"},"fingerprint":{"sha1":"A9:3F:6E:0B:AD:3D:D0:80:52:15:1D:D5:E8:C7:78:BA:77:A7:82:4B","sha256":"F1:7B:9C:4B:5F:76:59:53:51:8B:60:95:36:73:6F:F0:DA:9D:43:63:A0:64:4C:CD:48:FD:44:DC:79:FC:F2:DA"}}},"request":{"raw":"POST /rmkt/collect/957004286/?random=1786388687639\u0026cv=11\u0026fst=1786388687639\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=gtag.config\u0026gtm=45be67s0v9104326907z8890364013za200zd9104326907xec\u0026gcd=13l3l3l3l1l1\u0026dma=0\u0026tag_exp=115616986~115938466~115938468~118897920~118897930~119724321~119896802~120124455\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fbitrefilll.info%2F\u0026rcb=10\u0026frm=0\u0026tiba=Bitrefill%20-%20Buy%20Gift%20Cards%2C%20eSIM%20%26%20Airtime%20with%20Bitcoin%20or%20Crypto%20-%20Bitrefill\u0026hn=www.googleadservices.com\u0026npa=0\u0026pscdl=noapi\u0026auid=1324689728.1786388688\u0026data=event%3Dgtag.config\u0026ept=68\u0026gcp=5 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bitrefilll.info/\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 10 Aug 2026 19:04:49 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":593,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T20:57:30.364837Z","times_seen":17824307,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":2,"connect":26,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/react-dom-PbOyG7e2.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.266Z","timestamp":1786388687266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/react-dom-PbOyG7e2.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af6848dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034451\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:10,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3587,"size_decoded":1982,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3540)","md5":"c875f93e7ecd3a3b3b91561540b0fbb2","sha1":"f95ddfb12cdd5d474314bd3da5ca43bcc453f127","sha256":"9485a0383103ee506186123ad1462751298d41496c4aa9162d88e51c9de1044a","sha512":"aed2fbffb8775ba1bdd90f0877739ff4a3f8e65419ff99f8eb411f8ed591ffa4172031408ac5d40ebf4824ce297c7cc3ee11ac114a22d4173858f1548eea49a2","ssdeep":"","tlshash":"c5713459d5c0b4434ec3591051bfaf57b2d437721cefc2a143b2d9b199a3a09057ef68","first_seen":"2026-08-10T18:23:56.632365Z","last_seen":"2026-08-10T19:05:30.047216Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/subDays-BQKMrIGc.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.669Z","timestamp":1786388687669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/subDays-BQKMrIGc.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\ncf-ray: a29144b1e8fcdfec-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 1034444\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XTdDrwigOB:8,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126,"size_decoded":794,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"f629c4b4c8d2b08cd50a52e82f9ae036","sha1":"3f705b6470369a23cd1f86e83d2eda5361237084","sha256":"f8e4f936f5bb7547fb0d48dc45c0e73cb09509eec13afaa5c93d1409c6a06815","sha512":"29232288a65ae95c7d07d8112b85bc6ff5cea360b6b546ab3d47f4d184068df55742f75384e6dcd0cd0dbd1c234d5d073acde3ae642f4cb85fd96d419237ce37","ssdeep":"","tlshash":"a9b02b89a1f0633207148db4003501c7d33c72c0f38808008000441825300a1d13ae2c","first_seen":"2026-08-10T18:23:56.644699Z","last_seen":"2026-08-10T19:05:30.047736Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/billCountries-FOM3L0Z_.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.599Z","timestamp":1786388687599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/billCountries-FOM3L0Z_.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\ncf-ray: a29144b178dddfec-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 1034445\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:10,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":123,"size_decoded":800,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"ccaeba593227ecf916381e43b6580e34","sha1":"3dcc5e3c4b9f1366c8dcd8844177e74348fa09ec","sha256":"8e494665bb37a5a5e9adfb7399fda6bb74517ab84bae47dee96337ece0e6fdb5","sha512":"47e91b7c6390c536f8ad781f4aaf6000fa170506cc8c1da71206196baecc36af80aa11af671d35eea80e17841173ac65680790f00d385ee5577a97bdb4c2ea7b","ssdeep":"","tlshash":"22b02b12cc7045b9e0150dd7101d0c13401c6480ce9400082440567c09314c2c034a34","first_seen":"2026-08-10T18:23:56.568568Z","last_seen":"2026-08-10T19:05:30.048195Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/ethereum-logo-BqbY18CK.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.571Z","timestamp":1786388688571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/ethereum-logo-BqbY18CK.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b78baadfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034442\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:26,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1252,"size_decoded":1301,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1201)","md5":"6390fa8a339358300a802f49024a7197","sha1":"2c216cf12ff1ece0fb2b0a1acc75c64d49fad749","sha256":"727bc7967894de8abe3ac59b868086b98bfff942011e30e14b9eafe88756466a","sha512":"e8f5b84be301815768e284e0849bd591c59be0f6878c1010351d9729029f1a6078d76c70412b53b61150cc1e06e55f7fc193375bbe78af5d7f75e75bb5b5004c","ssdeep":"","tlshash":"4221f0de78601ef4f10c4ef9672b251f7b2b90f01b664564748c2c08d1525c4971dbca","first_seen":"2026-08-10T18:23:56.597471Z","last_seen":"2026-08-10T19:05:30.048841Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/index.module-Qx_6pXEI.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.521Z","timestamp":1786388688521,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/index.module-Qx_6pXEI.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b73b78dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034444\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:56,t7\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17030,"size_decoded":6352,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16980)","md5":"fe879133bc4c0f4f1ec334596c728451","sha1":"d09dfbabeb8db3582c0af2dfe179d8a738c7b192","sha256":"783e53abb5ce53b5db5302d5c6381fa4f3c04a37b2599c48d6037ffd994ccaa1","sha512":"82d4160177c29c76d46f7ab478599a9798041fdd11d42bcd34aa7969189d96e61bb17e443f812e3c46904591a58ec057bddb3beb1f9f863c85b694e32f58b2b2","ssdeep":"384:UF3BeXNL88/wOCGKiusgw13wAtJW0P/Wcs4U8qpqg7qzuVmDP+Dv:iBeXJ8XOjPdqdjVmDP+b","tlshash":"7272d8e8b1d2f0724b8278a4813fe409f2b72858ed0d60adf245c1e16d798499677fbd","first_seen":"2026-08-10T18:23:56.625825Z","last_seen":"2026-08-10T19:05:30.049428Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/account-lreSDn0k.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.257Z","timestamp":1786388687257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/account-lreSDn0k.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af5840dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034451\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:5,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2689,"size_decoded":1399,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (2644)","md5":"8dd5fd0df7bf87b26bb6ecd762adc92d","sha1":"e91c3c893c7b18c2c9e634bf3c34e1685ca594ed","sha256":"d02829020f9049ff37c0970d794d3b8d4ddd29310c7d20d591ee99d450f38544","sha512":"4d724e0bbe56460c2a97e66a0dfb526cf46a02078432d61ac8aef38ac11462f1ffdb14e277a8e9a4399dfef7f8a6f800baff4bc6527a5e634267ff07050ab958","ssdeep":"","tlshash":"13513096e4bd80cb4e195b25d6edb78d9d71801eb2b3852cf6c48f5c1a4c3427601f42","first_seen":"2026-08-10T18:23:56.519821Z","last_seen":"2026-08-10T19:05:30.050095Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/dist-BisuEsMI.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.289Z","timestamp":1786388687289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/dist-BisuEsMI.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: application/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af8855dfec-OSL\r\ncf-cache-status: HIT\r\nage: 16811\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 18:23:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:20,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":589,"size_decoded":1092,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (547)","md5":"34d0cb01c7f769a75f85a1ebf80c7a5a","sha1":"45570ba8316fa10826b1f3b2a33a901176957707","sha256":"2aba84a3ecca7ea98d63d85ac760a66424c46913772cf98434df33707158a415","sha512":"6c96d661f8c6e702c1dcefa713626fe03bcc93e9c74f43c5d49db2b2ebae50cf852792d241bb8c8b7c5ae9830c8e93c23a76d6f486d97b727068685348f84552","ssdeep":"","tlshash":"c3f041337ff070bac25480a3903f28b2d03c80a84a0a871ac0585c0f18070f2e8b7f38","first_seen":"2026-08-10T18:23:56.720998Z","last_seen":"2026-08-10T19:05:30.050715Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/SuggestedCountryPopover-Do6bWZRC.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.504Z","timestamp":1786388687504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/SuggestedCountryPopover-Do6bWZRC.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b0e8b2dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034446\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XTdDrwigOB:5,t8\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3151,"size_decoded":2137,"mime_type":"text/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3080)","md5":"22fc9f0dc8eb908d8a19f74f46303071","sha1":"b8d1d595a7929c4f737fd2130f36365852bd0ced","sha256":"9c618580c534c5f62be30361907f5021b273fb1a8607da4ce92c63048055bff7","sha512":"a93c8eba33255305835ff2247d4fa7df60445031c65c6dbd9807019d310172442681a390b2b6d63159982e2a6875c80e7a4bbfe0e79ae333f2e420cbb5f8fdeb","ssdeep":"","tlshash":"4951770fc86467f8f46b99f8a025903e67a794fc970910d070ea0bd427579c9b58bf93","first_seen":"2026-08-10T18:23:56.526319Z","last_seen":"2026-08-10T19:05:30.051777Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/embedded-session-aHgFvcnu.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.791Z","timestamp":1786388687791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/embedded-session-aHgFvcnu.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b2a957dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034444\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:53,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8483,"size_decoded":3746,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8429)","md5":"36012dc0e6d78fded8cbfe933f103b55","sha1":"f91e11c49f7f19ab96717d32f80090538e99d9ce","sha256":"91f5883d10dd9e8b9079da0db2dc9146d0ed8f389b68c09f9a8ba6717d0d29af","sha512":"e4ace4f0395b12bbb260b2392e54ba34d05c94b2f4edbf4ae0e684ceef20d9f2447e8edc98b660f3e6eeaaabefdb8439778e7036553c965329f7b74243014c1e","ssdeep":"192:7WX49CmkYJv9BqDvw9zU5bfurSG4G+WOc2M:7WgCmdJlAjjTM","tlshash":"a602c3d930d8f638d2fc5b5884320728636dd492e04d207cc8aa9daa17b6d33cdabd35","first_seen":"2026-08-10T18:23:56.513623Z","last_seen":"2026-08-10T19:05:30.052459Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/SvgImg-DXExHsfX.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.445Z","timestamp":1786388687445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/SvgImg-DXExHsfX.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b088a1dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034447\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XTdDrwigOB:4,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":265,"size_decoded":912,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"00689e86a45ac693a4b52220473a4a92","sha1":"103ef1615ade5da4868fd153922c6c6e02d306b8","sha256":"4d7ed24bf3afd20b9b7155fb01c6a313b475f984269ea28153e10c6d53fd62a6","sha512":"be6d0a339172f1c65cbdf23f50cc81f99002ba523170642ed55bc578b206c29da5dcc794dcf4c001963def3e56acf9d6434ca1d625284ad4b0f56c16a87bcfb4","ssdeep":"","tlshash":"7dd02b5ae9bd342cc0342c1b901b496f7525e64577924154c651aa6d12508926d71594","first_seen":"2026-08-10T18:23:56.581793Z","last_seen":"2026-08-10T19:05:30.053085Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/Command-RT4COznN.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.514Z","timestamp":1786388687514,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/Command-RT4COznN.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b0f8b9dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034446\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:22,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34628,"size_decoded":11972,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18116)","md5":"28efc8bf246cbac7c5ce31d882bbcc8c","sha1":"8168abfe2a1f9edd9044319320c725083e5884ff","sha256":"bd724f3c9b0c71dca2795c79a284279f8bea922e014cd314301bba97d9c8dd3f","sha512":"198a4147b4ecba0acaeca81a9f7e33fbeaefbdb5595231970e98a9eb3890a712f5264dafb5181bb48bd230e19f7ddbc584d63cc5afaddeef707fe475680a6ed5","ssdeep":"384:FYzhDjuLP8gZ8RR8X2DVhtP/Kx2nAC69g0vdsAtUyRsNSa:Fu9gpmD9P/pAC6m0FsAY","tlshash":"a9f2e8e53155b470e3de815a906f462eb73a2aa5a40e0418f039dc4c3939e81e7f3fa6","first_seen":"2026-08-10T18:23:56.652988Z","last_seen":"2026-08-10T19:05:30.053551Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/bitcoin-maxi-mode-kdOaRARI.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.543Z","timestamp":1786388688543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/bitcoin-maxi-mode-kdOaRARI.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: application/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b76b93dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864963\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 18:23:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:18,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":643,"size_decoded":1162,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (588)","md5":"6dc79e4ef82e5b683553291a93a5ddcf","sha1":"3f96f5b93247065ca3f83a0697c2204ada5d6e0d","sha256":"00eb82db5afd2b075488e59af9457ec3995cead7e05d68ede7f5938848d8fe28","sha512":"b617d0cd3a3b1f667c43fd4a3f9d1dfd91d99a70230097843d84edf42269c52c8e48c23ac2ecbf5c6ae4cbb0ed19611f8c04748dd8f8d1797c139b3fae89c9fe","ssdeep":"","tlshash":"68f09e4bb0f13cb8e1a9c4a4c0191d164108a5e856881a87501e98e4b6391a44977dbe","first_seen":"2026-08-10T18:23:56.582999Z","last_seen":"2026-08-10T19:05:30.054065Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/Spacer-D9WuVlau.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.327Z","timestamp":1786388687327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/Spacer-D9WuVlau.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afc873dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034448\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:44,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":383,"size_decoded":985,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (339)","md5":"724c1fcf2cae1e3c26c8e5c96492b304","sha1":"e8f91ccd3e9c7790f85c847dbc5a1e7e68039822","sha256":"6d6bf192bf83d11085f30052206e655a63e7f7bf14fd31eeb301a359dbb46fb6","sha512":"b724c0251a788f04fff5ad028a3f73faa2a40413e984d273ad4f2c2993dab904efbf7093bdcb5252c03204363d749ff6675d7a33baca73620769447d5fa80217","ssdeep":"","tlshash":"e6e0f10a9c606a36c0325c48e3580e8726a0ebe0c306315cd2b48d65076a9f0e630e40","first_seen":"2026-08-10T18:23:56.588894Z","last_seen":"2026-08-10T19:05:30.05462Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/utils-Qh1JnU48.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.529Z","timestamp":1786388688529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/utils-Qh1JnU48.