{"report_id":"e8362e60-3d9f-4c78-a05d-387bc4a2e6db","version":6,"status":"done","tags":[],"date":"2026-02-11T09:56:48Z","url":{"schema":"https","addr":"btcsale.co/","fqdn":"btcsale.co","domain":"btcsale.co","tld":"co"},"ip":{"addr":"104.21.51.67","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"1.btcsale.pro/","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"title":"Обменный пункт электронных валют","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"btcsale.co/","fqdn":"btcsale.co","domain":"btcsale.co","tld":"co"},"ip":{"addr":"104.21.51.67","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-18T09:56:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"1.btcsale.pro","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-03","domain_rank":0,"first_seen":"2025-06-19T20:32:59.479871Z","last_seen":"2026-02-11T06:40:17.502951Z","alert_count":0,"request_count":56,"received_data":1484285,"sent_data":34477,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"code.jivosite.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":232952,"first_seen":"2012-07-22T02:03:39Z","last_seen":"2026-02-04T13:18:55.566643Z","alert_count":0,"request_count":9,"received_data":1731560,"sent_data":4220,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":20026,"sent_data":578,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":6,"received_data":189606,"sent_data":3294,"comment":"","tags":null,"fingerprints":null},{"fqdn":"node-ya-6.jivosite.com","ip":{"addr":"158.160.53.45","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":1470340,"first_seen":"2023-01-18T14:06:31Z","last_seen":"2026-02-06T23:49:56.268026Z","alert_count":0,"request_count":2,"received_data":1510,"sent_data":982,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"btcsale.co","ip":{"addr":"172.67.176.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-11T06:40:16.609044Z","last_seen":"2026-02-11T06:40:16.609044Z","alert_count":0,"request_count":1,"received_data":70686,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"btcsale.me","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-06","domain_rank":5143343,"first_seen":"2025-06-19T20:32:59.482303Z","last_seen":"2026-02-11T06:40:17.094982Z","alert_count":0,"request_count":11,"received_data":101156,"sent_data":4954,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"vi-ya-4.jivosite.com","ip":{"addr":"57.128.74.65","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2011-05-06","domain_rank":1354801,"first_seen":"2022-10-12T11:37:44Z","last_seen":"2026-02-11T06:40:17.186207Z","alert_count":0,"request_count":1,"received_data":233,"sent_data":584,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1770731204","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0b0142e34e2c52a43db467e64def9c3","sha1":"ccac10bdea6537df93f5bb12019991222815eede","sha256":"74913bf0fe3af4ce5085782094f372260dd5d655f754d955806824b842975ac8","sha512":"1a7d937765c9848c3a059afe591f5cd1c1b08008583199a60fe1de555be04d27b80c8d29cb8e8aa0c7fea083c6905642215cd31b20e96c6b8f6206b054b68307","ssdeep":"24576:j5h1n2wU6C3nmrkmYIfH6+rlCrL3RhKfIapRuky+o7jm/5j9I/quAgPgef7mttBt:jj1q3mtY4drlCsIapRuky+o3m/5j9ILA","tlshash":"db656bc5b2c4f46203d355e6a03b2005b33a2859340da068bbbcdcdbe95698e6377f79","size":1539171,"data":"","first_seen":"2026-02-10T14:15:11.69515Z","last_seen":"2026-02-18T06:03:42.237051Z","times_seen":211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/plugins/premiumbox/premium/js/jquery-window/script.min.js?ver=0.9","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3648feb4cc99a9f4804e18c8cdb85733","sha1":"67d410d347018e4329ecfbd23995974fdc61e184","sha256":"ca8ab791876d6c04c73e6ebee45b700c476e2d6b45fb7bec74d9106ea80a6d83","sha512":"93a4619dfd495d89b015f0980089c46ed908055e535e5c0bba7193b76f1c01a0f7d77a983c045bd76962eb15622e69a797cc540549f3cc76e63f9633bb49f1b5","ssdeep":"","tlshash":"785102687282b41f467b40f0272f334b1292995b8c978505497d9f9437dae8fc78f6a2","size":2667,"data":"","first_seen":"2023-03-29T23:53:25Z","last_seen":"2026-06-05T20:39:27.012535Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/plugins/premiumbox/premium/js/jquery-select/script.min.js?ver=0.7","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7149857b0902065441343b1eabc916c6","sha1":"25201485d18e8e8a5ad50ee3da086305915aded6","sha256":"1f6882c6adebf60b39fdb469342ecf11c4168260c5988afbfa2b3c4b46dcaa02","sha512":"4ff9552c83c023f632d0ad13ecdecd30b3826abedbec6b8427bdc2e43725b8a0044fb72141f8ae9e31d562bc643aba07abb8a8a82d0046aae601626105511332","ssdeep":"","tlshash":"1a51cb1861d0a1b6537f19e31dfa7a0f3196992f8826c940e0ba49f11ebccc59273ca7","size":3141,"data":"","first_seen":"2023-03-07T13:09:22Z","last_seen":"2026-06-01T12:33:00.333517Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/plugins/premiumbox/premium/js/jquery/script.min.js?ver=3.6.0","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87532,"data":"","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-06-06T12:46:10.767152Z","times_seen":27414,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/plugins/premiumbox/premium/js/jquery-table/script.min.js?ver=0.4","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"36e709d5d389e3003a8763f7ea5edd24","sha1":"0738b4c12f822fd25f8fa7064e7f93fa3b0159c2","sha256":"0453a58e5eebd61b5604c73b02be34aa556911e825f44829cce98c8fc673ef3b","sha512":"662d1045e230bd1f69cedec9a2f4026aec9a1c6e320149408f4e0771ae77e4a94ab1348e4129274202225d50a97bbc910c6db2b34009b089381e34f66c8ebdba","ssdeep":"","tlshash":"f231ccc063a064ab85b773e1221be1153210deb1ba8e006ee43ec13e1df7d01763ae97","size":1556,"data":"","first_seen":"2023-03-29T23:53:25Z","last_seen":"2026-06-05T20:39:26.889397Z","times_seen":121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/plugins/premiumbox/premium/js/jquery-timer/script.min.js?ver=0.3","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4bb145d7cdf393ea7b0b841175ed51d3","sha1":"f7b58872dae27fc10278ab0aa7ae704e21fa4cd1","sha256":"389ae451d64bd33aa97ff3f82fb85a7ae7d53f367df376d41eface19d18918d1","sha512":"09f7370c237e6dcccf64b566d6c9abf6987b7411181cf61147a7fb2ef033ce62ea909706d4e67b1100af3d808cb989e735534a1772df767df589c523ccb3caed","ssdeep":"","tlshash":"16218cc533e1203205bb92f21caf533676b0a41be51a9a4da2deaaf15edcc153013e36","size":1417,"data":"","first_seen":"2023-03-07T13:09:22Z","last_seen":"2026-06-05T20:39:26.916048Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/premium_script.js?lang=ru\u0026ver=1770814585","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c651953b991f74f9b223cf93dfc142ef","sha1":"fc8dd874163226a3f20858febce335fdab6e20c1","sha256":"6c709c7d14b80895b3c0d0680b882b7a66e64b15da136f287a2f693c1f283ebf","sha512":"07ecc7f8d872d05f6a46615bf7fcc740f1f29ae46a5654dc89fcfd0787b2db5c723fe9b016c208b92af1a57520becce4613938bd6413a35552deb4850eb3f455","ssdeep":"384:hDDR4R2NJGMk3Gn6vbEK/5CfPj3BlTXfPcdp/F/q+p8vJBKtkMDE+ORE7sNV:cZg6vbx4VOBeLREwV","tlshash":"7de28490f71c715a80bf7024496f21c9271e647a98429ca6fd3c66a45f90f1dbb1bc3e","size":33461,"data":"","first_seen":"2026-02-11T09:56:55.079252Z","last_seen":"2026-02-11T09:56:55.079252Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/XFKvrcxlqA","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"08bb2b1c65762b11c191fd16e2399c86","sha1":"7f4fee0da92a42d27660159f34ed106b4ef79dbc","sha256":"7c0bcc2ed0efcd10baaf3ec249d1ef86ba0d93e7c523bdb4795b9ac128ae010f","sha512":"3d03e03e1f9d56ff1ef3307f17e39b75266b82f6c34626d132fd540eed90dbec23be22fb0d0b838cee19d406130855b1335bdbc39556c44b70f0575ca3136b57","ssdeep":"384:boU4JkQamum040erAN8OX7HMiqJISOVJBz8U08wYWcPY4:RtM/AfX7WO8UFWcPY4","tlshash":"2a822b6e7959b97743b208f9606f6209733549ebd404c920a401ea4d7db8ede813fef8","size":18065,"data":"","first_seen":"2026-02-10T14:15:11.610153Z","last_seen":"2026-02-18T09:49:24.551113Z","times_seen":234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4014b634fdf9325444646ef6061af87c","sha1":"520f2699029b823c98608f475b18fdc64883b68f","sha256":"50956830d9a0a8f176d92c024b7ad84e6233732f15ab3ae65313231c97e165a5","sha512":"07c5da12acd32609af200a7f29b5c9f8ffebda7a87f208f6297bc6d73a08c5cf38c545c33c303093627e48e5b346252b188107ccd1f382992aabef7c8d3ae140","ssdeep":"24576:YnLBvKYoAlmls8uqU5rVGLXCZgwQmVlBTwXFXl2ll00w5fH6+6FI:YLB7me80XQXCCwQmVlpwXFXl2lZw5fHb","tlshash":"ca655bd1b2c5f4a507e701e6943b1002a33a2c1a740da458fbbcdcdba95a58e6337f79","size":1506927,"data":"","first_seen":"2026-02-10T14:15:11.696496Z","last_seen":"2026-02-18T06:03:42.245735Z","times_seen":214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/plugins/premiumbox/premium/js/jquery-cook/script.min.js?ver=0.1","