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b74b81dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034444\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XTdDrwigOB:15,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4486,"size_decoded":2393,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4443)","md5":"f9c5dcc1ecd608d2095f5cb458529932","sha1":"f8d1dd4ce74c37c85885b815719c0e17f3fea967","sha256":"74dcd5c088d626d3643b1bf97e1c100b92c40ac8a32f4739d235a22a79efeeb4","sha512":"7026920ba30f404eb6b80871409e183457f35fe2d24735ca6aa792cbacafabc8c6b45a516843ebe8e2dda41d345b7270456a6253d804ef84ac7313fdff4d5ae3","ssdeep":"96:zE9NXTq+mse/huLo7Do458CUh8hz4NKyz+x5kYs:QnWxhuLo78458G4N8+","tlshash":"bf91529d3796f073c35b19b2846fc40be13a8876046d0d28e155585371babbc85ebe3e","first_seen":"2026-08-10T18:23:56.599324Z","last_seen":"2026-08-10T19:05:30.055062Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/debounce-Bvp8t2V2.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.293Z","timestamp":1786388687293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/debounce-Bvp8t2V2.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af8858dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034450\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:23,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1072,"size_decoded":1234,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1026)","md5":"65bc031a80a73185ebb6c8688c2a0b30","sha1":"8e678e9fa188ac8b637f63b31f942979a4bc48ce","sha256":"311053abc1a5c1d7bc670f1035d6484b016612e80f456d167ef5e79741d41dd1","sha512":"0af5d74c3c9d946f9af09ceb4614d0f40ffb57717e28e0e842ab99eac60544161f2a17c0926f75a2a84ff890325ea3e0cbec8f28b3345723394c490f91cc9224","ssdeep":"","tlshash":"b91120dcb5c6b8e27792c836d0bf551bf13a7990488c4050e12391927a3067efa53dbe","first_seen":"2026-06-11T21:29:59.390293Z","last_seen":"2026-08-10T19:05:30.055573Z","times_seen":5,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/AnimatePresence-IdMP82Da.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.307Z","timestamp":1786388687307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/AnimatePresence-IdMP82Da.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afa861dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034449\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:32,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3309,"size_decoded":2188,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1938)","md5":"37c6848d9de63a72c0b31ec07cc487b6","sha1":"a2d361c3ca292f6fbaa45ad739f65616c684203d","sha256":"9b42b617ee8e976ecf7dec9a1ecf555e86a04d7520e06f9969edcf34edd11cf7","sha512":"b2aedfd779373401270915c314186e83fda3f7f286165dfb4980aa8ed7a56b6be7c325646d2f8af84bea9ccc34568adb3ee8a9a4e195faa1d0b7ac0a87cb218c","ssdeep":"","tlshash":"c4614369a1e13573a79e80ea813b467dba3b640c150e8818b27d7d8d2b508d1b0f3fd7","first_seen":"2026-08-10T18:23:56.722759Z","last_seen":"2026-08-10T19:05:30.056147Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/credit-card-CmWg8zZj.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.336Z","timestamp":1786388687336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/credit-card-CmWg8zZj.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afd87ddfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034448\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XTdDrwigOB:1,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2311,"size_decoded":1757,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (2262)","md5":"df75d99925d119505dedee0187511f54","sha1":"1a47e632118438461bd56ccabd2785aec6841cd0","sha256":"da1ce990067ee1ca8d933393dfb3597ecb7d1924bfb93d01af8c89ea56ad8709","sha512":"1578a31420252ef9f130f2e952f6dc6b9f6f8bfb58d5c881446032599fcec2b2c583567a55157657dcd853516cf9b4dae1de4a84a69b3e72dd7bb7334dc07807","ssdeep":"","tlshash":"52414434e0d06cfc94378feed12aa25ff72d945cd7040638a99a2a1c2b411c47b17f96","first_seen":"2026-08-10T18:23:56.558269Z","last_seen":"2026-08-10T19:05:30.056591Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/Card-D7NoI5A8.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.444Z","timestamp":1786388687444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/Card-D7NoI5A8.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b078a0dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034447\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:46,t8\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1072,"size_decoded":1241,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1030)","md5":"975147fff901e4b7e75997e289ecebfa","sha1":"5790623967c2a857567ccd6b9b9824b33b9e5d6e","sha256":"3299bb49b762287fe3fdf662f2ce2f3be72efca86e6db95f54a29acee2f52a9b","sha512":"2e6a301750290f7c48e570f9ab2d5d6aa416923156b167fe4531131a8ad8858a388003d549a2455cfd14d62e1034e6671c9a492e264d3468e0054b9659f1a6ad","ssdeep":"","tlshash":"bb1119d67ce11079d03fc8ea319e0d6a52017895ef425715f097f564d6274f497d0c15","first_seen":"2026-08-10T18:23:56.620921Z","last_seen":"2026-08-10T19:05:30.057056Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/authentication-B60Q7coY.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.606Z","timestamp":1786388687606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/authentication-B60Q7coY.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: application/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b188e2dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 18:23:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:30,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18144,"size_decoded":6446,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (18092)","md5":"d440fae2db0773974092be5be7ea4e57","sha1":"91dc60214d4694912bbd80a0fcaa9a1d03c9ef04","sha256":"cf8c0de6e2e05579faded1137eb26101459cae595a22702a36f1c4f089e01cd5","sha512":"e36c8253df06da6424896a793bce0719a0a2092178bbc5c72f2d06f54a6d4c4fbab8fb45f56def7668d134b82f87c0bc5a43eb2827d6be2e6c97081691c821f4","ssdeep":"384:+KY5uAv46V136BPEI5J16wvu0JBqNRtaHPwZfhgV:+HIAv/13oPrUwvVyxZGV","tlshash":"9b822c967256102f1e0c8a69e0bb5255f3f188c9ee1dc6ecb2a64d6c21504c4ff67fb1","first_seen":"2026-08-10T18:23:56.560668Z","last_seen":"2026-08-10T19:05:30.057564Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/react-router-navigate-9_h_rCp5.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.801Z","timestamp":1786388687801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/react-router-navigate-9_h_rCp5.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\ncf-ray: a29144b2b963dfec-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 994529\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-language: de\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XTdDrwigOB:13,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105,"size_decoded":780,"mime_type":"text/javascript","magic":"ASCII text","md5":"1c20e7d02c1a2e323c9bab594d311f52","sha1":"8b6bcdd3bc22060b0257289a53f922c0c7d28df4","sha256":"5f624dddf3ad17325fc5f3a9d39235a5e771202bb9d069846d2fb0ba901b1e49","sha512":"0c52ad515b296cb8f277bf4dc13d9209e72a666912172ba4e0dc0047b7fded7800e2e7db300b82681d190c01ff943bf88cf38d9d7ab6c1b2d255951688815556","ssdeep":"","tlshash":"60b0122ed8f52af1683a0d3ec0572496891ef08fe72702c4a0c4e2900572cfc6828d64","first_seen":"2026-08-10T18:23:56.517421Z","last_seen":"2026-08-10T19:05:30.058208Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/sha3-DzbArCg6.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.527Z","timestamp":1786388688527,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/sha3-DzbArCg6.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b74b80dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034444\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:48,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3112,"size_decoded":2088,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (3070)","md5":"070bbb6715c5399ca16dc8efbe470323","sha1":"d45f71c376ce801951e07203f24f98b50c486df2","sha256":"07b5a369f433b114877624b593875cd8ee5920664761acd019be045a9350eb28","sha512":"3cd5b8a7189e2ab1fb822ec875a5c7e664a55967a124403df77e11873aa4b0a24d9145be939e964a2c26687a76ab3df7dd74066ab6dc50460885e7612d769b64","ssdeep":"","tlshash":"ae5133a9132515badb8c87f70d284465c1b1f8a434090e1d7bed29eeee620ad00fce35","first_seen":"2026-08-10T18:23:56.663532Z","last_seen":"2026-08-10T19:05:30.058698Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/classnames-B751lt5l.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.231Z","timestamp":1786388687231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/classnames-B751lt5l.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af282adfec-OSL\r\ncf-cache-status: HIT\r\nage: 994533\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: de\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: GXFLNzmCFb:653,t9\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":868,"size_decoded":1194,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (820)","md5":"def955f84c8fed15ae300491d6e0e1c9","sha1":"ee849557b8be2e73f3cec1e1fcbee119c457d9e2","sha256":"174305b42eb6635680d25c96d9cabe9044947c45cc0350cad3bb09d966936f0d","sha512":"e67e9962c5edfda11b08f3c62b35b5e1b2cc176c75204ca4b6a749a8a4c86166ece8beb35fa96fdbc029f06305ef2bbb80cd2346b94a2fa1bb04d3235feb7c26","ssdeep":"","tlshash":"5d1100d536c7716553630421403fce06f238bdd289dea581c295d9e47daa8ea9113e3a","first_seen":"2026-08-10T18:23:56.546536Z","last_seen":"2026-08-10T19:05:30.059314Z","times_seen":4,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/translation-bQZTWP5U.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.255Z","timestamp":1786388687255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/translation-bQZTWP5U.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af583fdfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:3,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":385,"size_decoded":923,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (336)","md5":"aff9c53fa6154ac3db6f80a04077b04e","sha1":"54a3a134ded0ac0e3e596b3d70b8bf04df967098","sha256":"545621b022984baacf9571e6a6d6d00bf98bc1241972af3a3335c709597c4dec","sha512":"8c5b9fa83954c585c1467c8e757a304930695d16288bf9aa56e8a578e7ddb067508dcf38a5b241584c0916d9324129bd58015e963f3cfb1454bf2540d604b1c3","ssdeep":"","tlshash":"97e022ce3dd6f360a78b4624d0b2e48bf2694688007e1c5883848061b83083c72a7ef5","first_seen":"2026-07-04T02:32:37.495986Z","last_seen":"2026-08-10T19:05:30.059852Z","times_seen":5,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/hideForUtm-QHo2shZK.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.492Z","timestamp":1786388687492,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/hideForUtm-QHo2shZK.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b0c8b0dfec-OSL\r\ncf-cache-status: HIT\r\nage: 994530\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: de\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:19,t7\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":328,"size_decoded":959,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"08512e2d551b9961b173c1b1cac7ebb7","sha1":"18d2fece60973a2810997b008e7d9051a2fea750","sha256":"0bf0800b74f21767dd33b445c0d21c3a09ec4e151d6bc85c7bd65ee6edae932c","sha512":"327a7b2c522e3b582087c7fbffa9274599aed40ddc66cd2b8764e257c39f59ae8f19d53e1b904adc34674331ee34e7155ece66407de5ad43ee28962b11ddc2d2","ssdeep":"","tlshash":"99e02867f07d24e125d30074813b0f80f12a9050555cc4f5764090141676ce3f23ec4c","first_seen":"2026-08-10T18:23:56.606176Z","last_seen":"2026-08-10T19:05:30.060562Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/mutationOptions-Cwy-JuHf.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.244Z","timestamp":1786388687244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/mutationOptions-Cwy-JuHf.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\ncf-ray: a29144af3833dfec-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: GXFLNzmCFb:665,t10\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91,"size_decoded":767,"mime_type":"text/javascript","magic":"ASCII text","md5":"2d2e0f6c34d542ed9ad409807490393d","sha1":"ab7d4078f2e36e2570cb85e44365a0bf84a40356","sha256":"7f2bfa9aaa442ed1e6390989ea6595538659573427032971d639d87600f22f10","sha512":"26ad33c2c99930d45e21a92a9c135570df7e1110c543ca0b4183fa8cffea1963b48acfd0f14f07b09f1101d349c3a7acc5514774b13ad1f2be78c27f067a6ed4","ssdeep":"","tlshash":"9eb012ce74f1b7f068630c25411b0586513ca0c4f1064238500844752460460e526c27","first_seen":"2026-07-16T00:57:04.802901Z","last_seen":"2026-08-10T19:05:30.061063Z","times_seen":8,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/gift-Dl7hei9N.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.337Z","timestamp":1786388687337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/gift-Dl7hei9N.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afd87edfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:4,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":642,"size_decoded":1100,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (600)","md5":"c39dd903cc355fa471883b89098f0912","sha1":"f2ed5eeb726a2cb0b3caefb46063678d1ad0f019","sha256":"408f50a12993bf34a909b4b4372912c587358e58984efae75a55f1eb4466b00e","sha512":"58880971d21938710383efe91841efd21de1a0ce041756a362084d84b5a407c44890ae2f05dcc5ce568dce8a760fced293b5406e9cd5abc72b3f2de2da7c2727","ssdeep":"","tlshash":"9ef0762fce681cbcb41689ad6a1da50ea71fc2a4ae9b1518f65c643412020c0ca77bc0","first_seen":"2026-08-10T18:23:56.555304Z","last_seen":"2026-08-10T19:05:30.061776Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/useCard-CLFs-38b.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.802Z","timestamp":1786388687802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/useCard-CLFs-38b.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b2b964dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034444\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:54,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1575,"size_decoded":1324,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1530)","md5":"05ae25b0bad7294e9868eeed8cddd85f","sha1":"8f9f27bc53b42fba0ac25c7c9c4ca8c22e83bf98","sha256":"1d44b5416d8c268f7af55e204020c6f9fb06386d8df066cb6cfde1b1ff18fd29","sha512":"ce2a947bf8d5aa8417b7a4c89a66b4571bab430790000d4febd561a02f90cd0c7e3a10949589febc7bd8ff9f9ba7e7b18afbef2c77acadb910146f5fa6bc98d0","ssdeep":"","tlshash":"84318a9f78e3366d594bc92650bd017a7c7cac66f21ccfa0f748826a0710059d6373a7","first_seen":"2026-08-10T18:23:56.714574Z","last_seen":"2026-08-10T19:05:30.06287Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/Flex-W2mEdYhm.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.321Z","timestamp":1786388687321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/Flex-W2mEdYhm.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afb86ddfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034449\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:42,t7\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1120,"size_decoded":1224,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1078)","md5":"7791a1b08519a893dc5cfb8695b4ca95","sha1":"907bb8772a9095d08a34c5878204748929fcd371","sha256":"cae0859bc2063c228f112ef9e7c545cb91ee58f5ab36aee70a9b9b46324c24f9","sha512":"cb2eba28a720bed88040c8302fece0b0fa02ca738696c9666a8591a90178f3fa1b166848b64e3a64a3a6b630ccac91cd33e76fbcfc18037cbbae2fff611c885e","ssdeep":"","tlshash":"5d213027b9206334f137d4f9d2ae2482d7d3a5999296145a816f416e83a20a60b3cdee","first_seen":"2026-08-10T18:23:56.637252Z","last_seen":"2026-08-10T19:05:30.063835Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/card-Bc_2SYTV.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.414Z","timestamp":1786388687414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/card-Bc_2SYTV.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b0489bdfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034447\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XTdDrwigOB:3,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1582,"size_decoded":1377,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (1532)","md5":"7786983ca350ead8b984ede17353be4d","sha1":"768f46f042ab31693e3fde78fe2c1bfeac520336","sha256":"2be070fd51a5b64df4e130899ea03671978f03bc53eb73d05734511e4f1aed12","sha512":"e2f4ee4ca7e660f92c4fc211e9645042c7dc4ab422575c928235dda58e50ea83416dd92e36d0abf4cddd3a27242a219f8060c3aebbde71228912a92519f5cf3e","ssdeep":"","tlshash":"863123d5bd423a7d53c7471e81f59040d26576e86c4f09eed88cf3192a33ba443f4a92","first_seen":"2026-08-10T18:23:56.685626Z","last_seen":"2026-08-10T19:05:30.064491Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/Connector-CqCScl_W.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.569Z","timestamp":1786388688569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/Connector-CqCScl_W.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b78ba9dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034442\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:58,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12452,"size_decoded":7195,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (12405)","md5":"c5e7e591295cf6effc9f3846174e62ed","sha1":"b3df0b6b5caffdfc4313f55836804d155d52529a","sha256":"3c64ba34ca13c199e3e4752189bfa05a879e71888b88c400ad9fc8d491da3329","sha512":"1d9e9fdef756f912b81311a8d5a316b72c5fa094472faa4307436e40bdd09579117a9eb12f916ea4888343c4a7c613059dea48da4d7752708f29d33f90d9f534","ssdeep":"384:THGok0wCj44SvIoOR/MfC37T0XSuIip0oZP6vh:jXtjdSQt0C37T0XSuIip0oq","tlshash":"ec424ce9da38117c5e065fec853910ab1b1df0eaf712d365f7594f319420746ee10aa8","first_seen":"2026-08-10T18:23:56.587912Z","last_seen":"2026-08-10T19:05:30.06509Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/cart-BvbGaxU9.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.237Z","timestamp":1786388687237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/cart-BvbGaxU9.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af382ddfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034452\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: GXFLNzmCFb:658,t9\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13199,"size_decoded":4937,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (13157)","md5":"0a28b6b1f5ff39489b59fed738452b27","sha1":"d31589ff9952d2100e80a86ee932bf99504f8fb1","sha256":"2f849d66c37cc379c4f3349599ff3c77da9129e244405e90bcb100e49e040cc2","sha512":"0c421277a73ccf03e25d7c3514f3a488bb028a8f237757b909c8503d0b258e1de7daa90a51162765c5b02f1164ec109d6c89985f230a2bf71fa8d99812b7b5e8","ssdeep":"192:GA2GxhwGoZ9SSMBL+VIwc+PyF1AWgPPtp6akMHZCG/20hSwLuq7b:GADhwGC9ZMkVI/+PyF0ntp6iHkyh7Lua","tlshash":"7352f8cdb6ffa0393aa94a70c07b0696a33df847d80d4464f219a964379051797b3b3e","first_seen":"2026-08-10T18:23:56.641222Z","last_seen":"2026-08-10T19:05:30.065848Z","times_seen":4,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/lazyPreload-DB6cAYND.js","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.178Z","timestamp":1786388687178,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefilll.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 12:59:55 GMT","end":"Tue, 27 Oct 2026 12:59:54 GMT"},"fingerprint":{"sha1":"5E:7E:3B:2D:6A:52:36:1D:0D:AB:E3:B3:E5:4A:D0:A2:71:6D:29:38","sha256":"EC:76:1A:7A:EB:6D:5B:0D:56:5B:44:A3:62:68:DD:68:AF:63:DA:23:03:A5:40:82:6A:AB:33:C5:67:B4:76:ED"}}},"request":{"raw":"GET /lazyPreload-DB6cAYND.js HTTP/1.1\r\nHost: bitrefilll.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Jul 2026 12:56:49 GMT\r\netag: W/\"b52-657bf7d1fa35a\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T20:57:30.364837Z","times_seen":17824307,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"bitrefilll.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/bitrefill-card-04tcagp7.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.667Z","timestamp":1786388687667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/bitrefill-card-04tcagp7.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b1e8f9dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034445\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:36,t9\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":623,"size_decoded":1063,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (571)","md5":"d3b137e0b0d151f268b564af29e84758","sha1":"f49cda6fe316d96adffc2fd1046afc07fc777976","sha256":"aced25da2b4d075c000e1d440321cc723f1f6c0c0f7ee5d603984b214a781a3c","sha512":"adc73854bd51dba77258861ef91140915ec33c9a3230457f67eeeef277dd7accd5558be6e81e0388095b9ec155d9198ebe2507a566d6cdb184bd52d3034bf8a1","ssdeep":"","tlshash":"44f07dceb1be20f87c278c1cc037166b92397902405ab1f0a0639621293877c9357617","first_seen":"2026-08-10T18:23:56.713531Z","last_seen":"2026-08-10T19:05:30.080554Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/Text-BvFhsgLk.js","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.168Z","timestamp":1786388687168,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefilll.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 12:59:55 GMT","end":"Tue, 27 Oct 2026 12:59:54 GMT"},"fingerprint":{"sha1":"5E:7E:3B:2D:6A:52:36:1D:0D:AB:E3:B3:E5:4A:D0:A2:71:6D:29:38","sha256":"EC:76:1A:7A:EB:6D:5B:0D:56:5B:44:A3:62:68:DD:68:AF:63:DA:23:03:A5:40:82:6A:AB:33:C5:67:B4:76:ED"}}},"request":{"raw":"GET /Text-BvFhsgLk.js HTTP/1.1\r\nHost: bitrefilll.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Jul 2026 12:56:49 GMT\r\netag: W/\"b52-657bf7d1fa35a\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T20:57:30.364837Z","times_seen":17824307,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"bitrefilll.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/dist-DGK6IST7.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.282Z","timestamp":1786388687282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/dist-DGK6IST7.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af7851dfec-OSL\r\ncf-cache-status: HIT\r\nage: 994533\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: de\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:16,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1204,"size_decoded":1312,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1162)","md5":"f12670fe7bc20fef028d7a13519718b9","sha1":"286673f76de885f121d62ef71048547ad9b84e66","sha256":"539421d96db5e84a49db4c3694d49b183af6884e6a250660aa2b47b3952743e0","sha512":"e770d69288f3de129766413107fd5195c85fe4c965d0c55cc33ab09ddc68b1e42dde363b1df9ff4fefa90798778a4564735a31a8ea45492c5d562f193c5fac5e","ssdeep":"","tlshash":"b021b4c9b0f03c30c3ce4458d0eb407a3331ba89c94a468721376c06bbb04b490b7f9a","first_seen":"2026-08-10T18:23:56.564048Z","last_seen":"2026-08-10T19:05:30.081121Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/dist-f6qvBvie.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.565Z","timestamp":1786388687565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/dist-f6qvBvie.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b148cedfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XTdDrwigOB:7,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3723,"size_decoded":2237,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3681)","md5":"f40129760cf9040d4080cc36cb49af3d","sha1":"88c476593dfaf0c01a7e816fe7a48cd055354a4f","sha256":"b270ef3b49e403094cdd817fb652b8668954352a7169758d66a46cf9ed9128eb","sha512":"f67fd1acfc61ecdf00c591e5bb46527cba09db92064f90dcd6982e489e2671158936a4bf53112a7be0239af8420bc722a9cb075d685cbd8df599139f6c1e315f","ssdeep":"","tlshash":"2f7196d970e5a5b0c9ef8c96e0af881cb73a51a4310d0734f42e4a743751a90f21ff66","first_seen":"2026-08-10T18:23:56.727255Z","last_seen":"2026-08-10T19:05:30.081749Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/proxy-3feKcTFk.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.304Z","timestamp":1786388687304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/proxy-3feKcTFk.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afa85fdfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034449\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:31,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111264,"size_decoded":36083,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7b6a78af695cd26cdf0ac7dbbdddcd99","sha1":"3404599d14ec00752df3a071fe706d66a69cc8ce","sha256":"91bc4a68aed37c45dad9f2f776f71023f11a1ce3cbf1401285691021014f9036","sha512":"e4e421b03c471a906db014d4ff63628579e518dd250cca15e5f95b095046141404b3869525405c09c26cf5a77085286f16b44d2e942ddbc551e6a76721ffcd59","ssdeep":"1536:eZd93JBaqgOLxZOLjHXrxO8V5/FjvmXV5EvEyUcM5JJSL:eZj3iqZc7w0EjJkL","tlshash":"98b3e7d573a0b121d3cb9166c0af4b45b33b59d8280d803c7639a9cf396190867fbb7a","first_seen":"2026-08-10T18:23:56.618982Z","last_seen":"2026-08-10T19:05:30.082427Z","times_seen":4,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/account-DXizmOwz.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.241Z","timestamp":1786388687241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/account-DXizmOwz.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af3831dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: GXFLNzmCFb:663,t8\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10282,"size_decoded":3525,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (10237)","md5":"4a24045f06a640fd6b418e98d698ab46","sha1":"d347e5e2da53f68c0abde35b376eff2f76045fb5","sha256":"baca32b6f8f5d11e88c178d04f078f950321f79ee536c4c208792bb13d3cedd0","sha512":"148e5354dd159c585b865883c0c29b1d93cc7286f96a7523b453eb07fcd0c6032c07bf36f318b666f6547e9155415101bd728e5c68fe90eb96fe904313dfc6a4","ssdeep":"192:wZQuK+gmfaX9TkdNtES0L00HcBPHiT/NQ7O:wKG1fk9Tk/tC34PUi7O","tlshash":"252222cbb65371228f15cb7ab3bb850ea2785cc5cc5b4f18bfd6846d35540f8aa23944","first_seen":"2026-08-10T18:23:56.642415Z","last_seen":"2026-08-10T19:05:30.082919Z","times_seen":4,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/dist-B234Eo0A.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.290Z","timestamp":1786388687290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/dist-B234Eo0A.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af8856dfec-OSL\r\ncf-cache-status: HIT\r\nage: 994532\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: de\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:21,t4\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":293,"size_decoded":905,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"49a1c042cd1e45e89ab029d169fb36bc","sha1":"b2114db2d45947a4c9e1620a6de3724703cbe376","sha256":"5f4705639722a056cbe257d4cb27a40ca190e3266b6507a684bd3491bad14e49","sha512":"b6be111bec53b2ae918bcf56ea8eb56e3cad11aa9aad0c35eda46d90385f25c570fa22fcc1d60b1e800b3f52c94d44ab2aa8d4f52ddb54a05831ccd5c07dbdbf","ssdeep":"","tlshash":"d4e0cd52bca4c9b0e311446cd01d54edeb75b364b1004294901975486155d55d0e5e35","first_seen":"2026-08-10T18:23:56.520884Z","last_seen":"2026-08-10T19:05:30.083474Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/dist-C4jppjCh.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.292Z","timestamp":1786388687292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/dist-C4jppjCh.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af8857dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:22,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":503,"size_decoded":1057,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (461)","md5":"0dde99a75a99d38e5930084caef43377","sha1":"a633c6bad8b85ec7b1e0d6739740d9f221c08761","sha256":"8b2e3bde330475c0bfe0590989571720340d57d3cfd8d8876b73995e9a15fafb","sha512":"25a895bed4ee9df5ef9f046f77251cff89ea4342029f5822509b9ed06bd32cce7015b61d0697eb371a8a0438eaf6668ebaee52104bf9521b45505ba7a1a081d7","ssdeep":"","tlshash":"92f00532847020f0801dccdde455247a4705d4a4e34b574c480e6ef443455f1a11af21","first_seen":"2026-08-10T18:23:56.570047Z","last_seen":"2026-08-10T19:05:30.084039Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/Counter-lIA8C30S.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.354Z","timestamp":1786388687354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/Counter-lIA8C30S.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144aff886dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034447\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XTdDrwigOB:2,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":813,"size_decoded":1185,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (768)","md5":"6ca29339462164ca63f779c0965cb2b3","sha1":"b658ab8da697c9738375e64a02565b83123f4b77","sha256":"4c19aa75c8078fbcdd640ccb0e071e1fa4f4b30d3e5b34cbe4e2127c3f55ba73","sha512":"76ed366dcc3fbc01b48309f4185a7ce778b6a1f87f0f7d7ca8bd5de5999b1b76463a01854d633069cb26d1f9572357839e270320972dcab386b38f23c92c1a99","ssdeep":"","tlshash":"17014102f0f0b9f1d51b4cb8400f5669721540c8ce0e2d68a0f2b8ac5bea4fd4b6df62","first_seen":"2026-08-10T18:23:56.530223Z","last_seen":"2026-08-10T19:05:30.084615Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/parseISO-94xEOLWn.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.677Z","timestamp":1786388687677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/parseISO-94xEOLWn.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b1f902dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034444\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XTdDrwigOB:10,t7\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2703,"size_decoded":1864,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (2657)","md5":"26f17e8ef7ef35130059717b29500237","sha1":"f220eabcab4815a3dbdf5b889a14216523b41647","sha256":"67c3e66d5748b19d2648ed3eedf8709df38f4baf7c9f069179ec8fea23e04137","sha512":"ab85a6cf974930fd30ffe59213d9b0c9162c710c223b2397b7d691c48bdeb23d925bfeed5dd00e87c78033e6e1faeaedfe57b904c788cec7360d48e23adbfcb9","ssdeep":"","tlshash":"d25160da30b2f411a35a15a080af8005f77fcdf88cdd4538e159ea823c25429ea79f23","first_seen":"2026-08-10T18:23:56.608254Z","last_seen":"2026-08-10T19:05:30.085185Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/fiat-only-mode-CXt0tJLu.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.544Z","timestamp":1786388688544,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/fiat-only-mode-CXt0tJLu.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b76b95dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034443\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:59,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":562,"size_decoded":1060,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (510)","md5":"12cbe950b6d802351f096ce6264c2fd9","sha1":"580f059532773fa9ffcce2951ace00a37ee90324","sha256":"7ccc33cd600c6f2815021f9d71a0ef3eae2c8bb7d2f1df6173f18420ebe67505","sha512":"42c6f1d70900a7ee065c78b070381c9f17b51bb9bcd7012ee1347ea3664ba87a2eec8bfd391f40aab1d3736d5de85679c2652fe6a84d4e68de1069239840c944","ssdeep":"","tlshash":"4cf0e158b1e32cb5611a4cf5c0193dbb931cd48c9744144ad06a96d07fa18fbc61fd2d","first_seen":"2026-08-10T18:23:56.630516Z","last_seen":"2026-08-10T19:05:30.085766Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/a?v=3\u0026t=l\u0026pid=946618555\u0026rv=67s0\u0026tag_exp=115616985~115938466~115938468~118897920~118897930~119527020~119724321~119896802\u0026h=Ag\u0026gtm=45He67s0v890364013za200zd890364013\u0026ccid=90364013\u0026cid=GTM-P5SL845\u0026l=L843.S8.Y15.E2044.I1065.TC1.HTC0.F1004.C0~gtm.init_consent.S6.V5.E332~gtm.init.S4.V4.E416.TS5googtag.TI277.TE1~gtm.js.S4.V4.E394~gtm.dom.S4.V4.E14~gtm.load.S3.V3.E3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:49.161Z","timestamp":1786388689161,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:06:08 GMT","end":"Mon, 12 Oct 2026 18:06:07 GMT"},"fingerprint":{"sha1":"BA:95:90:2D:24:46:69:E3:91:01:2E:0F:2E:73:5C:7A:52:38:4B:B4","sha256":"13:70:D8:3E:0B:A2:B9:38:B9:CE:9E:5B:8E:2D:0D:92:96:C6:06:EF:29:36:F4:A7:7D:E3:34:75:6A:A0:E8:08"}}},"request":{"raw":"GET /a?v=3\u0026t=l\u0026pid=946618555\u0026rv=67s0\u0026tag_exp=115616985~115938466~115938468~118897920~118897930~119527020~119724321~119896802\u0026h=Ag\u0026gtm=45He67s0v890364013za200zd890364013\u0026ccid=90364013\u0026cid=GTM-P5SL845\u0026l=L843.S8.Y15.E2044.I1065.TC1.HTC0.F1004.C0~gtm.init_consent.S6.V5.E332~gtm.init.S4.V4.E416.TS5googtag.TI277.TE1~gtm.js.S4.V4.E394~gtm.dom.S4.V4.E14~gtm.load.S3.V3.E3 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 19:04:49 GMT\r\ncontent-type: text/html\r\nserver: Google Tag Manager\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":202,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T20:57:30.364837Z","times_seen":17824307,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/jsx-runtime-DUS_K0Po.