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"91de54618fd4454a6084d4d074373181","sha1":"f4bd94c308632b636bff6f3801f228043d4486c8","sha256":"8b5e4a5c909fb99479b7b7af2e054147de0485c6b98a3d5f1edb80dc3fc37c51","sha512":"002d137f981312b3549bda13b9441e61af29ab924433941f2f06a577e83d001a4a354070bff304a0af53fe28031975e2ad25b736ef8c3615c18271a08267fd6d","ssdeep":"","tlshash":"a8e07d4c2306302045f7b233882f3744f073d92818c59890703684d11f98b682b2a93e","size":308,"data":"","first_seen":"2023-03-29T23:53:25Z","last_seen":"2026-06-05T20:39:26.829067Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/plugins/premiumbox/premium/js/jquery-clipboard/script.min.js?ver=2.0.10","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad98572d415d2f2452845a6068a913c0","sha1":"6674f81dd01c76be986cf0a8172d1073e56d7ef4","sha256":"baff7541be9c20f7f977f6993ce39cfa937a7bde69db6e7beebb8f68372682a1","sha512":"3c88ac453f2615f771c7df6032ced6018e46a7e0ad8d86312af17ddf0f32580bd7e78f1404d0031eeed091abe0afac911be6aca1ca9fba4e5cae335de73f6ce9","ssdeep":"192:RJBFlYPHiG9JyHg4LyAahp1v/N/MosfkApXMdgmkpj:R9yKG9JKziVF/MF/XMmmkpj","tlshash":"d7126599b291b0b15ad731a8412f920ff3766869708b90d0d279d4f0acbcdde4463f2d","size":9034,"data":"","first_seen":"2023-03-07T12:41:35Z","last_seen":"2026-06-06T12:53:17.696687Z","times_seen":17681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-06T13:10:26.372426Z","times_seen":362012,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/plugins/premiumbox/premium/js/jquery-forms/script.min.js?ver=3.51","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c96241e183012fd2646c4d6917155168","sha1":"98a92639a7de79a392c60b56e090e504071bc1f8","sha256":"27e9042e0cd29ac1e29332d3a88a1aa1bc84fb912ac5b14ced66d8f5e6890938","sha512":"fb7de78075aaa64d5ab57e8914c2a577446321c2c554524d6894c37386e5c3ba2436d0c259f4d61d884715f519798262e3491838eaea1cc1b97d2790c5da40a0","ssdeep":"384:zEuKdl8246ZBPw0+vN9FpziTpqd+KeMnQ3bYoZR94kozOE0mZ7oebm6iEII:zUzvPw0+vPziVqdPuj4kcOE0mB9","tlshash":"2d620ae532c450761bf674d5896f8147a231a92a054ec0a0ba6cccf51efcd85a173fb9","size":15258,"data":"","first_seen":"2023-03-07T01:06:40Z","last_seen":"2026-06-05T20:39:26.999157Z","times_seen":558,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/plugins/premiumbox/premium/js/jquery-ui/script.min.js?ver=1.13.1","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b155e462c0fedd410831f44f7b1dd3f","sha1":"2dfa64c455185a48ff7c5d63a354674beae9dfeb","sha256":"a30ca67c245a3153239bcc267ce857b03f63d7644368e75ca9791ceb5810de97","sha512":"c8a1f97de315ea0053dea163e598d0151adf00734017a11a8dff53eba09eda1540518c71e03e929d03497e316285dd9d2000053499bdec305ffedc8f60688d94","ssdeep":"3072:lDaXIPaLI9fB8NPJDppujVOUc9b3QRppuzpGBICAvFBFak8J3:+Iyk9WSV3vBiY","tlshash":"e744f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","size":255077,"data":"","first_seen":"2023-03-14T08:22:07Z","last_seen":"2026-06-03T16:23:42.293507Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/5f3ca08/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc00deaabfafd48080a08fc0d7f841b5","sha1":"3bf17f3bd75349b1ba1f9b78c6117fadd4620310","sha256":"be8a7243d87cc8bc1c523f0b10a41c149622c9c6af30b6a4e8231b1506cfd542","sha512":"1f3d4801665e172b54578e6d0d71f066c72df7244512cf00026104acbf6f21dab5de812d2679f56b2414ae7f40fd4963f61db75bc7bfc0893c8a3debf65638fc","ssdeep":"192:2P7mk/7Obf14M6bOIpUTPqZ8BijFLeEJK:C7H7ObdFkOIphZ8wjFCmK","tlshash":"af22d71ee7017f360fa613c3744f7b5376a480e592646cb5d89c826943b9bcab217b8c","size":10598,"data":"","first_seen":"2026-01-27T14:54:11.499444Z","last_seen":"2026-03-31T09:24:10.733781Z","times_seen":1154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/plugins/premiumbox/premium/js/jquery-changeinput/script.min.js?ver=0.1","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1153f80c5a0ba5ba80921cb2c8ec7d21","sha1":"5d1f58ae4e165bad92fbf61800402dfd6f0fdd11","sha256":"fbd7101494251cc148d058aabe91fa59e51a6a24e5c4958f7c7e504575246001","sha512":"ac0883b7b1a1f060dace5df45cce7f6646a8ef95b44ec65a6de3d66043ab762fb38d5d2caa187b24564c84107501b5bf2c81c08d4fca1f5c8b333f6dbbb02e14","ssdeep":"","tlshash":"c7018588a900690b1aa349b1547f8209622b70e0a5176040e75caaf17f1cc2d2277c3e","size":769,"data":"","first_seen":"2023-03-07T13:09:22Z","last_seen":"2026-06-05T20:39:26.887734Z","times_seen":137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/plugins/premiumbox/premium/js/jquery-checkbox/script.min.js?ver=0.2","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3093737e1c50590a327ec1b869fb506d","sha1":"c85baa1ab7535b4cd4eb00c1c63726206893c13e","sha256":"6c713e5a5b5852097da52362cbaf767b9c3acc61e0b7299b9c1d5d612a46b31f","sha512":"5e18b558ab363eb7f70203a197a1d4568a6e9b61f3d93f59faa0968ea78b5fd13afecb8ee45d3517a6ab0f5275162542d7da6d615c62c808d6fe1bef3114d458","ssdeep":"","tlshash":"8c1132bf3924387242bbaa21113bda0a643398bc57611d68f4dd4af00efcd880523e2d","size":923,"data":"","first_seen":"2023-03-07T12:26:35Z","last_seen":"2026-06-05T20:39:27.051394Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/themes/btcsale/js/site.js?ver=2.5","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2cbbad038b046e8718545fc5642ce336","sha1":"c04a2e2225454f407074c4709fe5e93002203c79","sha256":"3079ca11bf5c8216304a73a79fb9e5b1404174a6c42b40c24ecbf5fb51e7c47d","sha512":"e6de3938fdecb7245139c513b6df60a65f2eb3932c12190074ebbd628a9e12b4805e6c2a326fab4b5abe713415a4e296e5a6c50890adf359c2ffa3ecbc53b7ba","ssdeep":"","tlshash":"c971e2827a74b66dd1fb3059a17f4140ef29d4138a062c58f8fa55606aa070ab7e3c3e","size":3657,"data":"","first_seen":"2025-10-13T22:08:38.95098Z","last_seen":"2026-04-07T12:23:33.007188Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f0b94c868f1c795560f9bd0a8e4c304","sha1":"4d67b6478c9ff7523fb5ef5159d3908c03f7350f","sha256":"8299e1ac1b94da53017b6ba02213561685ac85e42283c953a97a7e417b2c1350","sha512":"85d50950db624cb54e98160f771024cf1c28778762b9e7188d5a3dbeed0a6c618e41334a6fdace5c400a7dddbe877e9b95227cb6b18485665fe509f0e190e909","ssdeep":"","tlshash":"0a0190c8f72c5896c6ae714ce50d10c62a1d54b7b49a1cd3fc5836888de4a5d710742e","size":795,"data":"","first_seen":"2026-02-11T09:56:55.145351Z","last_seen":"2026-02-11T09:56:55.145351Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"a7c7885903365daa576d368d375cab09","sha1":"e16dfe57955d2ea696b962f79058c63ef5d6488d","sha256":"cb93d5b413c59444b68dc6403321b747e899f19fbb0d879c546eb1466d5eb4d1","sha512":"1698b2db2fd6b8cf22d0e9af7efdbcc816f88055cdee28dad06beb0422a06eb1a68315923a00a3351a3669aa281e323a41ad528cae164a981bf2e80dce1d09b3","ssdeep":"24576:inLBvKYoAlmls8uqU5rVGf3qZgukmoUBTwXFXl2hl0Hw5fH6+6F2:iLB7me80XC3qCukmoUpwXFXl2hQw5fHD","tlshash":"0d655bd1b2c5f46507e701e6943b1002a33a2c1a740da468fbbcdcd7aa5a58e6337f79","size":1505125,"data":"","first_seen":"2026-02-10T14:15:11.776638Z","last_seen":"2026-02-17T17:00:15.682547Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/uploads/68-BinanceCoin.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/uploads/68-BinanceCoin.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1.btcsale.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 5472\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Jul 2022 20:32:18 GMT\r\npriority: u=4,i=?0\r\netag: \"62d714d2-1560\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kh0cfi2qEWDDS5J1UY14FkHPg0CkfdNtyw6lgSOMG9SxmrwV20smmCr99%2B1aRA3W%2BNRiafAgg%2Fd%2FE0fSk2nu6OMyokaHOH8vDKJomOo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f42ec4de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5472,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"4003dda5a339a414b94e5f748890d328","sha1":"e754adaaf8d582f41bcdcee121c82a5c19765978","sha256":"a9d616552c824973fe2dad3faf5172660d8657deb9546b98e30d3f4b227f023d","sha512":"11ab36c01d91857f278c627cc4f12feada06ad437f72231bd9f20fd611acb7dc44581845cdb6e36e0a5eb3519d6d695f5a362f36fb71480109cff38d112aa18b","ssdeep":"96:eS60E1OIY5wOJU0UTxuEcBf5Dxoay2BankUpjiZMcl87HKI+k0V9BWMB2kSO:eS6fO9wOJU0MuDfDxoBiZoHdOWMsa","tlshash":"81b18e5826aa8487ce7fc82b049b58354c93dd0e2d1cc9cb37bb2610869da79b0d0df1","first_seen":"2023-11-07T08:56:27Z","last_seen":"2026-06-01T18:36:46.296053Z","times_seen":18,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/themes/btcsale/images/clock.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/themes/btcsale/images/clock.