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.223Z","timestamp":1786388687223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/jsx-runtime-DUS_K0Po.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af2829dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034452\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: GXFLNzmCFb:657,t9\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":472,"size_decoded":1024,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (423)","md5":"06ff73eda5c88af10e5e61fd4b99fc5a","sha1":"c7fa644755ffa4b9a832c1204f93d3d71df76157","sha256":"128dd0e5c2cb26c68f4aa6b9be0676c77faebcca803a90b8c1db4af97d3ef30a","sha512":"0ac29e1a97866af9e80180228cbd9ac2cbf9574d6b7b96f8a2d2a40a24a1002b49069e332501972fd37d7e75a8e18dedda925cd9c316c8131824ba914cc85009","ssdeep":"","tlshash":"62f09e81a6a450fc653f9c47916f8972a13cb446e7c92301b207ec951bf7ee59012f38","first_seen":"2026-08-10T18:23:56.621937Z","last_seen":"2026-08-10T19:05:30.086315Z","times_seen":4,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/category-order-BQa6RWki.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.491Z","timestamp":1786388687491,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/category-order-BQa6RWki.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b0c8aedfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:18,t7\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":560,"size_decoded":1102,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (508)","md5":"4abd9da9051c0d31731c17e4ea39df85","sha1":"35999608bc6dafe8cf8f9fd9b441925a4509e42c","sha256":"6fa8eda3280a5555e2953c95c6c19011879ae62f943274d8c72186e2817e075a","sha512":"7f52509689407e8534cc4983370a31944ff7ba02b42e69a59d6d1811a30da5177fc251179e9a59898638d364b48de6786eff8e72ac3a0732a27ba01fcb64d554","ssdeep":"","tlshash":"a3f0ebc834bf68b4a26386a811d7b72363aca0a1601f89609a5817483672d67237852d","first_seen":"2026-08-10T18:23:56.725061Z","last_seen":"2026-08-10T19:05:30.086882Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/useInfiniteQuery-D1-nwopC.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.227Z","timestamp":1786388687227,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/useInfiniteQuery-D1-nwopC.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af2828dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034452\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: GXFLNzmCFb:652,t10\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1208,"size_decoded":1180,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1154)","md5":"c9a857940eeecf1edd5c3cd63726f2e9","sha1":"86c138c7c6462f1c7ce4827c92605b991ac36d8d","sha256":"42e8c0947f1a8b329b2612ac40c332716a331202e2e6d82581837e4fb395b3ae","sha512":"54b4d2d41a90f1f1683e45cde8898a139f5142c2eace1719c6a2ec581237ab3816540178d8ef46623eb3b2faddbbf5e5896f144642e1b16ad5fd91e57ebbbd08","ssdeep":"","tlshash":"a92121ba7157ba47d0e7c25fe32d0705a10858637a3ed76de81882b1ea71d00a30597b","first_seen":"2026-08-10T18:23:56.665643Z","last_seen":"2026-08-10T19:05:30.087449Z","times_seen":4,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/errors-EyJQJSLC.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.597Z","timestamp":1786388687597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/errors-EyJQJSLC.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: application/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b178dbdfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 18:23:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:27,t5\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8848,"size_decoded":2961,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8804)","md5":"18146b2a2c7b1127e63c7162f28ee262","sha1":"040bc1345f7372f452ba714665af00984cbb36b2","sha256":"5980a32c818207f66580a38008c2f1bbe5c416789148002f330aeade65f99027","sha512":"1a16423416027778321418b54b64d34ae2237054764c3de885ec2cbbf9dcd131ed73582371a4384d2aedbc057ec5810a151ccaec6010ddefae6edc17b79c4def","ssdeep":"192:NavDM69Z/d3LUIqpTWZrjL8/sA3k4gyDeSIB:NN69voIETWlEB3k4uB","tlshash":"6f02534e80b027e1f8c987e49073c58dafbb50a4c52c84f4391497a4235ee95b593bfb","first_seen":"2026-08-10T18:23:56.667605Z","last_seen":"2026-08-10T19:05:30.08858Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/wallets-B61o4WTS.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.518Z","timestamp":1786388688518,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/wallets-B61o4WTS.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b73b76dfec-OSL\r\ncf-cache-status: HIT\r\nage: 994530\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: de\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:45,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2142,"size_decoded":1510,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1037)","md5":"413ffb7d635ecd9d75aadff7d63161ec","sha1":"299e85909d71365da9b8e4b47e1ceda359409530","sha256":"fd5303d7993ae793e62ed4a55874b3873f1d6c446010921b16feea1dccae5029","sha512":"8bed2b0bd3dbdcd3c1ec5da76d6ce0fd0bc52bec8dbcaea55796c98b382e9e6fe5b4c8cebe80e87e980c547ac3d2549f72520e79463ddd6188ec6c9bab22bb69","ssdeep":"","tlshash":"334176dcb3f1f07311f79f29425b0e22b132e74b152d58209250a9632274c9bca66b80","first_seen":"2026-08-10T18:23:56.544098Z","last_seen":"2026-08-10T19:05:30.089651Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/useShouldShowFiatPayments-BgnghQrH.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.545Z","timestamp":1786388688545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/useShouldShowFiatPayments-BgnghQrH.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b76b96dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034443\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:20,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":553,"size_decoded":998,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (490)","md5":"cc4104a789364d2013f3545415e496c4","sha1":"589000101f102ad66d0b22fa20fb53e409043c87","sha256":"ea15b7b499bd173deb2cb65b7dfc5a71d7009f21daa395d7536459d98e6dd986","sha512":"296a01e61d24aa0daf63c4901ac946f2c177a91603bd8f77f9379147ea8d07b5b66bfceb5cea68ead0d6a834521f38e95a50bedf836a569af560a58ef06f9162","ssdeep":"","tlshash":"64f08b5a71b7af7e732c92e7c50c2ca2972cd89c9a80064346d1c2152e489bee362d36","first_seen":"2026-08-10T18:23:56.68942Z","last_seen":"2026-08-10T19:05:30.090248Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/scanner/wallet-scanner.js","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:46.801Z","timestamp":1786388686801,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefilll.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 12:59:55 GMT","end":"Tue, 27 Oct 2026 12:59:54 GMT"},"fingerprint":{"sha1":"5E:7E:3B:2D:6A:52:36:1D:0D:AB:E3:B3:E5:4A:D0:A2:71:6D:29:38","sha256":"EC:76:1A:7A:EB:6D:5B:0D:56:5B:44:A3:62:68:DD:68:AF:63:DA:23:03:A5:40:82:6A:AB:33:C5:67:B4:76:ED"}}},"request":{"raw":"GET /scanner/wallet-scanner.js HTTP/1.1\r\nHost: bitrefilll.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 19:04:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 29 Jul 2026 04:32:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a69824c-2b09\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11017,"size_decoded":3374,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"6fb4b6f60f95603ac4de36e305cae6db","sha1":"741b02088612ecfb7a91d55a0d859f03258b9292","sha256":"a7ea556bcbb2ffabffacecc282b68ea0f2808377440a63b9700ce61bc0786e17","sha512":"91880a80355cf438c1ccb744a9ec899a260610bec5e74fa102b294d3bd71e3cae531f9b547bd7da148e368b85a39c3d402743177d12f0838cf8d43af582ae7c4","ssdeep":"192:9gAko4TaANXDRRBiQDC5/UdC7CZ2VUtn/1FFt1QHOREgRR30PbV7g5zZ2/7:CBTFMz","tlshash":"a032428db8e330565423727e8adf9201b17ab403044c9e10bd9c92b46f6917f6a79fec","first_seen":"2026-08-10T18:23:56.600997Z","last_seen":"2026-08-10T19:05:30.0909Z","times_seen":4,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"bitrefilll.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/Skeleton-HtZu8bk2.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.402Z","timestamp":1786388687402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/Skeleton-HtZu8bk2.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b03895dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034447\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:10,t8\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":452,"size_decoded":1010,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (406)","md5":"9d8f14a8defc00ee86b62592646cc3b4","sha1":"38f931c98546d3ae0d56ccf54dc54483cdff150a","sha256":"77891c1ccfabb8ec222f5da6d3982d1687199b270f38731552152f9fa495fe34","sha512":"76fa3a4d488319fe7d26d24c413052211df830238a4b8bc72ce7fea9910d06370c1498c4594bdf255bb99f5bfd95d2dedf5cd8b1b3d12546b05f9cbf7c88f942","ssdeep":"","tlshash":"37f0dc3def60acec682409a6d20c885ea27cd4bbc78acb0893607de8166207c4c21e02","first_seen":"2026-08-10T18:23:56.651827Z","last_seen":"2026-08-10T19:05:30.091502Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/dist-CMWETHGW.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.265Z","timestamp":1786388687265,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/dist-CMWETHGW.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af6847dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:9,t7\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2063,"size_decoded":1590,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2021)","md5":"41b906b21b231c646d6436ecc335ea68","sha1":"6e82c2d0ac80d15baeb4b37b08bf0bac2c2075d1","sha256":"d170766f5ede7884d6b72eeceb70c86dad2b6a98df2faf868b7ccd174a549ef7","sha512":"add51123424b638f6c74353a3bcbb9805852638c2591dec2d47552a910f37c80fa1efce4a4cced9e1c810e6ec34d486c2b3ca4536f94e7914cc2aa5a99cfcf1b","ssdeep":"","tlshash":"a94164c970c1b2a0765e08e3c0bfc86db6bf7a59001c9124e454a9f125398a893f3fb8","first_seen":"2026-08-10T18:23:56.577562Z","last_seen":"2026-08-10T19:05:30.092218Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/arrow-right-ksgxqRlj.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.298Z","timestamp":1786388687298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/arrow-right-ksgxqRlj.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\ncf-ray: a29144af985bdfec-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:26,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214,"size_decoded":853,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"763786344afcbaa1d95c38ff9cceb1f0","sha1":"8305f3e0bec1ed1ae01d1a87447af51b97f75b41","sha256":"1f1a7960d26e514eb4c6d27c58c58d42045a352e6d65492158a711f60b48693a","sha512":"a52c4ff15cd61be1af95ced873bf2fac4231b764e5fbe16953df73b73bc6fefc8b68faba455f1339760d23e01ff99de461ebbe8e40d1ec1aa53e7040fb0bd841","ssdeep":"","tlshash":"3bd0230face417f045801ef7450f2251c94550ece3e385043101f2be03510d1587df20","first_seen":"2026-08-10T18:23:56.684449Z","last_seen":"2026-08-10T19:05:30.092977Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/dot-prop-DJcmLfXc.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.535Z","timestamp":1786388688535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/dot-prop-DJcmLfXc.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b75b8fdfec-OSL\r\ncf-cache-status: HIT\r\nage: 994529\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: de\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:17,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1257,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1193)","md5":"093dd13850359680f5717610c0320496","sha1":"46d0c6ba98c4c3f5a23ceffd943cd0612c90d0c8","sha256":"34158fd702f19e07e2046f2724fc52eb807497f0246bba7806e0d08799ef5188","sha512":"bfe1b63268979640ad19a85640d452851a2a106c9be6c582688a7d86b93c5bd87ff68cbf7a4db62d1beea6dcb7d473fffecd58e05e8545963a13e7d69497c836","ssdeep":"","tlshash":"3221fde2b3eb753fc79d0e560065d406f1396da05d0e6928d292e0631d73f6380e9f18","first_seen":"2026-08-10T18:23:56.565085Z","last_seen":"2026-08-10T19:05:30.094367Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/emotion-is-prop-valid.esm-sumzR1yf.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.305Z","timestamp":1786388687305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/emotion-is-prop-valid.esm-sumzR1yf.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afa860dfec-OSL\r\ncf-cache-status: HIT\r\nage: 536585\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Tue, 04 Aug 2026 12:22:51 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:30,t7\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4559,"size_decoded":2856,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4496)","md5":"36205113359b6ba2dd86abfb06073424","sha1":"715fc8e1fb70f1d2beea174fbc12a871cf998f8d","sha256":"38f8fa3751f6b37f5a7f2ee18ceafa42fb6a6d0bb072e5116333ac4d6be689b6","sha512":"5fb1d383f0d53ada3fbea6b4bc2129bb547975bd8e4610c5de8fe0c5749cd294809795a4a50a2be79cfe53529db8ef8d5e4361d98674d605eb960002f4b329c0","ssdeep":"96:2A3GKipEJ8v8kfLxKTX8EhhqcsnOtqUUDfqiXa4:JGKipQ8v8kfLxkvhRMoqlDfqT4","tlshash":"ae91f8f4fa017d27191ba18bd6e35e47e1309592310344b2f29c3a1cc5c8aa4876fbbe","first_seen":"2026-08-10T18:23:56.633269Z","last_seen":"2026-08-10T19:05:30.095331Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/MobileStoreLinks-Davfq1fo.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.537Z","timestamp":1786388688537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/MobileStoreLinks-Davfq1fo.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b75b90dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864963\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:58,t8\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1025,"size_decoded":1228,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (971)","md5":"dc74fdcb84ba8e0c47ac29bd428311fa","sha1":"7a1568ed76a397cfd46080bd7aa36e80eb4b566b","sha256":"299ed6a39aaf99b58b70c7efbe07aac82d5e2883ca29527184473d65641d3c1d","sha512":"21c783bb37603fa69af59863acc45387a5eb19b2a5d9eed266a8ffe79d128f4f5471aed5295762bed44de5850d8db42d4d8b6e7e61e8f0de7b65a420533bf5e6","ssdeep":"","tlshash":"2211324fe81084be46194ce7d0092129a317a09cd34006f4e0b916f4a7125e7b615f8b","first_seen":"2026-08-10T18:23:56.666667Z","last_seen":"2026-08-10T19:05:30.095975Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/differenceInMilliseconds-Ctun9Wh-.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.238Z","timestamp":1786388687238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/differenceInMilliseconds-Ctun9Wh-.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\ncf-ray: a29144af382fdfec-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 1034451\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: GXFLNzmCFb:659,t8\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":807,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"5a25b13ba12f9c684b850371cfb36a9b","sha1":"c0e813da7664d0e0805c1e20f6a364d09c05e414","sha256":"aad48613eacc7345d5be7227d8a01fff42b0af6735f1cde5933343241db45450","sha512":"a0b1d56c82ab1d281be3f34437025333ca3a8224c6856faac6927eceee05b35db79c828d11a8e2c9b1681724f9fc03f9b05b4f2c571f688418c887e41d39b364","ssdeep":"","tlshash":"afc02b0ff0743133233a4c54402f7247f22cf180f24b1d04904089743a22894c13bd37","first_seen":"2026-08-10T18:23:56.670484Z","last_seen":"2026-08-10T19:05:30.096602Z","times_seen":4,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/dist-Da-FGQcS.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.285Z","timestamp":1786388687285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/dist-Da-FGQcS.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af8853dfec-OSL\r\ncf-cache-status: HIT\r\nage: 994532\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: de\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:19,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4944,"size_decoded":2385,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (4902)","md5":"f056930f28e1ba742c719d4e3598f57e","sha1":"85b4786fa1d2a1a81bb636deb078672634ed159e","sha256":"b6630e3376e420a3ab6a9c3fa1ce2dcaea9ce46001e70936208b22f98b87cebf","sha512":"cb856a4df9d9e261216372b372d9f0532cfd4038798986e4e8de6426316b0c8358a34159361a9a9cdcec81d10640bf1fadad5f07b1323d0088e72db2e1920d69","ssdeep":"96:KkRNWMhMOMcaM1M9Rmofm9M06Ex8ez8muRYdCujKII0fmiGWrBhrWGnrHtQrzcl8:Kk2cZ6exn9zZOXXMfjzHGW1haGnrtQfV","tlshash":"38a186de2061f5f8aebeaca89517543d0f0999cd840e0a55f19f4e1017ea290f293fd7","first_seen":"2026-08-10T18:23:56.623778Z","last_seen":"2026-08-10T19:05:30.097587Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/circle-question-mark-BKlPwsAx.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.301Z","timestamp":1786388687301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/circle-question-mark-BKlPwsAx.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af985ddfec-OSL\r\ncf-cache-status: HIT\r\nage: 994532\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: de\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:28,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":306,"size_decoded":932,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"5784f853415f13ed9f8ed5150bd304e7","sha1":"4e470fe0fb88de2245ab5ce77b7890e834f53549","sha256":"40418c766bfef6a1ad3b41be27f8761bf07e3c22f9e8157561541c1853f89af2","sha512":"33db960e6e33746872775edf5b2608563969500202c1b11b64686bc3c8c509f2867617b24320d28faf56f5fc5cd41dc225e3bccc39c0b12c236117d3ab90104b","ssdeep":"","tlshash":"f0e07d2e99de1f3044024c74060f5981ed1785d572a70e91b484816f07b2553bcaff61","first_seen":"2026-08-10T18:23:56.524541Z","last_seen":"2026-08-10T19:05:30.098233Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/lazyPreload-DB6cAYND.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.595Z","timestamp":1786388687595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/lazyPreload-DB6cAYND.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b178d9dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034445\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:9,t7\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":265,"size_decoded":914,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"f4de03731c5ba5aa0efd258b63420641","sha1":"8fd89004258833f73b94bff03db9053c0a58d4ff","sha256":"27d1193ce08bd9b5f14f949c86ba53a7b11629eff641e51f69da53fc034acf9f","sha512":"ec477259cc0b064bca4ca5953b31702ce440509368fc62758a35a7cf0998a88629c8993ecad2eb151bc057b208e954f68fa7408b284a29d17f1abff60a4aa3a1","ssdeep":"","tlshash":"96d02b17b5fae7b9b6002c64813d90e14390f4499902d53155055a44e7566e299b4e17","first_seen":"2026-08-10T18:23:56.67288Z","last_seen":"2026-08-10T19:05:30.098908Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/u_x-BlTl4rpe.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.547Z","timestamp":1786388688547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/u_x-BlTl4rpe.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b76b97dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034443\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:53,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":440,"size_decoded":1040,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (399)","md5":"23a405470ea8c692f4978cfcc0bf879a","sha1":"bf02bb262da8f3763a3846d7cbc21297dbf30173","sha256":"ec8e798aca788895dbdd3734e2616c1fbf9c47a9cd7a4b8279a063fb15a37709","sha512":"b7b3ac2a5aecaae90ffb53151cb2b92e0738e650c36d091eb1aa0362555d4bbb2ed29af82efa5abc7c50d502f4bf931ef4cba8ee2582fd3ada1e7999c3512771","ssdeep":"","tlshash":"30f0dc3ed5b02cb8d80a4eb959774a69a33fc5e8e7c10364e1894290b2130c090b5fd5","first_seen":"2026-08-10T18:23:56.566186Z","last_seen":"2026-08-10T19:05:30.09973Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/base-CKfPGDqi.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.330Z","timestamp":1786388687330,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/base-CKfPGDqi.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afc876dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034448\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:1,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":615,"size_decoded":1064,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (573)","md5":"c2190337ff2280488ed6b39886187c3b","sha1":"1d6521eb7a2360ede27e4b1078bbe3020908ca18","sha256":"bc6a1f2ed3c9250ed2b63b3fdb7f1f7c08095b32311f0b3903e64eb550d1a963","sha512":"ec9363b021e87309189cfdaa4a7435a51efb873464c6fbfff8525bf049f5e11c808913d9d954942414b292e3834cd9218be88cda112b93c7119be4fc466c0360","ssdeep":"","tlshash":"a5f0e1ad404fc6c979388b3b0312309cc20076ffbf48698bf2413054abe415a5b50eb8","first_seen":"2026-06-11T21:29:59.499143Z","last_seen":"2026-08-10T19:05:30.100873Z","times_seen":5,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/triangle-alert-BDg6qii6.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.559Z","timestamp":1786388687559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/triangle-alert-BDg6qii6.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b138c9dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:25,t8\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":574,"size_decoded":1079,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (522)","md5":"f1d7e74ff31b8ff7d6e6ab614cabd2c0","sha1":"0c6f2025c28a7e20cf63be63790d05a30d334b49","sha256":"fef196fc577a72dd82056127131a8701234c9ccdbbb29d6d7ba91b6352023757","sha512":"92eab2058e87a43600b93bcabe28669133d1a18f4e12c6288260c1cdced19dd6b22b007bf1f10fbe0ef012e50351c51d5b5c96db5c83f39a767a3082cdf7fac1","ssdeep":"","tlshash":"6ff0ac0ede5a0d7ca0190dac6a5cd50faaab80b0ff4a1504fb4c157413114c0d727bc0","first_seen":"2026-08-10T18:23:56.578385Z","last_seen":"2026-08-10T19:05:30.1017Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/SkipNavContent-CFwwWH2F.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.557Z","timestamp":1786388688557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/SkipNavContent-CFwwWH2F.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b77ba0dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034442\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:23,t7\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1075,"size_decoded":1217,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1023)","md5":"1b1b43e080f80f1bfc787d6a7872c176","sha1":"13ea81c7391c7f7e1e22b504ffd84e45613c8bdc","sha256":"8ad48a80c8abc6502ed42cf053ee5d2717a728399f77bee94c0875d3a938ef5a","sha512":"7f9ffde01ae4faee71a888101e3164005669527f73f3c9165ad0454d6a54de2592d8d44df6440ec060f75778335331a93b025ddf21a40cccb7ab3a8e5dcdcc27","ssdeep":"","tlshash":"3f11bb97dad0b9e4f8070aa4403bc16e721f6888821a45f4ac53a0665b909f02b33fda","first_seen":"2026-08-10T18:23:56.700115Z","last_seen":"2026-08-10T19:05:30.102467Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/Link-PEwgxCYg.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.323Z","timestamp":1786388687323,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/Link-PEwgxCYg.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afc871dfec-OSL\r\ncf-cache-status: HIT\r\nage: 994532\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: de\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:43,t9\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2138,"size_decoded":1477,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2096)","md5":"6bf2305531f4062b7a7cd06a0a8ed4bf","sha1":"373e3fa51942b5e61db2a51d2ff48e2c48670b2f","sha256":"00ba062cf00f009b25d00182ff45332af91b0151630dd8cae3c038c67e2f7b93","sha512":"4e14f85601f9cd0dc222e309d6418b3c26838e007d831456af2e07b201d566a2abcbcf515d19d42fba4bd91025ea850f5f3678698cc842b6d3378b8a5431c8ad","ssdeep":"","tlshash":"544120b4be74703ce937c40e902a8a3ea687a050bf8f86d5e3645c5da270194f31af49","first_seen":"2026-08-10T18:23:56.613509Z","last_seen":"2026-08-10T19:05:30.103314Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/cloudinary2-QvUOSRbl.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.348Z","timestamp":1786388687348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/cloudinary2-QvUOSRbl.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afe884dfec-OSL\r\ncf-cache-status: HIT\r\nage: 994531\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: de\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:6,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":953,"size_decoded":1314,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (904)","md5":"deaa9d08a8dfc788e9ca28ccd0b5d394","sha1":"097fb04ac7c2778f6305fba83b3d3cb9b322a74a","sha256":"68f1af0fac167b427e717b45fe4eb239106b60ec504333e5b5dd7542317007d9","sha512":"407160a84478593ec756a87259d61a28e3b79f850bdb13411ce1b781fa988f001a62072fd7a957b6357fa74d64259f7d3930e4cf8782a967ec292b87cf3fd4b8","ssdeep":"","tlshash":"dc1125ba31dc7973670ac660d32f0429e26faf40ed5a454c705520ae1521a6962f2fb8","first_seen":"2026-08-10T18:23:56.567482Z","last_seen":"2026-08-10T19:05:30.104647Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/Avatar-D7u7t2VP.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.562Z","timestamp":1786388687562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/Avatar-D7u7t2VP.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b138ccdfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034446\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:7,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82748,"size_decoded":34961,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"46343fe961cb093b8e4956cacda5f348","sha1":"c6faf1389aceb684f9ba7301ce82a8cb9af40a01","sha256":"9fa6235975d5a7dcdc7c5b2239b0f5deea4b80d6277556f9f69012597e797d98","sha512":"2d4bb94d5ca19a7274a433b2babf9ffeac67f8a46d4f50f3c7cd8c4d078d71fa808929c6cc7c453389063744997997d53779da0fc0bded0f7493f6c76f988acd","ssdeep":"1536:W+QyP59pPoQLQkkwlAUgebP1FFHT8fAlM3HuOhvmrzpbv:WqqOZbv","tlshash":"1d83d7d9a3f5a2e4f00ae7f4862798393a5b2cf93f72c65867d46c90d61108c8999cc7","first_seen":"2026-08-10T18:23:56.527256Z","last_seen":"2026-08-10T19:05:30.106104Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/Money-B6aggwBo.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.577Z","timestamp":1786388687577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/Money-B6aggwBo.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b158d4dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034445\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:8,t12\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":611,"size_decoded":1093,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (568)","md5":"6967aa473e102fd7029ba843e9755115","sha1":"59c93e4c26edc7660458e4d62076006ea40acc71","sha256":"dead0314e975bb2c1bda0bc5e7012cfa49a7a45046ee97967729f29462d4d8cb","sha512":"9630c356595551ab1402f0bde4f14c8fa8d66aff79f98be5a5379f04fc1a6103c1a7810095c0973d138ae68f3e220f0d1a3a481997d90ddf4289331838b995a6","ssdeep":"","tlshash":"41f07dc5e16115f5f83b4c89c06ee157625ae2a8db060aa955df312832210e4b61bed9","first_seen":"2026-08-10T18:23:56.628525Z","last_seen":"2026-08-10T19:05:30.106959Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/useSolanaWalletStandard-DRvbXvYY.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.517Z","timestamp":1786388688517,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/useSolanaWalletStandard-DRvbXvYY.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b73b73dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034444\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:44,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6702,"size_decoded":3276,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6641)","md5":"f19c58e85e1303508ea72a5f3d8d22e0","sha1":"c35a43aa832159e3c5e4d3cebd3dc674ab62dfeb","sha256":"c7df4d06a34a9e67505ad9f94962a98652672902970529328c819343d82c71df","sha512":"c6a6309fee7297cf42e262e5fbdcf27fbe49b4724736c18449653fb48128681f0afb92509080289bcd6b01ef1b61f4cdcb1724c7acbcfee3cde5400bd604c060","ssdeep":"192:0pNq9gufzBkODFGoO+8Bx0WhqNWrpDSILUgph5W0XJHPM:0BuLusFGosBaUlpDxxJzlM","tlshash":"f5d1f9952792e3355b6f018f981952e2f31c1849280dc178f2b7ae2e3369442d5e9f77","first_seen":"2026-08-10T18:23:56.679556Z","last_seen":"2026-08-10T19:05:30.108323Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/api-client-CAfinbxc.js","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.172Z","timestamp":1786388687172,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefilll.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 12:59:55 GMT","end":"Tue, 27 Oct 2026 12:59:54 GMT"},"fingerprint":{"sha1":"5E:7E:3B:2D:6A:52:36:1D:0D:AB:E3:B3:E5:4A:D0:A2:71:6D:29:38","sha256":"EC:76:1A:7A:EB:6D:5B:0D:56:5B:44:A3:62:68:DD:68:AF:63:DA:23:03:A5:40:82:6A:AB:33:C5:67:B4:76:ED"}}},"request":{"raw":"GET /api-client-CAfinbxc.js HTTP/1.1\r\nHost: bitrefilll.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Jul 2026 12:56:49 GMT\r\netag: W/\"b52-657bf7d1fa35a\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T20:57:30.364837Z","times_seen":17824307,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"bitrefilll.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/dist-CnTspveS.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.287Z","timestamp":1786388687287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/dist-CnTspveS.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af8854dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034450\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:18,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26631,"size_decoded":10615,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (26589)","md5":"41c54f6b4851593db3c7858d437b4d54","sha1":"ca83d96190055ca49d7493a2684936f52f21a479","sha256":"4bbbfd9ee6961fd7291f02ca1ce8f88aeea1d4fbb298470e47569790e65bab7b","sha512":"944ccd4f9230b7d51537d1405aeb378b7f0fc269c6a0d4a939ba8a059afdd8c001200e75b42cf281b0f976fea05048351463c3c4c8356eae6dfaf784bb0f7e34","ssdeep":"768:QeFXZv8knJImy4aBVXRrK5I91zyU43HBXEk0Hw8Lag0YRFNlT/p:xXR8kJIZ4SVXRrK5OaHB0kSwuagn","tlshash":"0ec21cda3296b124e35e821bd06f421eb33691b0564e2028f32c969d3871d9197b7f7f","first_seen":"2026-08-10T18:23:56.697389Z","last_seen":"2026-08-10T19:05:30.109553Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/constants-D-wIgMjB.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.312Z","timestamp":1786388687312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/constants-D-wIgMjB.