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/wp-content/themes/btcsale/style.css?ver=2.5\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1255\r\nserver: cloudflare\r\nlast-modified: Thu, 30 Mar 2023 08:22:34 GMT\r\npriority: u=4,i=?0\r\netag: \"642546ca-4e7\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vpWuyurLbPJAwjEPcxTWij0DQt%2FtHmnlOHFWR4PjKlaGn6tW0p6h6WPRx2gjSbVKlR1tTvPtm5w%2BvmHpGsOBARqRiqhE7UG0MjruBGw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f42ed7de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1255,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"dd8d60855d18d6cb930201966ac9cf25","sha1":"445e17342a680e6f77ba3fcea1a1bea71e102639","sha256":"bdf5c46ef9c5276d3c91f429ba28d39ee5a0e157a223e6ddbc6055851477fe9b","sha512":"27646608fc543359928244d712a018954683c5366a6cf8215c47f19f9911dc8ed943dc121b054f4c7bccb8f1684352b686144a2f97abcd5c4a852a7840afd45f","ssdeep":"","tlshash":"1521878cb9867400518db4d278e3d07a8b920e81d6d4baf6bdcfc4830e755f589584d7","first_seen":"2026-02-11T06:40:22.61242Z","last_seen":"2026-02-11T09:56:55.048253Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1770731204","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:33.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/bundle.js?rand=1770731204 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 09:56:33 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 339471\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"698b2a9a-52e0f\"\r\nlast-modified: Tue, 10 Feb 2026 12:54:50 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-02-10T13:50:34+00:00\r\nx-node: m9p-up-gc58\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1539171,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3c0cc91f1a0e868e112b93f5e71d5361","sha1":"3fdc1b4c448334114515b0ca6f2f0f3d83e0eabd","sha256":"5dbc4be5ac058482599329a4e302477929d837c7cb5285bf069cbe4c38b8ccbf","sha512":"9d93bebe9a66d94ec97c199e346ce6ac03f70498b93d22015149090e3109d20c2aadd54fefdac43e4e30c808ab4d41555979d25c6de584481189217e569673f3","ssdeep":"24576:j5h1n2wU6C3nmrkmYIfH6+rlCrL3RhKfIapRuky+o7jm/5j9I/qd:jj1q3mtY4drlCsIapRuky+o3m/5j9Ii","tlshash":"c2254ac5b1c1f46502d355e6643b2009f23a285e7809b064fabcddcbfa6659e6233f39","first_seen":"2026-02-10T14:15:11.540974Z","last_seen":"2026-02-17T17:00:15.661685Z","times_seen":212,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcsale.me/wp-content/uploads/27-Toncoin.png","fqdn":"btcsale.me","domain":"btcsale.me","tld":"me"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 15:22:25 GMT","end":"Mon, 06 Apr 2026 16:20:54 GMT"},"fingerprint":{"sha1":"ED:0D:32:E1:71:7A:61:A3:6B:9B:9A:6F:F2:C6:4C:BD:93:48:E7:62","sha256":"8D:6C:D5:5D:60:83:7B:FB:63:45:0C:92:A1:1C:8A:3C:FC:0B:D7:95:FA:38:44:E4:5D:D2:18:81:77:96:E8:12"}}},"request":{"raw":"GET /wp-content/uploads/27-Toncoin.png HTTP/1.1\r\nHost: btcsale.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: text/html\r\nlocation: https://1.btcsale.pro/wp-content/uploads/27-Toncoin.png\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nage: 457\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZKXkGSbjrqcjIZ38W1rBeB4WKh8Nc3KlqtlQZY3voskwx10exwIeAd35f5%2BYG5bbDlUrhZcoHiupOfeFkt6mNKeCsyj5tXBY6d8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f2e9eefb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5411,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T13:09:45.117471Z","times_seen":16178700,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/plugins/premiumbox/premium/js/jquery-checkbox/script.min.js?ver=0.2","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/premium/js/jquery-checkbox/script.min.js?ver=0.2 HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Mar 2023 12:32:00 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"64106940-39b\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9TTLj0CuCuWm1OA%2Fw8CA7wrdz%2Be%2Fzm31yh4IIl43jZ8JL0n7AXRousl7vLoeDuaXnVU9FavY4kH73wSG8JHG5IjNhUCDC9r6Ic6MUiA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9ef6fcdde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":923,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (923), with no line terminators","md5":"3093737e1c50590a327ec1b869fb506d","sha1":"c85baa1ab7535b4cd4eb00c1c63726206893c13e","sha256":"6c713e5a5b5852097da52362cbaf767b9c3acc61e0b7299b9c1d5d612a46b31f","sha512":"5e18b558ab363eb7f70203a197a1d4568a6e9b61f3d93f59faa0968ea78b5fd13afecb8ee45d3517a6ab0f5275162542d7da6d615c62c808d6fe1bef3114d458","ssdeep":"","tlshash":"8c1132bf3924387242bbaa21113bda0a643398bc57611d68f4dd4af00efcd880523e2d","first_seen":"2023-03-07T12:26:35Z","last_seen":"2026-06-05T20:39:27.051394Z","times_seen":136,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcsale.me/wp-content/uploads/Bitcoin.png","fqdn":"btcsale.me","domain":"btcsale.me","tld":"me"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 15:22:25 GMT","end":"Mon, 06 Apr 2026 16:20:54 GMT"},"fingerprint":{"sha1":"ED:0D:32:E1:71:7A:61:A3:6B:9B:9A:6F:F2:C6:4C:BD:93:48:E7:62","sha256":"8D:6C:D5:5D:60:83:7B:FB:63:45:0C:92:A1:1C:8A:3C:FC:0B:D7:95:FA:38:44:E4:5D:D2:18:81:77:96:E8:12"}}},"request":{"raw":"GET /wp-content/uploads/Bitcoin.png HTTP/1.1\r\nHost: btcsale.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: text/html\r\nlocation: https://1.btcsale.pro/wp-content/uploads/Bitcoin.png\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nage: 457\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VVge8Hr0U0MHhkqPIEuD%2BZmSP9syMeUzZFk4%2F12JvnSI2jlwuY3a88t1deovgSQG6fr2%2FDYrbPX%2FPXY1ZvbAoYgtu%2FJ2%2FSu6DK8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f2c981fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1906,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T13:09:45.117471Z","times_seen":16178700,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/uploads/Privatbank.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/uploads/Privatbank.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1762\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Jul 2022 20:32:58 GMT\r\npriority: u=4,i=?0\r\netag: \"62d714fa-6e2\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eBGTxqkspbYnwcDfJ95hVJqCgxMDtMQUORdHBjofNCc0cNol%2FThqftZtaGo8Po8mMQXrZhg6sO3wL4hUznTKOin3nBdNpSaHS4Ij1%2Fs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f2fb26de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1762,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"3d17f5dfb67e0327728803f6eeb633ad","sha1":"361ce19fda10314d7de5aef3b867985f7913a1f7","sha256":"ae3be7f9eb2cd27e75cd47b0a0a3760323cc92311f11d1c4db01f4e4f77c573d","sha512":"e89bd2674458f75908def6dde43e464b62eab5b5ee183fb53564baf4e17f81dc92e3043510d3e0f87ecae4785aa7422c004cae9cb83a9b32e75c2f18257464e7","ssdeep":"","tlshash":"7831093741f1cdc2fb050899b50bcde0161618e7d681a0d4a503464ede9e9a254d2f1f","first_seen":"2023-05-07T19:46:49Z","last_seen":"2026-05-10T05:06:52.97808Z","times_seen":14,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/uploads/27-Toncoin.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/uploads/27-Toncoin.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1.btcsale.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 5411\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Jul 2022 20:32:02 GMT\r\npriority: u=4,i=?0\r\netag: \"62d714c2-1523\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mADcim3vKOMEvNFv1S8Kiv96HREeeCkk5jEHb0c7l%2FkiyMjBMVK1v08tWQutg%2FEC3Ya3qOtJkj%2BFWlSEYusDizLf9Gf2ZAookP%2BzlHQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f43ef8de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5411,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"19bf7a3863e4e5a0064b23f6a2ab0395","sha1":"74c70196464f904f491a5403f8f8677bd3d4391f","sha256":"640c1091908e14ac0dfa730cb599e62af6d546b94deae5af56ad2434fa2b4dc2","sha512":"e65013405f79bb9b1c1297964878aef5489f8f64294a649552a1cf7414f6659cfed3ccb1fd3e38b64040cf6d4d4c811588da83fb2cd7c08399fc0281bd8bed4f","ssdeep":"96:eSAua5SgiQKC37TcUoa9q53Ppgwnm4XGlvIF27P8+SlCcigGjDD2PjFC8Qf3I:eSAuaUSKC33BomWPpznm4XGpII8VlC6J","tlshash":"b0b1ae06b1937a90230a20be6274553dc8875b9dbc15ab37ac84d461e77cdb4ce47a22","first_seen":"2025-08-26T08:59:27.188083Z","last_seen":"2026-06-03T16:40:00.190591Z","times_seen":26,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/agent_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:34.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/agent_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 09:56:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 3760\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"69775d6e-eb0\"\r\nexpires: Thu, 26 Feb 2026 23:26:04 GMT\r\nlast-modified: Mon, 26 Jan 2026 12:26:22 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-01-27T23:26:04+00:00\r\nx-node: m9p-up-gc8\r\ncontent-range: bytes 0-3759/3760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3760,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"8e9a165c4cb185ffd0b2658fa088e43b","sha1":"195873e5e8bbb2f5ecc32d95f90d6fb75817a649","sha256":"ff81aad05612f90cf97c238f219765884e5cbf49351d8dc96a4a063c598c3f43","sha512":"6ef9fac16ac2835ecb95ab077270293a95a3597fd28fb053b32cfeb6b0a72b52c0ee51b0504a463ac9db1d8a3b2c6c41f113012d6364d16feb8e01821a3221ff","ssdeep":"","tlshash":"c771295c69348528f80b31b89f4b765ac1512c19a8f2ddd4a62818e7377b36a678820e","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-06-06T11:46:13.112618Z","times_seen":16378,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat%3Aital%2Cwght%400%2C300%3B0%2C400%3B0%2C500%3B0%2C600%3B0%2C700%3B1%2C300%3B1%2C400%3B1%2C500%3B1%2C600%3B1%2C700\u0026display=swap\u0026ver=2.5","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:20 GMT","end":"Mon, 13 Apr 2026 08:38:19 GMT"},"fingerprint":{"sha1":"62:20:97:37:86:22:13:0B:BF:38:69:D4:17:18:8A:EA:43:CD:45:29","sha256":"89:3F:DC:64:16:F6:2F:76:F1:04:F1:32:86:F3:B0:4D:A5:74:BE:7C:20:89:75:B7:00:70:9C:E6:A1:2E:CE:69"}}},"request":{"raw":"GET /css2?family=Montserrat%3Aital%2Cwght%400%2C300%3B0%2C400%3B0%2C500%3B0%2C600%3B0%2C700%3B1%2C300%3B1%2C400%3B1%2C500%3B1%2C600%3B1%2C700\u0026display=swap\u0026ver=2.5 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 11 Feb 2026 09:56:26 GMT\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19340,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"bea20ee1a4547e82c6f1de0cc036f2be","sha1":"0c199903a22302b5d9436a1e43dab08a956f70b3","sha256":"d66f6ee1d1c22a32fdd912e132e8e85aa0e0ae34a46c42dc26b54db36f57156a","sha512":"aad689743cee275fb17c8b1c4ecff1ae9b15ef24055202ef4f73c477b2fa0ae803385d348a1a32fa1c9642cb0d07e5f32bc90a080ed014965a1ebcfe964a286a","ssdeep":"384:AYwNFu+GNw+Fr/PWw/FkEUrwAFRd9cwxFqqNRPQPTzajde:t","tlshash":"9992af911057e500da472cc923cf7e26de4e666674a4c5797bfd1ca8adeac220324b6c","first_seen":"2025-09-14T17:26:50.15962Z","last_seen":"2026-06-04T12:48:14.365676Z","times_seen":270,"resource_available":false,"data":null}},"time_used":738,"timings":{"blocked":342,"dns":38,"connect":7,"send":0,"wait":23,"receive":0,"ssl":322},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/plugins/premiumbox/premium/js/jquery-cook/script.min.js?ver=0.1","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/premium/js/jquery-cook/script.min.js?ver=0.1 HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Mar 2023 12:32:00 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"64106940-134\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XUT9XD2UTZM6npJU5KjehM3b3Ggf%2F8sAL0aSrHXN6HcKVuuDlTmqmAOLRIN3Zm3tfUGvaEmk0DRAfb92amK30%2B36nVjQcTsednBlYzY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9ef6fafde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (308), with no line terminators","md5":"91de54618fd4454a6084d4d074373181","sha1":"f4bd94c308632b636bff6f3801f228043d4486c8","sha256":"8b5e4a5c909fb99479b7b7af2e054147de0485c6b98a3d5f1edb80dc3fc37c51","sha512":"002d137f981312b3549bda13b9441e61af29ab924433941f2f06a577e83d001a4a354070bff304a0af53fe28031975e2ad25b736ef8c3615c18271a08267fd6d","ssdeep":"","tlshash":"a8e07d4c2306302045f7b233882f3744f073d92818c59890703684d11f98b682b2a93e","first_seen":"2023-03-29T23:53:25Z","last_seen":"2026-06-05T20:39:26.829067Z","times_seen":125,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/plugins/premiumbox/premium/js/jquery-clipboard/script.min.js?ver=2.0.10","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/premium/js/jquery-clipboard/script.min.js?ver=2.0.10 HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Mar 2023 12:32:00 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"64106940-234a\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yu2GJvZmpNKvT2%2BYaWaG00xB8mtyue4sUEjyN8Jx4faa1zn%2FyXHvy0bSNKb6J69xGpPETdGD%2FfQv6l2jRljwObi%2FuY%2Fm4q8VWyu03PE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9ef6fb9de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9034,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8941)","md5":"ad98572d415d2f2452845a6068a913c0","sha1":"6674f81dd01c76be986cf0a8172d1073e56d7ef4","sha256":"baff7541be9c20f7f977f6993ce39cfa937a7bde69db6e7beebb8f68372682a1","sha512":"3c88ac453f2615f771c7df6032ced6018e46a7e0ad8d86312af17ddf0f32580bd7e78f1404d0031eeed091abe0afac911be6aca1ca9fba4e5cae335de73f6ce9","ssdeep":"192:RJBFlYPHiG9JyHg4LyAahp1v/N/MosfkApXMdgmkpj:R9yKG9JKziVF/MF/XMmmkpj","tlshash":"d7126599b291b0b15ad731a8412f920ff3766869708b90d0d279d4f0acbcdde4463f2d","first_seen":"2023-03-07T12:41:35Z","last_seen":"2026-06-06T12:53:17.696687Z","times_seen":17681,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/themes/btcsale/images/bg.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/themes/btcsale/images/bg.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/wp-content/themes/btcsale/style.css?ver=2.5\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 471111\r\nserver: cloudflare\r\nlast-modified: Thu, 30 Mar 2023 08:22:34 GMT\r\npriority: u=4,i=?0\r\netag: \"642546ca-73047\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ku0tYAte0bW6WVFuBxx9h31wgNcu1vQB0RsfmGOqzGZqH6T%2BQIe%2B1Es%2B3N8U3Dvj7noSuYN4KazM9P1DYwAU0Cipk1oYmFzyMWu7EwE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f2ba71de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":471111,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1460, 8-bit colormap, non-interlaced","md5":"7f6aae77b837ef38e046405ea4a20e11","sha1":"5a1d98c8d56e8bedd56110a162d34f3ad1f8bcd1","sha256":"695bd5a94a4d171d4e513eb005ea76b8a03732732b3f115de8fda0a42f102ecc","sha512":"623c0f8a779095c1dfbab6c8aa2ffa7834c12d79ec2f956f1f59b7a3b356d544828c06be8e360ed6d0f46be8c2d2a7afab7f09dd58861545493d69688acec739","ssdeep":"12288:w+dYsAwkLPNKEoINEonvh/DWYFtoGMm8+ZdKMOcAVhq4GWQ:w+fALPNNTv44+Q8r2j","tlshash":"86a423e40db92ee1fc0cc29de269f24377a6ab5408ecd799dc7e54ca560035b72a8835","first_seen":"2026-02-11T06:40:22.587656Z","last_seen":"2026-02-11T09:56:55.059353Z","times_seen":2,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcsale.me/wp-content/uploads/volet.com-black-logo.png","fqdn":"btcsale.me","domain":"btcsale.me","tld":"me"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 15:22:25 GMT","end":"Mon, 06 Apr 2026 16:20:54 GMT"},"fingerprint":{"sha1":"ED:0D:32:E1:71:7A:61:A3:6B:9B:9A:6F:F2:C6:4C:BD:93:48:E7:62","sha256":"8D:6C:D5:5D:60:83:7B:FB:63:45:0C:92:A1:1C:8A:3C:FC:0B:D7:95:FA:38:44:E4:5D:D2:18:81:77:96:E8:12"}}},"request":{"raw":"GET /wp-content/uploads/volet.com-black-logo.png HTTP/1.1\r\nHost: btcsale.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: text/html\r\nlocation: https://1.btcsale.pro/wp-content/uploads/volet.com-black-logo.png\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nage: 457\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EzKVcbEzJSBYvyXwKTWfjiSPx1LGunFnc4PceeNgvUwjqYPmMrTMbYpBLswq8bQ%2BmQNFwuajlYrSrG6iI7UFXJ%2BgC3Ocz4HfhyY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f2ea01fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35908,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T13:09:45.117471Z","times_seen":16178700,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/themes/btcsale/images/harr.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/themes/btcsale/images/harr.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/wp-content/themes/btcsale/style.css?ver=2.5\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1056\r\nserver: cloudflare\r\nlast-modified: Thu, 30 Mar 2023 08:22:40 GMT\r\npriority: u=4,i=?0\r\netag: \"642546d0-420\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fcnnHOQCNcL%2B9eSaEbWizQOi3hmVPDvAp0uVZTbcb9bRixe8OfiaMjfGRRrC1Aw11f2IBWz7fpx2wRm8SwmWIc7UvwSENcCopsCKub4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f30b6fde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1056,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 14, 8-bit/color RGBA, non-interlaced","md5":"82655ac400f0e6cfbe1ff7df9dbd325e","sha1":"759d45b10255d631bc3e41fb3e321e305c3d3010","sha256":"3c8f0367385b9d80ffae0cf5513f64e7118057b3ff89e2915bae2b3d1197e4fa","sha512":"08bd23209c9d527bf5db423925100e864f70eb2d3f1e5ab87a1db973759af88904d487f790a898ee825b6ab5588e610c4029068d4612cde1cc1726fac4feabf0","ssdeep":"","tlshash":"d3113e5afd8224818e89dc81a9f7802fd91309d0dac0e4ebb9cfc41749b85b24c2e0c7","first_seen":"2026-02-11T06:40:22.629546Z","last_seen":"2026-02-11T09:56:55.061248Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1.btcsale.