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afa865dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034449\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:36,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":743,"size_decoded":1081,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (696)","md5":"30bd56ce906fc05546dbf1a2e836b789","sha1":"05cc9229c7d549f7325d2e2de0922aeaefaa0169","sha256":"150d3036525e7b0541d7289d93182bb6ce57b0e77e3c358cd87af35739ab3f15","sha512":"36c33f8147c95d855f1bf658ff88693db624faa8385be3bba349d36f3bc620ef8a6fb20840c33275f0407a746a8e2b9579b5a596c48ed3d5cd525f391bee49b5","ssdeep":"","tlshash":"40019cb75cb00a7a8e1400ed34c13306c95b73ad9e78dadde32080b43c549e5b312b26","first_seen":"2026-06-11T21:29:59.376666Z","last_seen":"2026-08-10T19:05:30.11034Z","times_seen":5,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/stringify-BXNZeSH1.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.526Z","timestamp":1786388688526,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/stringify-BXNZeSH1.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b74b7ddfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034444\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:57,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8490,"size_decoded":3786,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7615)","md5":"951b859dcde8f950b9956ed69bd662d4","sha1":"3a70482fe5f1e92e246aa470268670fa3766ee21","sha256":"1728be6f6492ed29c053a62a0d47c96a3d1451d335f7e2d673595789be686efd","sha512":"6d9c1c26e3c9061061de43abbd32c8606e68f2115b5bd82afdfc4e8340b37b7105d9ab5a2171638bb53e93c3cb93288ff151553c82f1d7889fa79cffcec863ca","ssdeep":"192:SRNoDv3/rA/QDu4pSCfW6NG7SsEPMsSqSSQjJyQdFkRkF:yYvvrkQDuVCfWeGOTPMFq/5QdF6e","tlshash":"0902dad77b80b0b2afbe4153d01e1640f13994f4845da46cf2a8a8b236e54b847faf34","first_seen":"2026-08-10T18:23:56.59573Z","last_seen":"2026-08-10T19:05:30.112556Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/checkout-com-visa-Bf38H5nk.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.540Z","timestamp":1786388688540,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/checkout-com-visa-Bf38H5nk.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b75b92dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034443\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:51,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6255,"size_decoded":2634,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (6200)","md5":"199be463478eedbcf06caf9150548b48","sha1":"53abb892a93eff5573d7d05376b3bebbcf3ea17a","sha256":"3f4661ccaefe63d3c3a48012121c8af9a313d69f29bb3c3c103678b4c05120ce","sha512":"4d62dbaafe80176be942e1fda472c08bf96dd3a3d7ed7ee6f0630c0718892c8dfda2bb0ef8ee1e81c1021d5710f2e6f5177afdb2c32653de73d60c01a9f281a0","ssdeep":"96:qgl+WpI8ycJMOavvPUZDm0fUNPCj3+6qhdA5Mq4Vj/V:qG+WpJ5dfUNU+6qhdA/4/","tlshash":"20d1897c8292668dbd798a231b5b7606e00127d2ef7a500eef527120d7d84eed6ec06c","first_seen":"2026-08-10T18:23:56.67409Z","last_seen":"2026-08-10T19:05:30.113397Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/lightning-logo-D8g4fLbH.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.542Z","timestamp":1786388688542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/lightning-logo-D8g4fLbH.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b76b94dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034443\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:52,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":613,"size_decoded":1073,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (561)","md5":"8f7a3d1a0b25523bd5696cfb1b6b3dbd","sha1":"9f742f1b4cb6b58e313a85eeb49a148cc088fff5","sha256":"f9698ab9741e5da7c114269024ee2e86e8195f29323bd9c2d1a72e2d0d86f702","sha512":"9c58382d1f35d4504edf9f68b32f71744d6d80c7bf028eac056102903b1aea8eacc7bd3776f2bfdd31891c0893d3f7dccdc8e9a891204d37ae51f048d3d5778f","ssdeep":"","tlshash":"26f047bcccf40188d52c0777f79c1886e01277975f6d14e145439652229847a363ce3d","first_seen":"2026-08-10T18:23:56.626773Z","last_seen":"2026-08-10T19:05:30.116353Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/misc-CEM9wrgh.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.555Z","timestamp":1786388688555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/misc-CEM9wrgh.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\ncf-ray: a29144b77b9edfec-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 864963\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:56,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":155,"size_decoded":812,"mime_type":"text/javascript","magic":"ASCII text","md5":"296b8aeacd0f87cf2d5b9d9f7fc85f50","sha1":"6811d6585c4e0fdf5472e4cd4ed4413883ef3ec3","sha256":"bb5837e9b6565928cafb6edec0b4449dc65b0e0c56f13ea21ec3ee79fb70997c","sha512":"7c747f2ab8b61b8b98a555fa86a7964b3a37f00c124c2f8934cd4dc38a75f3fa544f93dd82724c55418e9db9b9a6fe5a7ef477115ce75fd80b263b1101f4a694","ssdeep":"","tlshash":"0ec08c9e26f87aa9a7650e364a07c0a1612572cda2480b48a19422a068744e51b6ae05","first_seen":"2026-06-11T21:29:59.226941Z","last_seen":"2026-08-10T19:05:30.116981Z","times_seen":5,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/Header-cCXT-cRL.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.260Z","timestamp":1786388687260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/Header-cCXT-cRL.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: application/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af5842dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 18:23:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:6,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":66272,"size_decoded":21186,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (64153)","md5":"a72efae136d7d7b61b8afd66835df4a9","sha1":"d6adbad678d16f732b44babaef6478d50fe9e2b6","sha256":"3b43bd31dbc7a65e16a5d565f1f53e150470f6cdfded9d695bd6a8155d287737","sha512":"7326949df54ecef46821bb0c09ab5bcd5ea0478fe39aa8d6cb3aa57d10499cb4c16a57118e5332d5b35ef87e377a43020114746aaad0d8b922d3a575efb8ad24","ssdeep":"1536:WEMtYemxNSn563wwZdXAKIWVXMFXtuQrYeb:WKemxIn5GjAKIWVXOXtuQzb","tlshash":"02532b8ed06439b4f91d0cdcd07f931db77fa054ca0689a4f9666d282389ac47293fe6","first_seen":"2026-08-10T18:23:56.523521Z","last_seen":"2026-08-10T19:05:30.117496Z","times_seen":4,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/SearchSorting-D1AKLB0W.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.309Z","timestamp":1786388687309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/SearchSorting-D1AKLB0W.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afa863dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:35,t9\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":285,"size_decoded":900,"mime_type":"text/javascript","magic":"ASCII text","md5":"babf19fe554f307a0b12da388c30faa8","sha1":"7ca9107e22f3487a2ac6f646ce989719edeba30e","sha256":"ed83f6dd2c7eca7fe1cc87069ec7f2c582bb61f1718a788b04689c5479218dd1","sha512":"ba9caa4a78c46ceb3cbfbe8f8b3f0b4e6481839e636950f4145fb8b76ced73ede527965aecc68e56cc57903f04b19d404d447d5e9831f2fb035c65afa10cce14","ssdeep":"","tlshash":"6cd0c21e95e97cd824934572421725912d5e64cac20e11a0e38206482c9c9d79c24997","first_seen":"2026-08-10T18:23:56.694103Z","last_seen":"2026-08-10T19:05:30.118063Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/index.module-BJMfBH3P.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.587Z","timestamp":1786388687587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/index.module-BJMfBH3P.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b168d7dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:52,t12\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":738,"size_decoded":1029,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (688)","md5":"2a78db73b44cd6b5cab947b01b50dddc","sha1":"20e2f9d455a67b511df9da3dd4ab59ecbc0138c2","sha256":"54dfc5e8453866eae9205089df488bd76c27df84eed203b29dbf4971437926d5","sha512":"bad3b77910d30346b92dd96dc6cf12bd8b4a2fe92831f976cea78378a3c794b719d3ca7393fb51794a2f16e2fab1b0bc49331562bacc000c00c2ad90a52278f7","ssdeep":"","tlshash":"42012879917d12a3020d17bfa98c557fd0b762b5c132a48eb18c907703c209f22dc739","first_seen":"2026-06-11T21:29:59.365191Z","last_seen":"2026-08-10T19:05:30.118726Z","times_seen":5,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/rpc-DvhcyV8I.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.525Z","timestamp":1786388688525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/rpc-DvhcyV8I.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b74b7cdfec-OSL\r\ncf-cache-status: HIT\r\nage: 994529\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: de\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:14,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10774,"size_decoded":2833,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5656)","md5":"76a268e7c5fa363e2b8fa78ba2b05928","sha1":"7ccc2a3878bedaa9001bd9cc01b8c9c0eb5e5bd6","sha256":"d77e58b1b8eef6d030db9170065bd028961ea4196be17be5b7d14f5f6ae589bc","sha512":"4a7c636a3da4e583e67f470220644a89d929b1fd2657e3c6443810f183bb570450355da8db0255d33c9eaba3149b6fd180432203c4c4eb86f8d5cc7bedc1ab50","ssdeep":"192:XcoekXOepvy6BMBa1o+ja81XO9bnUP2R2s:XcoekXxpakxjaJUPoz","tlshash":"89223226b26c7db640a5c5cdb4070044e550f892d339d0f82df56e26afdb6c991fcda2","first_seen":"2026-08-10T18:23:56.728371Z","last_seen":"2026-08-10T19:05:30.119516Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/utils-ioJT42NH.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.213Z","timestamp":1786388687213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/utils-ioJT42NH.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af2824dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034452\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: GXFLNzmCFb:651,t7\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21291,"size_decoded":8780,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12839)","md5":"c8a31b29e82b699c97ea7a4dc30c48e0","sha1":"630d3b5de5eb2f3160401ffe9f036e7262c741bd","sha256":"13e4cf8b760923f6d8650ae5d15ab0d28561bbc37e31684fc39ccb9710effc83","sha512":"a78a65757b0118d309a9696dde07c493e529d3dc691c4b4aae15a90565745fbf7399daa8cee74ede3f2d1b897c9f83e2eaaf2352199f029c448599180fe130e8","ssdeep":"384:cKsHlVxAUpx/ALxus3N63zeRBEKk495FCbJUKtPaWRs:dsHlVxAUHius383yRBEhXt/Rs","tlshash":"ada2c7a931d2f070d3ab40a6516f9909f33a68a07c4d1414f1b7ddce39a255a82f3fad","first_seen":"2026-08-10T18:23:56.512683Z","last_seen":"2026-08-10T19:05:30.120702Z","times_seen":4,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/route-helpers-CwwxatZg.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.598Z","timestamp":1786388687598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/route-helpers-CwwxatZg.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b178dcdfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:28,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":972,"size_decoded":1297,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (921)","md5":"e092a0becfbf67de69db52b552a86a53","sha1":"a323287fee9f4548805adc7aab81abac857a385e","sha256":"14c08b3cdd9d3caffcf6317dcdc5dfd38860b8ecf5498ae5fad4fb2c2d134629","sha512":"a50fb0dd188cb942ae87d6328bc70a4fa70045c0faa142a9b8450890df187faf1d2c25ca66eb32fcc1bd0608113773900ca9018054bd0798094ad2011b47aa9e","ssdeep":"","tlshash":"d811e5d6f4991d3862f00852902b5326a3746544b54c1452707f5cc5a73254e47fbf7d","first_seen":"2026-08-10T18:23:56.605233Z","last_seen":"2026-08-10T19:05:30.122565Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/ThemeToggle-DfRWw06G.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.550Z","timestamp":1786388688550,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/ThemeToggle-DfRWw06G.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: application/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b76b9adfec-OSL\r\ncf-cache-status: HIT\r\nage: 864963\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 18:23:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:55,t5\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1332,"size_decoded":1401,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1268)","md5":"fd8e5d1731c51823538f4e9395062ba7","sha1":"b997b42acd484da0cdf7669b8eeb482f024609e4","sha256":"eb7d0b98cd301af69abe86c5e605f746d0ab9efba20cf9ccbe56dbb33c33be0e","sha512":"381e8b72b17b7011da95b43e6f0282813433da5daf2b29722f2829a40dd3435b053b6d117e0b38b0dc985d480ebd15afef784420ac5f8df24c722f0c55a492ce","ssdeep":"","tlshash":"ee210e1efa006974d01fcde8e861062353329d7c621545e1f09f9e8c1f29d89e9dee1b","first_seen":"2026-08-10T18:23:56.515464Z","last_seen":"2026-08-10T19:05:30.123437Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/link-helpers-7ytfh-L9.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.554Z","timestamp":1786388688554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/link-helpers-7ytfh-L9.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b77b9ddfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034442\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:60,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":770,"size_decoded":1205,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (720)","md5":"d392fe35dc3b8625ce356982c4d2c607","sha1":"05286da808fe48b39e609df6457663ef0aaa41ac","sha256":"55d2776dd8a2dd8858b34cdc131b834297a5dc8641aae56edc4fef0567beefd9","sha512":"d2083cb16e464dfd50c757358974edd6d77d6c77a5a74bbf2c42c74bd094facb6b44c0e5ce0acf9acdf9ca7a515f0a384abec2298dabb82b0f3e63fb8ca5b2d7","ssdeep":"","tlshash":"4b0175cfb4d0e171b1770dc4d0dfca58f130c8042d4c4194b1c491e42a55c9f819fe04","first_seen":"2026-08-10T18:23:56.681948Z","last_seen":"2026-08-10T19:05:30.124415Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2wy8f7a9ursnm.cloudfront.net/v6/bugsnag.min.js","fqdn":"d2wy8f7a9ursnm.cloudfront.net","domain":"d2wy8f7a9ursnm.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.233.66","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.139Z","timestamp":1786388687139,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /v6/bugsnag.min.js HTTP/1.1\r\nHost: d2wy8f7a9ursnm.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nDate: Sun, 02 Aug 2026 11:21:51 GMT\r\nLast-Modified: Wed, 05 Feb 2020 15:23:02 GMT\r\nServer: AmazonS3\r\nCache-Control: public, max-age=315360000\r\nx-amz-version-id: null\r\nContent-Encoding: gzip\r\nETag: W/\"e63788b8657ac52b3cdbb970e551c2a4\"\r\nVary: Accept-Encoding\r\nX-Cache: Hit from cloudfront\r\nVia: 1.1 9a21c1acba3e1e78a8f3c7a89ede6be8.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: ARN53-P4\r\nX-Amz-Cf-Id: gN95YELSIjsc9qHYvpgz7G2X7aSFGnYoMfoQcvWq1qbCV6NeeC2OkQ==\r\nAge: 718979\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":40961,"size_decoded":13129,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (40915)","md5":"e63788b8657ac52b3cdbb970e551c2a4","sha1":"2b935f0ad428278fac78be458abda4a9ae42ddb0","sha256":"4ee4197ae3e7bac4347e8443d7e264781c7d154e24d27da0eec14b9d4bfc1d61","sha512":"33965d920f3fe6ba5bc6b32caaad434fa876a94844637df4de3ac898811fb1316d7824beb61bb83a7fb48f9608db96f72518e57224c3fe1a48f9fa6ecfb5b3f0","ssdeep":"768:7qT8GH+Fj4rDWrVbo2GSbH/FnOFiBH/LjYziSGG:O1H+l4rcxLj0","tlshash":"ca03e7ce72d6b4764a636031603f600bb23a5da9345d90b4f220d9e9bcb594d937bf2c","first_seen":"2023-03-08T14:25:21Z","last_seen":"2026-08-10T19:05:30.12527Z","times_seen":400,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":29,"connect":34,"send":0,"wait":11,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/urlstructure-_CeMAO2N.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.262Z","timestamp":1786388687262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/urlstructure-_CeMAO2N.