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Feb 2026 23:23:18 GMT\r\nexpires: Thu, 04 Feb 2027 23:23:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 556388\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-06-06T13:12:43.960627Z","times_seen":508033,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":100,"dns":1,"connect":8,"send":0,"wait":10,"receive":7,"ssl":144},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/uploads/Bitcoin.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/uploads/Bitcoin.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1.btcsale.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1906\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Jul 2022 20:32:46 GMT\r\npriority: u=4,i=?0\r\netag: \"62d714ee-772\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FPS7xuA0tkH7qFvZUJuTp5mDtKVNvl%2FtEAAbNYfWpUdMlV3ZGp99IzH1KX%2FJJX36abVj%2Bl8XNad4Bbe7nu1PrdYtoc%2FxERN1EAgKPHk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f41e89de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1906,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 4-bit colormap, non-interlaced","md5":"91329c8c79c256bdead1c6ecb1c84a18","sha1":"7b07fcbdc7b54107c9b94f48f9153f25a68d78aa","sha256":"59ee7e0892e8b13482e0fcbb1107a9845b3e13d3821677f1d977942d66f20fd7","sha512":"926abad8f4d65f1e523ebfbb981a1d1379e005becc39b0ede185a9ba932650b81f381cee68d1cd6ba644452ac95cd1a2718d28e2f3270052efb2ddb9ff7acd12","ssdeep":"","tlshash":"834117f8a58b8534883e1806d0b40ffc7461a2063517d8066ad5f27e7ece7de82a1c43","first_seen":"2023-05-22T09:18:58Z","last_seen":"2026-06-05T20:39:26.860938Z","times_seen":70,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcsale.me/wp-content/uploads/Tether.png","fqdn":"btcsale.me","domain":"btcsale.me","tld":"me"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 15:22:25 GMT","end":"Mon, 06 Apr 2026 16:20:54 GMT"},"fingerprint":{"sha1":"ED:0D:32:E1:71:7A:61:A3:6B:9B:9A:6F:F2:C6:4C:BD:93:48:E7:62","sha256":"8D:6C:D5:5D:60:83:7B:FB:63:45:0C:92:A1:1C:8A:3C:FC:0B:D7:95:FA:38:44:E4:5D:D2:18:81:77:96:E8:12"}}},"request":{"raw":"GET /wp-content/uploads/Tether.png HTTP/1.1\r\nHost: btcsale.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: text/html\r\nlocation: https://1.btcsale.pro/wp-content/uploads/Tether.png\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nage: 457\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mGF9Fiz8eMn20kIVTUYVSTY4RKESMgrv72UXWpwlPF6LsWUYVTquBFu9nEHjWsQlYeyt%2BKvwtsgu2vpVyTrfO7iS%2BYCRVrgzeXw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f2d9d4fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1531,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T13:09:45.117471Z","times_seen":16178700,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1.btcsale.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 19:45:58 GMT\r\nexpires: Tue, 09 Feb 2027 19:45:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 137429\r\nlast-modified: Thu, 04 Sep 2025 17:11:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23776,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23776, version 1.0","md5":"61611e47a80abeae7bab6335b074c70b","sha1":"6902954d25cbd00a037f12421a0d25580a0a81f7","sha256":"6e310df94df0c3e75cd1c6ecd08e22cc559eb0667d54013afdc469671ef4614a","sha512":"8207ee33de460e5f705a53a54ed45f4ad921141672b995584b2718a9bee837ae3331647f0f8fa9b62b812e6b54f9397e1da11160f9b3bf51ae39fc1ec32bb07b","ssdeep":"384:uEEi3OYr7g0sF91UG3qkcKtr40D/w18XHu3Nr/UL2s+HSeSN/Z26s6A296:fEieY/gfj1UVKSow1TVs+HY/Z/a","tlshash":"d4b2e142401cf0b1e7c76f7daacf24c095d613bacf3f95981145db7855ad5932c9c88a","first_seen":"2025-09-05T05:16:31.285834Z","last_seen":"2026-06-06T06:59:33.476173Z","times_seen":8424,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":231,"dns":1,"connect":8,"send":0,"wait":8,"receive":1,"ssl":275},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1.btcsale.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Feb 2026 23:23:18 GMT\r\nexpires: Thu, 04 Feb 2027 23:23:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 556388\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-06-06T13:12:43.960627Z","times_seen":508033,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":77,"dns":3,"connect":20,"send":0,"wait":8,"receive":4,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/uploads/Monero.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/uploads/Monero.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1.btcsale.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1742\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Jul 2022 20:32:54 GMT\r\npriority: u=4,i=?0\r\netag: \"62d714f6-6ce\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZhdlG2LUOE2eZhi67muMe9OVLE1cgMEvm5H%2FeNz5e5volsNe2SpqbH12ESP2jn6u%2Bdf3d4l%2Fw9ZyUSL%2FmiLgr%2Bx%2BM%2BaamxDcIfS9epo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f42ebcde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1742,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"3ddf38161219235deabadc9d639f30a6","sha1":"08784a26c21ce91d543545c2de86ff8c6c2b653b","sha256":"7b2259ba2e98a86ca8cdfdd6df1feeff895d1fdb61fe094a846c950c3de52ae8","sha512":"032532b95b4808c605060fbb7c62090970416fe3822ca6b43cd2ec258a6699cbf165bcc8ca53e5dd5023eaf64723131a44e27aafeed1c60c243d52b09898d18b","ssdeep":"","tlshash":"393108804224c580c02d24723498821288c7e1b17ffa378facb4eff122d71ba404a97a","first_seen":"2023-05-22T09:18:58Z","last_seen":"2026-06-03T16:40:00.221082Z","times_seen":38,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node-ya-6.jivosite.com/widget/status/1502733/XFKvrcxlqA?rnd=0.9513244141959399","fqdn":"node-ya-6.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"158.160.53.45","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:27.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/status/1502733/XFKvrcxlqA?rnd=0.9513244141959399 HTTP/1.1\r\nHost: node-ya-6.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1.btcsale.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://1.btcsale.pro\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\ncontent-type: application/json; charset=utf-8\r\npragma: no-cache\r\nserver: foxy/4.0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\ncontent-length: 158\r\ndate: Wed, 11 Feb 2026 09:56:28 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":158,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"35b81df1a244688ba72cae46b4e12268","sha1":"972a74974c1e2cb74aea737f581cb4c3e6f49c48","sha256":"450171684936bc6242f58cd6ce83714ee78578832458762e4c591323b48472f6","sha512":"79080917977a9fab0235e16d911817a3e0bf113dfc9845a29dc18c71faca227f115cedec97c7e17d75401f6cc17ad572f52b905294e28d553a71eec259b5b391","ssdeep":"","tlshash":"85c08c3a102605f64240a210a1c73f0b063c01232dc2822ca162e50560bf5818a4d003","first_seen":"2026-02-11T06:40:22.623938Z","last_seen":"2026-02-11T09:56:55.066403Z","times_seen":2,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":117,"dns":45,"connect":32,"send":0,"wait":32,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/css/5f3ca08/widget.css","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:34.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /css/5f3ca08/widget.css HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 09:56:34 GMT\r\ncontent-type: text/css\r\ncontent-length: 25386\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"698b2a99-632a\"\r\nexpires: Fri, 20 Feb 2026 13:50:35 GMT\r\nlast-modified: Tue, 10 Feb 2026 12:54:49 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-02-10T13:50:35+00:00\r\nx-node: m9p-up-gc90\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137137,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2774c9239097c91a13a487e24a2ebdda","sha1":"b813877552a6d1ef88821d7e8c10d5fe6b3d274b","sha256":"e809e1f3500cf65e2f23d75eeb5e033afcc6c60507326aa7b6405c2daf477f51","sha512":"296c752e5f47b72284e1fc5b33566e2f04549beb5884f7845bd5038ecd5e6d5f062c8acd9b3367f6ad3757d011c0e64f94562492741fa9ccfbd6d215f453ca53","ssdeep":"1536:iL5TTKsyA6h6SrhHDuVye262HSfpTyl6568+UlA4UUV6tFUPQxicOLOEDl6mc3o7:LL3S8S2oaU","tlshash":"ddd3e865ead2a53ce91e541ac8c5aa3ca63de102cf230dbbf744f3e147cb6e21276505","first_seen":"2026-02-10T14:15:11.570412Z","last_seen":"2026-02-18T06:03:42.216428Z","times_seen":215,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-includes/css/classic-themes.min.css?ver=6.2","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-includes/css/classic-themes.min.css?ver=6.2 HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncontent-encoding: gzip\r\nage: 4801\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 11 Feb 2026 08:36:24 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CIcLNT0JcuNB9bATfQeDpZsloSO7L402jidvV1FnuictOhKLJFWxwUeoh6NkP6u3hhxJWYnzhP3SGHZRreHJDAENEESJKtA4b%2FfSvN0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9ef5f8ede91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":313,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9529bf314ea0c1c70ebb4825776a06fc","sha1":"37ffa383613c5e8fd656f0b5a0fb713604c0f618","sha256":"5019bfc4df2c362dc31022567f3d8044b8e5ffbad2d4c63969f11a03b811609a","sha512":"50fd98231c7850d90ac3c2c142404a93a49ab285f47af0af63215287858dbda8059bd9532f4780255db10a53e23767391d48b58127173bd4d4977c8ce45a5f17","ssdeep":"","tlshash":"d2e07dc1674f04d2305fe16c4511028880b40080d8b35ea1d4daf0d9ede50f923e529b","first_seen":"2026-02-11T09:56:55.068947Z","last_seen":"2026-02-11T09:56:55.068947Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/plugins/premiumbox/premium/js/jquery-forms/script.min.js?ver=3.51","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/premium/js/jquery-forms/script.min.js?ver=3.51 HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Mar 2023 12:32:00 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"64106940-3b9a\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WekRus%2Bet9VzGB75UnMeo2ACFCJ5Vp4oW4oB7LkoW24r5MKf7dW2yml2MVoocKdotI5LjEeTN0%2BgELNN8e7f9wBANV%2FtEXY7xhsZFkQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9ef6facde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15258,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14900), with CRLF line terminators","md5":"c96241e183012fd2646c4d6917155168","sha1":"98a92639a7de79a392c60b56e090e504071bc1f8","sha256":"27e9042e0cd29ac1e29332d3a88a1aa1bc84fb912ac5b14ced66d8f5e6890938","sha512":"fb7de78075aaa64d5ab57e8914c2a577446321c2c554524d6894c37386e5c3ba2436d0c259f4d61d884715f519798262e3491838eaea1cc1b97d2790c5da40a0","ssdeep":"384:zEuKdl8246ZBPw0+vN9FpziTpqd+KeMnQ3bYoZR94kozOE0mZ7oebm6iEII:zUzvPw0+vPziVqdPuj4kcOE0mB9","tlshash":"2d620ae532c450761bf674d5896f8147a231a92a054ec0a0ba6cccf51efcd85a173fb9","first_seen":"2023-03-07T01:06:40Z","last_seen":"2026-06-05T20:39:26.999157Z","times_seen":558,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/plugins/premiumbox/premium/js/jquery-timer/script.min.js?ver=0.3","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/premium/js/jquery-timer/script.min.js?ver=0.3 HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Mar 2023 12:32:00 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"64106940-589\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2FVXGbfSQwGBCbkuwjCK5ruukLGj1HFgDJXxxBULyhUkNXb1iV7T1YOWvmy57NNNPTEBSVL7%2B6ewjgVpYb%2B3EObyK7%2BW197TZwQNoUo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9ef6fd4de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1417,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1417), with no line terminators","md5":"4bb145d7cdf393ea7b0b841175ed51d3","sha1":"f7b58872dae27fc10278ab0aa7ae704e21fa4cd1","sha256":"389ae451d64bd33aa97ff3f82fb85a7ae7d53f367df376d41eface19d18918d1","sha512":"09f7370c237e6dcccf64b566d6c9abf6987b7411181cf61147a7fb2ef033ce62ea909706d4e67b1100af3d808cb989e735534a1772df767df589c523ccb3caed","ssdeep":"","tlshash":"16218cc533e1203205bb92f21caf533676b0a41be51a9a4da2deaaf15edcc153013e36","first_seen":"2023-03-07T13:09:22Z","last_seen":"2026-06-05T20:39:26.916048Z","times_seen":129,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/themes/btcsale/adv_images/5.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/themes/btcsale/adv_images/5.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 14344\r\nserver: cloudflare\r\nlast-modified: Thu, 30 Mar 2023 08:22:22 GMT\r\npriority: u=4,i=?0\r\netag: \"642546be-3808\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uRrR2NDPwGRrNqTo5EybS%2BcnbiE%2F9AJwqnkHSur4RlRyu0tsygjLxLErWu4zRzP1FgxSZfwi5By7sR3OGeHUTtHo4mynU25FlB0kHRA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f31bc7de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14344,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced","md5":"1790150e05e1580619732d9e5df51733","sha1":"c8ffbf3cc43072dd3ea78a2bc989ae1ca04e7e5b","sha256":"1be0e1ca331ec7413e9bb05963f81946e1f98abccad75fe85c4d6c81c40e9bf2","sha512":"f0b9595961abd412eea7643c3022acbe3bdb54df3b79fa5fe8f5539e7ded3cc56a22d037eeceaf0129bdd329c8d4c561e07223f42e8d4031fa210df6c950ded2","ssdeep":"384:MqX1t6uaZc/NIVf6cDExvoJCSan8Z8dABRwhGV:fXf6ua6Wf6CFjF8dyT","tlshash":"76526b8c7bdc2902db2ae9bb1911ca9558de49ee13c7cc78d91fa734a2d07c903631b1","first_seen":"2026-02-11T06:40:22.666861Z","last_seen":"2026-02-11T09:56:55.072537Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/themes/btcsale2/favicon.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:27.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/themes/btcsale2/favicon.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 23669\r\nserver: cloudflare\r\nlast-modified: Mon, 19 Sep 2022 23:00:24 GMT\r\npriority: u=6,i=?0\r\netag: \"6328f488-5c75\"\r\nexpires: Wed, 11 Feb 2026 10:26:27 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jfnOEYJsAcrvwIL6U0NuRxGsmc38xT25bwrhiNakfLQQTY9I0zcUNLHAdmChkOKvqsrMpla4DwgmZMTdvWoZ68vd7VKIPyio9Zo7OHY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f5fcc3de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23669,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced","md5":"df57b9de8aa12c140c338e44125ff701","sha1":"6ec817029368ed21fbf886c71e55d7e2b5a49b00","sha256":"a06ab0bcb504b7540b9826b2772f7ead0fb0e13e02353da536dcdaecb45ddfdd","sha512":"7dbd9d9a1584f0c7f0a2e980ecfef8c9eed898b779bff23ef2e62cb4f61f2bf3e4bee8a36671fcbcc54d5decc11a7be5107606245c3bed9b9cf152d14e19a6d7","ssdeep":"384:qGfX+e7hHA7DYqUhT4FEGnvupdbpA19NX4AUfkwmGX2o/MsAAYiMBT5dHAjkxz6:qG/TggPKfvupnA19NoLfkwmGXlFAAYZA","tlshash":"deb2e1bf10b914d8157e1844ee1ef6da844b3b52f74eab107255598b2ec0e2ce2f9f44","first_seen":"2026-02-11T06:40:22.674105Z","last_seen":"2026-02-11T09:56:55.074102Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/notification.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:34.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/notification.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 09:56:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5808\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"69428756-16b0\"\r\nexpires: Sat, 14 Feb 2026 23:53:21 GMT\r\nlast-modified: Wed, 17 Dec 2025 10:35:02 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-01-15T23:53:21+00:00\r\nx-node: m9p-up-gc7\r\ncontent-range: bytes 0-5807/5808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5808,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural","md5":"9aa341af370c4e59155717260ba0f282","sha1":"0c1216ecead8d1409557c843d96202c063f3f252","sha256":"1112436abea08c851302bba4d4e37a27e25e5ec26b20474667a3369d41154bab","sha512":"e6663f8406d859a7ae65e6eb9512ed1e79244b8f5b2119823f80fed99c17dd4a086cc17083f3cd70b6dd990c39b3be80142f303a7c2a9fbb9302147e700fa5cb","ssdeep":"96:XYLRSqytFnbfWnHBaSvgEyZMZuiusJ0jQDrrQNw:IMTnbfGhaSvg/inqc0m","tlshash":"cac1297acc3c146fd81e88b53f3bb0c9421c61803a00d8e61c99bb5bd6b2ba975468d2","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-06-06T11:46:13.122697Z","times_seen":16379,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"vi-ya-4.jivosite.com/ClliU9lFKg?f9ff5250ff94b243","fqdn":"vi-ya-4.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"57.128.74.65","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:35.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /ClliU9lFKg?f9ff5250ff94b243 HTTP/1.1\r\nHost: vi-ya-4.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://1.btcsale.pro\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 06RekAcGb8zCkt0Y2RPeag==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Wed, 11 Feb 2026 09:56:35 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nAccess-Control-Allow-Origin: https://1.btcsale.pro\r\nSec-WebSocket-Accept: ip9VGzBcqeA8tfMKsA52K669VB4=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T13:09:45.117471Z","times_seen":16178700,"resource_available":true,"data":null}},"time_used":477,"timings":{"blocked":0,"dns":108,"connect":142,"send":0,"wait":186,"receive":0,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/plugins/premiumbox/flags/ru_RU.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/flags/ru_RU.