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af5843dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034451\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:7,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4657,"size_decoded":2563,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4607)","md5":"d721cf3f21608eacfaaa5e2bd9d0dbcb","sha1":"e73d6cbd5c6289ff1ac85742e8b2a7ac36edacb6","sha256":"99d356c33ff1bc8dce882b10f7bc0edc605453a246a62de73421a6483653c241","sha512":"012eaa7f34afdfdc95a1e0880ca2d4e8bc9ee13f17efeec2a1f26efcd62fbdeb6553efe77cd6c7aa40e0e5cc7581858093905c86b2a1802fe14b55b61f599c0d","ssdeep":"96:1eCnQpBAXjDxjcSO6Wm47OGYiPj0QxS136SbdrfDvPFFfB:1fnZcSHM7OGMt6SbdrLvPt","tlshash":"b6a1b7ddf5fdb19633e55371c0f7086ef11c2591442a5c94b195ee85a820adc03f7a36","first_seen":"2026-08-10T18:23:56.550064Z","last_seen":"2026-08-10T19:05:30.126069Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/chevron-down-qviGdM6F.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.477Z","timestamp":1786388687477,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/chevron-down-qviGdM6F.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b0b8acdfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:16,t8\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":440,"size_decoded":1014,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (390)","md5":"067e395a53cc2f575d1c4f3b60b591b4","sha1":"15151d50fd6a1bfc48ddb4908034efa5ee1debe4","sha256":"5e7e6d83295a94e777564ca371e37e70bb30a91e714a9a57647a3ed5f9e0d522","sha512":"a9975c766c057e101e7a2cd41e46e752f22f8eaed657af7a0e5e3f406adf08ccc1e58b76ee66b3be346b3707450b11dcdf9a8dd554beb08524ef854ad97031a1","ssdeep":"","tlshash":"7df05c1edfb42c7ce01a4cdda6aaa54fa9a6d2a4af852118e69d497453010c05269bc1","first_seen":"2026-08-10T18:23:56.604257Z","last_seen":"2026-08-10T19:05:30.126842Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/auth-xf9zWm3J.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.600Z","timestamp":1786388687600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/auth-xf9zWm3J.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b178dfdfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034445\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:29,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":631,"size_decoded":1121,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (589)","md5":"024693033e4627ac12f79fe471f3fd55","sha1":"e85778cd668e8f78dec0a2560ad198b0d4119a2a","sha256":"962858926a374062a7e2b4d17d4eb6fd013d284c908fb4b7154aa3c41ecff2d3","sha512":"55fe59dd682e6841cde0ed3831699cefad71ce7b7417a04c6accd1901b9cc55fc306f787d73dfbf6cbffa1b4f8c7a69e577da4b456695983ed419a678327010d","ssdeep":"","tlshash":"05f0d39ab211a576511818f695189cb39222e4e8d3581d4e90bf0fd85fe6482e72be07","first_seen":"2026-08-10T18:23:56.586968Z","last_seen":"2026-08-10T19:05:30.127508Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/dist-C1s7OAAt.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.263Z","timestamp":1786388687263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/dist-C1s7OAAt.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af6845dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034451\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:8,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4251,"size_decoded":2392,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4209)","md5":"a011b24f250198c6c399e71395ffe56b","sha1":"d08f9f0bdef774aef963daab99c3e05f8b0882a7","sha256":"d6ebcdff40d790d52c0fe581e850113c7ebb618664d28acbe7ee28560f632bb4","sha512":"f6b20a1c4e5ed9b796cc3ee67083d1b6d16f5e77817c5409b690daa605cbad052d0a1286ee5a81b9de11b684d34354fd8dde8e3ce3c6c6388654fbcfe4d67bd9","ssdeep":"48:okzmtM8CL/g5UuB85NzGfyyDW6sJk6+8L9uMgWDU3kDpwS+uZJcHFGtiEfrqyLUg:oLtU4iu5qAW63AAajZOlhEPIHthCp1","tlshash":"8a91a3c6b199f060b34e46e1843f846cb76a3195000c4138f0795da929b19e6e3b7fbf","first_seen":"2026-08-10T18:23:56.610964Z","last_seen":"2026-08-10T19:05:30.128141Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/cart-CABEO8AP.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.412Z","timestamp":1786388687412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/cart-CABEO8AP.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b0489adfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034447\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:12,t9\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14049,"size_decoded":5020,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13993)","md5":"1089397a93fdba02e5a94616874f7438","sha1":"86fd2de59306979c1a2acbeb7c01081cfdd0dd8a","sha256":"6523275f553712bca97d20e70556907705b9516c1d31498a099954c8b6fddf9c","sha512":"afd8a8ce362718eddd69a720411b7abed6b85dfafcb1c9130f7335c8b33b0d595c2d446aff8081f51a00820611bcd4cd8c389b15ac5ef61a2ec163431ecf32a4","ssdeep":"384:MCo886tlDasjRBrvoBFlrCcsKr+A8GPFCai4W8p1U30KANp1PDmL1p2wRF:MCrbbpKH0ai4V1U30KANvmL6wRF","tlshash":"e052d98de0a760227ec887e5d0b31657a78ce051c7255cf0b06d816b77a3aa381f7a77","first_seen":"2026-08-10T18:23:56.539841Z","last_seen":"2026-08-10T19:05:30.128755Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/extends-8ZbkFySl.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.516Z","timestamp":1786388687516,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/extends-8ZbkFySl.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b0f8badfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034446\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XTdDrwigOB:6,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":276,"size_decoded":908,"mime_type":"text/javascript","magic":"ASCII text","md5":"19dd190b6bd10feb5f47c6423f6979ec","sha1":"eff0c66362b6005013be07166f77a4e15c2c6c3f","sha256":"f67da08da44230f9132ef70345a3fdf8c40e8e548e0bc0355531cb94e789d926","sha512":"18c7c06d6f518f0e9b05ca6700ba9071f9549d68676db1ed5c985870fe5a39f2dbe7a4c9806e54dff6886d7e536d70d1d867cb65063af5f6b0bca7d3da67efb9","ssdeep":"","tlshash":"56d02bde22e575fb095318e9083ba583f21969429855d7008000d2e4a8d3957871fa37","first_seen":"2026-07-04T02:32:37.051869Z","last_seen":"2026-08-10T19:05:30.12938Z","times_seen":5,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/UserMenu-BRPb2TC1.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.561Z","timestamp":1786388687561,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/UserMenu-BRPb2TC1.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: application/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b138cbdfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034445\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 18:23:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:51,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3391,"size_decoded":2235,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2036)","md5":"f831a01217b94f0f8ba496bc1eed1ef7","sha1":"656d180226932e1cc232b1c109d664546b09ff8b","sha256":"05193a1b3943f8c8825e324038912792bc4e071e4f8e4528034b1c7218c03438","sha512":"e199089ff4ee98e78d870977bc21415371f4a6729f5085058dd76b6982457fd2eb68691850ade1a38a1e618819ba875dd07b67f0a06be7e0b014b4e067c8af00","ssdeep":"","tlshash":"9561510594a05bfcb35c4cc9901b606a26e953498600d0bebfb73df4735a8c09586ff7","first_seen":"2026-08-10T18:23:56.624977Z","last_seen":"2026-08-10T19:05:30.129959Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/utils-CRKSgB5D.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.659Z","timestamp":1786388687659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/utils-CRKSgB5D.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b1d8f7dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034445\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:35,t7\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3128,"size_decoded":2013,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (3085)","md5":"c2de7bcf0de7056b5290c1f5919745b4","sha1":"73c158a7457f839a8d71ee5ef06d3d20774e6dc7","sha256":"caeeee86ee98c5cb2b73d2044cd8e8f8de0b4936a814e0f9f09926c015de86e3","sha512":"14eb86c7b14db952f82aa0b6a9e010b385614222d099197514a65e53fb62f6788d7feeb473b55600b0854a175de67bcd732c59135b2d8a90a1aa0503ecf5be89","ssdeep":"","tlshash":"b05154cfb4f5f0b0b31a59f1c07b021bb23c98641c8d0224f195a5553e3966ad3ebe29","first_seen":"2026-08-10T18:23:56.612803Z","last_seen":"2026-08-10T19:05:30.130486Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/es2015-BbnoZ_lu.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.271Z","timestamp":1786388687271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/es2015-BbnoZ_lu.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af684cdfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034450\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:13,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19746,"size_decoded":7566,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (12278)","md5":"9a71328c729859d14a13b22d9e97e787","sha1":"91fb27c19d186f597d5959b208b8b5bb70228ab2","sha256":"43d28b4104041f3218fe9a16f47df14ee52ea2692aedf375ef654cbb1225ab04","sha512":"1106b7509f332c7331a9a58fb09cce337c8d34f1432fcf02ec84d97ae955c208a1780ab78def5e56cfbac640f7f73d1d6349d1c700f2e342b7b6b39f300b8e61","ssdeep":"192:oBkemzt9y5iMEdUEYeb68fZ+MhLHi4ZW1a+ovtF9Kp6Sq0CZQnNm259E9/NEJ0eO:Omzny5qdUs28ThLCIE6Sq0CaxnyMOF","tlshash":"0b92e8d93692b530a297917a617f931af73a2989b40e4404f439dcc83e7dc81d263fad","first_seen":"2026-08-10T18:23:56.575581Z","last_seen":"2026-08-10T19:05:30.131039Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/bitrefill-card-DVtWKdWA.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.668Z","timestamp":1786388687668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/bitrefill-card-DVtWKdWA.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b1e8fadfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034445\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XTdDrwigOB:9,t11\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11536,"size_decoded":3949,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (11470)","md5":"c9262b20923da16c3a97f78d842bc3e3","sha1":"ced98a30ae4052415b0866be9a7056c0a7a43261","sha256":"b0396e4869a4599491b7aab50f31e6077619819c807d007682c873ecab02cbf1","sha512":"f4a3553d03942b7dbd3719d72c57b43d1eabf96d373108f8a4ba3502fbd2f6d3973e621f881344b0a36c8b5ca1fc038d5d6c03e173ade7109f756a926852e64a","ssdeep":"192:QKhNKO/HCFSowkJyABTXsD+qgUDI7ISDaEFtb9YInfxDtLFjzB6:NhNKgHSSo/J1TXu2aETGEnb9Y0JDthjM","tlshash":"e532739bd569b3b9541bc0f1306b478a7ef78018daece796a919f0517018a0833f36de","first_seen":"2026-08-10T18:23:56.69629Z","last_seen":"2026-08-10T19:05:30.131537Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/abis-RH6IMt8x.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.795Z","timestamp":1786388687795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/abis-RH6IMt8x.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b2b95cdfec-OSL\r\ncf-cache-status: HIT\r\nage: 864963\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:40,t10\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4983,"size_decoded":1670,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (4941)","md5":"bf2aabf99df8f4bf334fbd4f7aab7050","sha1":"4f5d428a2d5f515c0dd8b2f284cc2786142b82da","sha256":"8e753844bff7955b9fd8ae51069f881db0f4111903c9923e8171a57ab5fc1a80","sha512":"66cb2c62bb941545f31028d3ec412c0851bf2d7d81ec296b6c15edc0bb0b55d1649afb48e6e30b83a8d9d75c808c39b1378f6e407972c75995d2c314e369a736","ssdeep":"96:GBnoHDPe8nMFMjN6pU0EdV2SqKluAR9y9Rbmb4u:Gue8MFMjfD","tlshash":"c5a12b89c81470c71d3128e5d4d32e19d05ed3a3dce5d903f399a8b62be961e9a2cf4b","first_seen":"2026-08-10T18:23:56.66125Z","last_seen":"2026-08-10T19:05:30.132075Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/StatusText-lDIO7yak.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.549Z","timestamp":1786388688549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/StatusText-lDIO7yak.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: application/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b76b99dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864963\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Mon, 10 Aug 2026 18:23:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:54,t8\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1424,"size_decoded":1360,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1376)","md5":"4f5598ccf32e235d21780265694c7c51","sha1":"d2bd3e43cf880e543377d71e605baaea09ef99ab","sha256":"341462889fe3a69bdfd6d97aec30d4ab265df630b071360d1036a7767256f94f","sha512":"16514550ca606942bd71dd350ff3e8b2e8d90e31d8b4f8587a4dd71885da3c9a9a2cb402e64315158296a8b5ee6e446e3bc5e8f984d277078b5b48f2be4adaca","ssdeep":"","tlshash":"4221350ed810a9f6960b8dfc111d147efa24d055d90659abfcd48b7443624e17643f99","first_seen":"2026-08-10T18:23:56.551312Z","last_seen":"2026-08-10T19:05:30.13285Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/useModulePreload-BNZUhNBH.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.567Z","timestamp":1786388688567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/useModulePreload-BNZUhNBH.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: application/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b78ba8dfec-OSL\r\ncf-cache-status: HIT\r\nage: 994528\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: de\r\nlast-modified: Mon, 10 Aug 2026 18:23:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:25,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3219,"size_decoded":2023,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1803)","md5":"9ac6b9ef48cd9c3c001b45425b6e84b5","sha1":"e4dc1138f06a805c4fd3ed70bf4a732ee7e3b693","sha256":"f63028651db8d60b10964390b8c41b3e79e8d8a79a36369091974ca5e89cf0a0","sha512":"7b60f979f690b06d18206501a844979d9ffb10d35ada867d9c78e72de1f6296c30a0903a25bee3a956af93c5db20a3ad6477ecb0a23abd169d6c7c4341356ef1","ssdeep":"","tlshash":"b761fc465a458bad73ae4accd941609209e0c70a561ac03eff773dfcb4a9980c161ff3","first_seen":"2026-08-10T18:23:56.701368Z","last_seen":"2026-08-10T19:05:30.1334Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/logo-a3LG3Cj-.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.340Z","timestamp":1786388687340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/logo-a3LG3Cj-.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\ncf-ray: a29144afd880dfec-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 1034448\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:4,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":226,"size_decoded":866,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"ca5bddc7885c7ec900f1038a408673c5","sha1":"b97aa944ac762379c064a133d0da36f821ba9c00","sha256":"8de3f434d16daf19686b04125962d1ba446c65c548bb38e60642226fc480bb37","sha512":"e69baa028e32c8bfdde0b9948c1dad6395460e59cc467d9e3c8757bae98732f2574c412d290a3e9ab39bca4e655b42de0225a08e4a6207d7193eb8e17425d825","ssdeep":"","tlshash":"8cd0a72fdcb05d79d11c4deed02f885e7724d45883450110e94c567062a65d1d6a5e96","first_seen":"2026-08-10T18:23:56.593698Z","last_seen":"2026-08-10T19:05:30.134008Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/trash-2-qJgaIEZ2.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.342Z","timestamp":1786388687342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/trash-2-qJgaIEZ2.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afd881dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:5,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":637,"size_decoded":1104,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (592)","md5":"886a90ef7b70fb8e1dc40e05cd052d5b","sha1":"4a18f14687e00ec275dacba7e99234ced3403304","sha256":"88b27eb6c6ed5c19448a7924d2f4460c035e128068d2b50ade9edeb89c424724","sha512":"e836e274bb27e0e24950dc8e7f0a9c29e090b26bf9813ee05eb1a0a72ff495b01c0e44ea188e7fed9aa3eea4d7f07546fd61d6b065b3448ae433cd011c18af6b","ssdeep":"","tlshash":"36f0994ece581cbef0164d6d6e5ed80fea87e6b2de4b0215ba8c65b051020c04b3afc0","first_seen":"2026-08-10T18:23:56.521745Z","last_seen":"2026-08-10T19:05:30.134589Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/Image-B-BPl8of.