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 147\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Mar 2023 12:32:00 GMT\r\npriority: u=4,i=?0\r\netag: \"64106940-93\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8nm1NpwuHm%2Fk7Jhb2Mc4CAX8zagLAqH%2FGEeaoy79A9uM6RNARvJxWAUbotJF7%2ByfcjYmzi1UTAIfW%2FzlW6x0uG41naRBdiqeFic%2BuXA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9ef7feede91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 18 x 12, 4-bit colormap, non-interlaced","md5":"ed4238df44643d851f091ce61d804efc","sha1":"5f6c400a2dec275dbec9bb1970cf2c6b14129dc4","sha256":"7d5b3020fb294bed0a4b573aa29efb16d675aecb19493735b172fb9787db6307","sha512":"b3055329e3163984029486a26f40d5d9ffdb0e5338328eeaf3a1a25a70c34816132563ff50efa9b8bcbcaf719eb09bfa0500fd5c8a175361db89764aa1a50661","ssdeep":"","tlshash":"81c02bd36300cf71fdc41033f627cd31c8255830c2e00003250ecab3f2070855400142","first_seen":"2023-05-02T14:04:01Z","last_seen":"2026-06-05T20:39:26.964353Z","times_seen":119,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node-ya-6.jivosite.com/widget/status/1502733/ClliU9lFKg?rnd=0.3611453207099913","fqdn":"node-ya-6.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"158.160.53.45","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:28.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/status/1502733/ClliU9lFKg?rnd=0.3611453207099913 HTTP/1.1\r\nHost: node-ya-6.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1.btcsale.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://1.btcsale.pro\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\ncontent-type: application/json; charset=utf-8\r\npragma: no-cache\r\nserver: foxy/4.0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\ncontent-length: 150\r\ndate: Wed, 11 Feb 2026 09:56:28 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1caddb423b2d72985e98b84b44d0e2ac","sha1":"1021392373ebe999d683ef3f9ff97cda3d028409","sha256":"64c35f51cda4e3662c6627fe34c13795a263be04487972fd735f2d140cc3cb0f","sha512":"a2f6454f35917ffa927496c6475eb89bc3a650e9efadb14082f83d171208aba9dd675917c98572bb46b58e79e9bbee997e657e50a14bf8112f4ff2699745ee2e","ssdeep":"","tlshash":"28c08c2a002505f202409210b1cb3f0f012801632dc28228a122a50061bf581494c10b","first_seen":"2026-02-11T06:40:22.631197Z","last_seen":"2026-02-11T09:56:55.077614Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/premium_script.js?lang=ru\u0026ver=1770814585","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /premium_script.js?lang=ru\u0026ver=1770814585 HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: application/x-javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-robots-tag: noindex\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HQTuUyGTh6k7tVC9MoAfZbVRII33JOYbWmqwMnNvyXmQz12qT80ARZ1IFKM63JtC%2FXi32MYUlO7Y3ZaW6t360ELFBfgsSizx2beLn1g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9ef7fe7de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33461,"size_decoded":0,"mime_type":"application/x-javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"c651953b991f74f9b223cf93dfc142ef","sha1":"fc8dd874163226a3f20858febce335fdab6e20c1","sha256":"6c709c7d14b80895b3c0d0680b882b7a66e64b15da136f287a2f693c1f283ebf","sha512":"07ecc7f8d872d05f6a46615bf7fcc740f1f29ae46a5654dc89fcfd0787b2db5c723fe9b016c208b92af1a57520becce4613938bd6413a35552deb4850eb3f455","ssdeep":"384:hDDR4R2NJGMk3Gn6vbEK/5CfPj3BlTXfPcdp/F/q+p8vJBKtkMDE+ORE7sNV:cZg6vbx4VOBeLREwV","tlshash":"7de28490f71c715a80bf7024496f21c9271e647a98429ca6fd3c66a45f90f1dbb1bc3e","first_seen":"2026-02-11T09:56:55.079252Z","last_seen":"2026-02-11T09:56:55.079252Z","times_seen":1,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/themes/btcsale/images/tm-ico.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/themes/btcsale/images/tm-ico.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1232\r\nserver: cloudflare\r\nlast-modified: Thu, 30 Mar 2023 08:22:32 GMT\r\npriority: u=4,i=?0\r\netag: \"642546c8-4d0\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X7htRCn7Cfe0F1Wf4wYmM4HOchL7J6s5o5wQ7G6KBmFZMxR9Fx4K4wf1bed03w%2FZYn%2FWXyKM6aiCzGW6UeWI7D2086%2Bge6%2F8%2FqDJywA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9ef780bde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1232,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 22, 8-bit/color RGBA, non-interlaced","md5":"1507d2b5ba0ae159316a1832ee60fa15","sha1":"ed56631fa8187da908cba6c718f6c86a7e41dc4b","sha256":"c15f2b43a8b0018986038beb5464b567ac805b07fd0040f1173198c72c6abb17","sha512":"281797a95a32bb5fee82856b994dcddfce6ff70b1456759fd5ea72ce11b6045eb962d83e604108e39a11094f0a57c7d6e503d23194a43d4ab355c7263f2d4cdc","ssdeep":"","tlshash":"12218188fa9d1547e989a8c038f680178d360281dff1e06a7bcec8458cf12bd44e89db","first_seen":"2026-02-11T06:40:22.584907Z","last_seen":"2026-02-11T09:56:55.081093Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/uploads/btn.cb-.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/uploads/btn.cb-.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1.btcsale.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 3659\r\nserver: cloudflare\r\nlast-modified: Wed, 05 Apr 2023 10:52:37 GMT\r\npriority: u=4,i=?0\r\netag: \"642d52f5-e4b\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KYYXrMShPXwc0iEMHddRQ%2Flpgeciz8n4jfr%2Bjhyz5QKy1QoGwD6qHSUOf3J0%2BoRNsmKt5MzBqKNo68WRQdzp%2Bq40G0PdmSKP32VdHcg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f0dca6de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3659,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 31, 8-bit/color RGBA, interlaced","md5":"e285d475937400c629a707774374b55a","sha1":"bb8450bd491182294070992b99c363d4fdb210a8","sha256":"3a8ea1d758165c0477b9570f28bf6073940b0d655176391bbf560ee4213c4445","sha512":"d85d81991e1265a06d00e8674ee1a0dc0ad9cee38b16cd14d4e385809f4897b4e95b357a9dbd11065746e8c43f263d2144f2db8ff8b0ac12974c4349f62b35c6","ssdeep":"","tlshash":"b5716d942ed92b1ad0caa4735ba14cb7fa849ceece0b5152cca2dcb07090158f3711b3","first_seen":"2023-05-02T14:04:01Z","last_seen":"2026-06-03T16:23:42.191032Z","times_seen":23,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/themes/btcsale/adv_images/4.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/themes/btcsale/adv_images/4.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 24635\r\nserver: cloudflare\r\nlast-modified: Thu, 30 Mar 2023 08:22:22 GMT\r\npriority: u=4,i=?0\r\netag: \"642546be-603b\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W6mVSGRZiZR%2B6VsnuFKCA%2FvjBILP1K5FLT8It695dcxjzcCG6OhKIGB5kXvvSA0X8yT6B5N8cNtrOzQoZs47aPG%2FWgnB5M7xF89L9q8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f31bc5de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24635,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced","md5":"1d5066a66b1e32b70436d2d5aa5756b5","sha1":"1c455375c4414de2e31285f6fbfe4d1e802c89e9","sha256":"03a9619cfc6853b493a2e24bf76341c056286f1a98185b8245880c8c2b352183","sha512":"65afaad70c2d219f7f127a528e4ac5ce47241d83b90ef15f871e59c1b693bb6e83fa32d064bb351c85e4197268e889838eb89b4c6c8832d2dceeecbb64955acb","ssdeep":"768:WZPoEZ007UX+9XxsNUtIPszNG4Sa+7SkMNy:WFnZ007MEEbPszNG4STuH0","tlshash":"cdb2e094aef867fc02751926ecdd5d2a021eda0a740defa867f670ce88cc8364f9d444","first_seen":"2026-02-11T06:40:22.639889Z","last_seen":"2026-02-11T09:56:55.083622Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/plugins/premiumbox/premium/js/jquery-window/script.min.js?ver=0.9","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/premium/js/jquery-window/script.min.js?ver=0.9 HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Mar 2023 12:32:00 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"64106940-a6b\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z4PYuDLkRhoQ0yjuB38sj9qQphqx%2BEOtn9UP7Y66hGVWGhZtiBa3M7XMpKJnd36N6kW4lPY3E3QlTjtP7EeHASIY1ntvn28LIH%2B3kO0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9ef6fbbde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2667,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2667), with no line terminators","md5":"3648feb4cc99a9f4804e18c8cdb85733","sha1":"67d410d347018e4329ecfbd23995974fdc61e184","sha256":"ca8ab791876d6c04c73e6ebee45b700c476e2d6b45fb7bec74d9106ea80a6d83","sha512":"93a4619dfd495d89b015f0980089c46ed908055e535e5c0bba7193b76f1c01a0f7d77a983c045bd76962eb15622e69a797cc540549f3cc76e63f9633bb49f1b5","ssdeep":"","tlshash":"785102687282b41f467b40f0272f334b1292995b8c978505497d9f9437dae8fc78f6a2","first_seen":"2023-03-29T23:53:25Z","last_seen":"2026-06-05T20:39:27.012535Z","times_seen":123,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcsale.me/wp-content/uploads/btn.cb-.png","fqdn":"btcsale.me","domain":"btcsale.me","tld":"me"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 15:22:25 GMT","end":"Mon, 06 Apr 2026 16:20:54 GMT"},"fingerprint":{"sha1":"ED:0D:32:E1:71:7A:61:A3:6B:9B:9A:6F:F2:C6:4C:BD:93:48:E7:62","sha256":"8D:6C:D5:5D:60:83:7B:FB:63:45:0C:92:A1:1C:8A:3C:FC:0B:D7:95:FA:38:44:E4:5D:D2:18:81:77:96:E8:12"}}},"request":{"raw":"GET /wp-content/uploads/btn.cb-.png HTTP/1.1\r\nHost: btcsale.