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.347Z","timestamp":1786388687347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/Image-B-BPl8of.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afe883dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034448\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:5,t11\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4814,"size_decoded":2732,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4771)","md5":"494881039b76ac2d1a960e4d141d3778","sha1":"7794f67daba2a01edd7985935f8c2d4722f17f3f","sha256":"0b8de81a88e400e73d83495272df7667c2a51cc6dfe4359968916eae5b46fff5","sha512":"12f88fcc45dc9c7cafb6c27f79f458735626e0efa7ab8af48ec36e95dbe231fca48acd0923b48a079a6a009c210c7f12181cc03e370c10ffdd029b432431b1f3","ssdeep":"96:vntku7XHzeWhFhbvbWV2QSCbJ7bE+T2Nb9Strwcr9GbUCVFVuJrKVk0RZuHG/:vnWSqw/fS2QB9E+T2F9SVwMuUCZuxKVr","tlshash":"05a1b759733c347df3169dead0db042e6121a3459b1b4d2cb3f9782742a04612bf2f66","first_seen":"2026-08-10T18:23:56.669543Z","last_seen":"2026-08-10T19:05:30.13509Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/FormControlWrapper-D8p-WnYD.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.474Z","timestamp":1786388687474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/FormControlWrapper-D8p-WnYD.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b0b8aadfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034447\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:48,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1918,"size_decoded":1570,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1862)","md5":"da696cdc6ae3a44d9bf64ac2ae790acb","sha1":"26a8faa127d806f23fda7c690b1571e84b8cc13c","sha256":"baba2159fbf1402acbb034313fc8317e6ae41f7a3e39dfc6d3ceb83229282f45","sha512":"3275549875aeecb5c752f66eab6ff2ed2782d0ff8660b8cbc81c5f9f90f57c55f190dcf430ad452708427b5fc4ae0cf74a39609dd8a57e991f32c6ea7907d019","ssdeep":"","tlshash":"5441334ee864b4f0f06d4efac05b849fa30b5058c70a0014ba9a7a55639609cfb23ff4","first_seen":"2026-08-10T18:23:56.591844Z","last_seen":"2026-08-10T19:05:30.135972Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitrefilll.info/scanner/wallet-overlay.css","fqdn":"bitrefilll.info","domain":"bitrefilll.info","tld":"info"},"ip":{"addr":"188.116.36.156","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:46.799Z","timestamp":1786388686799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefilll.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 12:59:55 GMT","end":"Tue, 27 Oct 2026 12:59:54 GMT"},"fingerprint":{"sha1":"5E:7E:3B:2D:6A:52:36:1D:0D:AB:E3:B3:E5:4A:D0:A2:71:6D:29:38","sha256":"EC:76:1A:7A:EB:6D:5B:0D:56:5B:44:A3:62:68:DD:68:AF:63:DA:23:03:A5:40:82:6A:AB:33:C5:67:B4:76:ED"}}},"request":{"raw":"GET /scanner/wallet-overlay.css HTTP/1.1\r\nHost: bitrefilll.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 19:04:46 GMT\r\ncontent-type: text/css\r\ncontent-length: 365\r\nlast-modified: Wed, 29 Jul 2026 04:30:36 GMT\r\netag: \"6a6981ec-16d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":365,"size_decoded":707,"mime_type":"text/css","magic":"ASCII text","md5":"34b3c2ffbce8a6f9001aa8e83b2a50ea","sha1":"c6a62d951628d91ff12bc9066cb0871ce23aabe2","sha256":"aa8b25988008d645a1af613ed81511ef39900e10297ffd4d4ee940f1858d0e68","sha512":"2d9142baed1ac186559091a6bce254c081ab41c590dd56482982bda54d125b93bce83b5de060193c7577d67cd16dca19ff6ca0b5594bbb11e2b19791128c588d","ssdeep":"","tlshash":"05e0c012f8b0552c36120a18057f03f75b4b3c09c32d8177baae3a1e0942b7542a1fa4","first_seen":"2026-08-10T18:23:56.723962Z","last_seen":"2026-08-10T19:05:30.136475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"bitrefilll.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/notifications-CvkGrVHh.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.245Z","timestamp":1786388687245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/notifications-CvkGrVHh.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af4834dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034451\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:1,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":822,"size_decoded":1187,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (771)","md5":"1f2aac277778911d7667acd8f3c80425","sha1":"054b979e05cb5f34cb9609c814d98c2b598b37b4","sha256":"7ec114f8b70b385916c81e1d6e6c1ca74e78a0ead379eb8d7e085744a5885124","sha512":"13b522e42616a273ada0b2422ddfc0950491bda6e6fdecef78a6f9f26a4885dfab86f87e656bb4f7f767fcf703fda466a3e88eb053e9e0b4d528e2a60bd51c39","ssdeep":"","tlshash":"b501564926d3f7f559c7c0a0e0b4441075148be5170eea14f2ce0369d188384f47be37","first_seen":"2026-08-10T18:23:56.707166Z","last_seen":"2026-08-10T19:05:30.136989Z","times_seen":4,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/chevron-right-BPnCiQMp.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.333Z","timestamp":1786388687333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/chevron-right-BPnCiQMp.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afc879dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034448\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:2,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":443,"size_decoded":1015,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (392)","md5":"117d10d86c37818e59386dcef4106fd8","sha1":"19ccadce46032a2d0c2fb0098d321f7ebf25b9fe","sha256":"1aa91ed474e2b36238c654c5c16d818463891fb61842a0633dca6aff994b5e77","sha512":"d815c7eb6297971643e0c3987b25a1c6091430f105981fb29da62dd4fd07a9e794b3d4664caba76211888a6524e582cc71d190e7d543781053461dd57e866329","ssdeep":"","tlshash":"f5f05c5eeeb41c3ca02a4caea669b80fe5a5d2a0af466518b29c157853011c05269bc1","first_seen":"2026-08-10T18:23:56.620093Z","last_seen":"2026-08-10T19:05:30.137513Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/RewardsBanner-BvssvHcg.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.426Z","timestamp":1786388687426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/RewardsBanner-BvssvHcg.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b0689edfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034447\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:45,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3267,"size_decoded":1601,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (3216)","md5":"a4ee67850c7f1842b47b89265e081f85","sha1":"88006e6837a44e10519d1ba1bbe818253f463dec","sha256":"b074bf0137a195929974165caefe19871146b42962ed1152e6542069a5bb26c6","sha512":"2d5efe51a402f898d41b3dfba8a933310cb449f51b2087f876fb64df40690ad6fb9d40369de1cf97123b68e76a34027006b9cfc98d2b9f3a9eecc1e0c880ecd9","ssdeep":"","tlshash":"2e61320980b536d8fcb5589d413783be3e6f64a4a31e49b0d688665e27241f1b06bfc6","first_seen":"2026-08-10T18:23:56.712368Z","last_seen":"2026-08-10T19:05:30.138081Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/uid-BLo37d18.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.532Z","timestamp":1786388688532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/uid-BLo37d18.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\ncf-ray: a29144b74b8bdfec-OSL\r\ncf-cache-status: HIT\r\npriority: u=1,i=?0\r\nage: 1034443\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:50,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217,"size_decoded":854,"mime_type":"text/javascript","magic":"ASCII text","md5":"9ec202dc4dde8c8d61ce36188a63f93f","sha1":"72e829af1c57f5f9fc24889c8b7c07d476130c15","sha256":"941792f8c2770ca24fb19dc28e1638c6f51fed293d3da22bef5afc21d106575c","sha512":"412202d23bb841ca6e05568f23b8ecf4f5eab2a960ce7a27fad51e79911a9153c36319e8a5d6f26e6bee74c8487ae41cb125198bafe7b5c620c5bcc3110dc529","ssdeep":"","tlshash":"0ad0a7467afa24bb08610d76079b9a4a59189b90e0370bb2d081559935209e4257bd11","first_seen":"2026-08-10T18:23:56.589835Z","last_seen":"2026-08-10T19:05:30.138682Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/dist-DTOelep5.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.272Z","timestamp":1786388687272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/dist-DTOelep5.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144af684ddfec-OSL\r\ncf-cache-status: HIT\r\nage: 864962\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:14,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":271,"size_decoded":907,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"f69617711392b8dccfdab548fe12c416","sha1":"06e792435dabaff094cc059b34f44b9aaeef4860","sha256":"66014be7c563254a85ec9e41305f56675cab66dc5755a3d0c0f3c6c32e6d104e","sha512":"7977ef2eca4e8ed0126b898a264a0006e30662c11de1ab6bddd9efbd5b7b75b30d597e832d352f53adce7464d961cb2323d06256498790406bae064cf5151042","ssdeep":"","tlshash":"d4d02bcbf8e16830e2094d5e802f89b25e6cb34551069161d037ab98736d5f0e4b8e36","first_seen":"2026-08-10T18:23:56.648135Z","last_seen":"2026-08-10T19:05:30.139273Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/ui-DN4esO3w.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.310Z","timestamp":1786388687310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/ui-DN4esO3w.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afa864dfec-OSL\r\ncf-cache-status: HIT\r\nage: 1034449\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:34,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":310,"size_decoded":934,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"4174b407a67013d8f85620e432586d30","sha1":"bf898849833dec3038414f330a8307556d3bddd8","sha256":"2906c56c6866dc9a2d6ef2c37b7e21cdbc4a3d537435456950b66cd593dfd1b0","sha512":"be3068003a5a4830791955d646a8bbc208c368e717ebaf6ecf37346dfa774426ebdc3154e49ce5c2b9ec52a9446604f9cc83fe5e345f4803865574739ee51e69","ssdeep":"","tlshash":"7ce0eb8d0cf10ab07c0101743220cf61d483dc3eff220242b0824f1426304c2ea2ce65","first_seen":"2026-08-10T18:23:56.65629Z","last_seen":"2026-08-10T19:05:30.1399Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/Alert-HROzPzj_.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:47.313Z","timestamp":1786388687313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/Alert-HROzPzj_.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:47 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144afa866dfec-OSL\r\ncf-cache-status: HIT\r\nage: 994532\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: de\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ntAsXRfhrP:38,t11\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5848,"size_decoded":2394,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5805)","md5":"8062ed7660eb3a537e7f2c9ead64d15d","sha1":"37f6d79425258fa9f7c4e4530a16b9f1473e910d","sha256":"1fd0ec70e61043e73a3b8efe6b52e146a27d347df63125b899113f66ecd68a44","sha512":"3110c82a5f92697fb3034730261fe0516f4e2f91e7d648b18756beb71035f20a63d8d58eb4b9b54ca7ef70278e08fb1d70f69d218b1f20258e2a356d8bd21f43","ssdeep":"96:DNj+Ge4SH42FG6nV442F7s61kH6COc042F7s61k6Q42Fqk61kHgNFwb3XYikle+Z:DZ+Ge4SH4AG6nV44AI61kaCOc04AI61h","tlshash":"a8c143a655642af4f42a9f68926ab06ff31fb878ab4f0d34e1cc5c5837111c8215bfc2","first_seen":"2026-08-10T18:23:56.657287Z","last_seen":"2026-08-10T19:05:30.140422Z","times_seen":4,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/useAppAccount-wDutxWZX.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.565Z","timestamp":1786388688565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/useAppAccount-wDutxWZX.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-source: mongo\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: application/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b78ba4dfec-OSL\r\ncf-cache-status: HIT\r\nage: 994528\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: de\r\nlast-modified: Mon, 10 Aug 2026 18:23:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XTdDrwigOB:18,t6\r\nx-content-type-options: nosniff\r\nx-powered-by: Lightning\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4004,"size_decoded":2151,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3953)","md5":"619af02e805b91ff202e35511422502c","sha1":"482fee048315c6f77821f2b894d9611f54917c15","sha256":"b6091d690ee258ea9357efac3fcc949c1c980d5df1dd5604c1ce3af6e720e265","sha512":"750a79eb5830584245d5ee6eb5554d38c58c5f03cc4df0d39daa6e46dcc6fb8ee6df9ce1d1efcbd877ed1f21e3e19cb8e709ce0d2d7a45aafa6aeed9d3eecee7","ssdeep":"","tlshash":"2f8163d890b8305a7f1759896c2216a643246ce1070193ed76ba91f3d7b43c5d2eaff3","first_seen":"2026-08-10T18:23:56.704881Z","last_seen":"2026-08-10T19:05:30.141077Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/useWalletEvents-B1QQLRns.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.523Z","timestamp":1786388688523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/useWalletEvents-B1QQLRns.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b73b7adfec-OSL\r\ncf-cache-status: HIT\r\nage: 994529\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: gzip\r\ncontent-language: de\r\nlast-modified: Wed, 29 Jul 2026 18:43:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: ypNECmjeuL:13,t5\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":386,"size_decoded":929,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (333)","md5":"44f96abb6f71f85ed8f3e06d4428d926","sha1":"5b19be306c756ef3cdfc083de3b5848fa3142698","sha256":"a31b34ee3f94084714e3bd081018b1c5dfe40fa6c8c391b058f767608b702dec","sha512":"bd148092f3d0255046619feb2e0557749ab587bdd3245ede47a1cf4c69e5d141dff3dea1d30ceede24675bf23e213334774b1a00d12ad7c55623d6fc62f23a28","ssdeep":"","tlshash":"1ce0d8e971e4355281137974415f105d02b62558b08fc110bca9dfd8be3d89f65a7c2e","first_seen":"2026-08-10T18:23:56.715711Z","last_seen":"2026-08-10T19:05:30.141536Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bitrefill.com/assets/LandingSection-C7hnmVnj.js","fqdn":"www.bitrefill.com","domain":"bitrefill.com","tld":"com"},"ip":{"addr":"104.20.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitrefilll.info/","date":"2026-08-10T19:04:48.563Z","timestamp":1786388688563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitrefill.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:12:30 GMT","end":"Thu, 01 Oct 2026 14:12:29 GMT"},"fingerprint":{"sha1":"96:AA:10:A1:E3:FC:76:3A:F9:89:39:C6:4B:42:9C:C7:FC:C5:87:52","sha256":"95:61:5E:9F:D3:D6:55:C9:23:D7:C9:1C:F3:F8:45:D1:EA:7E:30:E9:AE:29:A2:54:09:E7:36:B6:D8:32:EA:7B"}}},"request":{"raw":"GET /assets/LandingSection-C7hnmVnj.js HTTP/1.1\r\nHost: www.bitrefill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bitrefilll.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bitrefilll.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Lightning\r\nx-xss-protection: 1; mode=block\r\ndate: Mon, 10 Aug 2026 19:04:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=1,i=?0\r\ncf-ray: a29144b77ba3dfec-OSL\r\ncf-cache-status: HIT\r\nage: 864963\r\ncache-control: public, max-age=34560000, immutable\r\ncontent-encoding: br\r\ncontent-language: en\r\nlast-modified: Fri, 31 Jul 2026 14:00:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nreferrer-policy: origin, origin-when-crossorigin, origin-when-cross-origin\r\nx-cfw: XldQjdUooG:57,t6\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1104,"size_decoded":1242,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1052)","md5":"65e1596ca431eb106d73e496201c5acd","sha1":"737811e5f80a270e6b6cbf5db29135c0119af50e","sha256":"69325f57d7de2ff9a75e7e21d30edb75f6acba38715c51d23e9cbc24830686ed","sha512":"c8b3c10932c8cc0a41fb0cbc1b1b639d68cc353a9b279f5b582aa196852d12f2c6cefdf10181f79a6c5dcf95b9ea1309cd05e2113da9d15f4eb2c444f3586215","ssdeep":"","tlshash":"08111149a0e2bafc6077a5f6d01914a7633af1ace3050c19913827b827727c4640df8f","first_seen":"2026-08-10T18:23:56.596633Z","last_seen":"2026-08-10T19:05:30.14203Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}