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: text/html\r\nlocation: https://1.btcsale.pro/wp-content/uploads/btn.cb-.png\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 457\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ckzDXWFzixof58U0R4upixeTiezBLT5wDe9oiv7BGGgy6iLbyNWRZ%2FwPbCkCXjpBwU79A%2FmK8AWlSLMDdiWG%2F5pwS05Sjs6dOrc%3D\"}]}\r\ncf-ray: 9cc2f9f02dc0ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3659,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T13:09:45.117471Z","times_seen":16178700,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/uploads/Monobank.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/uploads/Monobank.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 5886\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Jul 2022 20:32:54 GMT\r\npriority: u=4,i=?0\r\netag: \"62d714f6-16fe\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vVMUT0PKyceQ5APTpJWJkCWdZ753uhK2ABAB7AHh0BuN6Yq1TRrgjAxlQfTm7ad0uV2sw6eRXbz41g2dRAcipK7GxOJXWvXK0Cg3Gc0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f2fb30de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5886,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"532b6013fe6834db243975c972b1c03f","sha1":"afe8c0239c6c6a11588b7346302b56cfac2cf2cc","sha256":"6f7066c1d402f25c125ea1f3f3c0fb2106aa9a936e73f0708413f2d3e90c7972","sha512":"6f9af1e564e74ab90e3234a874fe6e6c5c7ccaffdb236c9844d22acf94da40f7a7649fd75112a412241f5335c205f1102bbd6923a35eb7673b70a479ee942132","ssdeep":"96:BAuS46jT1SnES04yX88bgCx0xI0ZMs6xMaJxem0/0M0R3pyOr4BNRBAqo5DN8mYV:BRr1EME88bx0C6MsdaeFE5dqRaqo5DN4","tlshash":"f8c17dede55dde537282f4e3d7f9e0619095381e9c2924758280bee79f042a2d7f420a","first_seen":"2023-05-07T19:46:49Z","last_seen":"2026-05-10T05:06:52.970412Z","times_seen":13,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/uploads/Tether.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/uploads/Tether.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1.btcsale.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1531\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Jul 2022 20:33:02 GMT\r\npriority: u=4,i=?0\r\netag: \"62d714fe-5fb\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cH8YjnQ8UvCcuqfP75VyEZ%2FgBWmXdPPbNloZVwTpRobzIrYXiwrPnNiv6cNsUthcgXv8jBL13Auyx6IChIuhB1j6VFthY53OdehXmjM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f42ec0de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1531,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 4-bit colormap, non-interlaced","md5":"e7f147d7213ea8c03d40f16b152f6097","sha1":"451e4818b086f58a86d80c1ab50c602561e75d59","sha256":"9d89d31f687c34978fa379affef2050578003f4dace8780ce06a9a668972477d","sha512":"78c7cf431e8d8f1441d8c1ef54d4588b13a177806e84454a86bd72a3ea3d4d96c57d8a38ddf1d1bc95f2663ee9762eeb75a60bbd257113fcb834b23f30aec199","ssdeep":"","tlshash":"7931e7a3ca5b021fd6b584b9248059b66f2e0b9e2a7957c10b9902c23a1051fe8f881a","first_seen":"2023-05-07T19:46:49Z","last_seen":"2026-06-05T20:39:26.859475Z","times_seen":61,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/themes/btcsale/style.css?ver=2.5","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/themes/btcsale/style.css?ver=2.5 HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 30 Mar 2023 09:54:22 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"64255c4e-1becf\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1sN2EPlmTVg%2FznlqoWEE45ZCq13DdcVC8OOSQ023SZDdM%2BfrkB13jF3soodzwhQydK4UmBQ1ziDB8meC6%2FmZIJevjquJ2qsTIdXwgO0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9ef5f86de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114383,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (323), with CRLF line terminators","md5":"d0f921074d10b5e3213048392d6ab5d2","sha1":"0979577808a21819fa80f6920707ffb3a23679d0","sha256":"c30fc44e688ff85061f9bdc4dabbb0eb6bef45eb8c2dae960792a2f67b03aa1c","sha512":"664f53126efe231e144b97430e0d0af2c393ea81ac9d6461f551ab9ed72a7700b7cd66317f14b42fbf82e006ec2e186236792f808d26f7c5adf53e2ca0535b4a","ssdeep":"1536:IRvxCPzpQ5GTsC1fw4E5K2iXG0IqCE7GszmhJandomyAeCeET+KUM4zUfdTqCYHV:RQ5G31w4E5K2iSmy5UfxzI","tlshash":"b5b34361bb4e204ee79660d4fa756752ce2cc072a71342f5f8e86930d6c8058dbf67e8","first_seen":"2026-02-11T06:40:22.690875Z","last_seen":"2026-02-11T09:56:55.087805Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/uploads/bestchange.gif","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/uploads/bestchange.gif HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2843\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Jul 2022 20:32:46 GMT\r\npriority: u=4,i=?0\r\netag: \"62d714ee-b1b\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AhCESG9vPv0IPqQa4LSNzhDPeqtQeRk6BuF%2BIbyAM4gxSrnLjOWrZXNTnImZzvKhVzc%2BAY%2Bf3CXH3GPvtjzCcTfqRnUT8D9ogO60KHs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9ef7fffde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2843,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 88 x 31","md5":"7339463059545271e39600202b62d23f","sha1":"dde2ed7b8c3f4ba6651de82bd1ca0193c46f7201","sha256":"9b45b7eebebec8911d3d3d4b1092f1c49f082730932a043ed34b0bd7cf6e29e6","sha512":"3b49bed9e4a447da64a281afcc53914a5d728ca339c5c6ef57f9defaaac75bcb6919b1d97f693d9b53c646f70893fa887ba076c1bad87545967c61fab6f584fc","ssdeep":"","tlshash":"cf515b59e58de98d9d17b1d0a18cf421f462afdc38837264c11e9f875d0d062f86c18b","first_seen":"2023-05-07T19:46:49Z","last_seen":"2026-06-03T16:23:42.207999Z","times_seen":80,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/themes/btcsale/adv_images/6.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/themes/btcsale/adv_images/6.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 18357\r\nserver: cloudflare\r\nlast-modified: Thu, 30 Mar 2023 08:22:22 GMT\r\npriority: u=4,i=?0\r\netag: \"642546be-47b5\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OieXuznQ6guDZasJHaFxR4BmfZjRbQsm9WIBVrLBO92ceL6UPYJZrRILENB4rKyJYSrRbuYqXrqVHqu%2FDqU%2FGQ8fpD%2F9v02aRO4YKQA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f32bd1de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18357,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced","md5":"89edad20d9956be8360f20c248f26d4f","sha1":"1d4f31f95dccafab9d7b73a57de282fad5a1caf4","sha256":"1c1e3ec000532523adf99c3d32be9cd1b2acc4211e1f51188e3ece11068c2dfe","sha512":"5f53a6c82c7103ea502c3f2d98a2e307ad673a2eaf3db087a092e69f30e67c548ce78a4e3f03cda81a0243574846b6f79fc2511f80bb3df723d9879a1fec7220","ssdeep":"384:NiTLUYfy81lMYdryvqWMKS/vlKjXDcI3LRY+mx8Wii5Yxl+F4NL0:M1RncCWZitIbOtxukYD0","tlshash":"f782d1d17928985cd0a7a3c176146ef538e97f1aef8f58c23c6498be50280d81c366fb","first_seen":"2026-02-11T06:40:22.6884Z","last_seen":"2026-02-11T09:56:55.090386Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1.btcsale.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 19:45:58 GMT\r\nexpires: Tue, 09 Feb 2027 19:45:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 137428\r\nlast-modified: Thu, 04 Sep 2025 17:11:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23776,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23776, version 1.0","md5":"61611e47a80abeae7bab6335b074c70b","sha1":"6902954d25cbd00a037f12421a0d25580a0a81f7","sha256":"6e310df94df0c3e75cd1c6ecd08e22cc559eb0667d54013afdc469671ef4614a","sha512":"8207ee33de460e5f705a53a54ed45f4ad921141672b995584b2718a9bee837ae3331647f0f8fa9b62b812e6b54f9397e1da11160f9b3bf51ae39fc1ec32bb07b","ssdeep":"384:uEEi3OYr7g0sF91UG3qkcKtr40D/w18XHu3Nr/UL2s+HSeSN/Z26s6A296:fEieY/gfj1UVKSow1TVs+HY/Z/a","tlshash":"d4b2e142401cf0b1e7c76f7daacf24c095d613bacf3f95981145db7855ad5932c9c88a","first_seen":"2025-09-05T05:16:31.285834Z","last_seen":"2026-06-06T06:59:33.476173Z","times_seen":8424,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":84,"dns":1,"connect":13,"send":0,"wait":12,"receive":2,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/script/widget/config/ClliU9lFKg","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:28.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /script/widget/config/ClliU9lFKg HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1.btcsale.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 09:56:28 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1647\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: gzip\r\nexpires: Wed, 11 Feb 2026 11:56:28 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9-up-gc88\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3735,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JSON text data","md5":"6d27c5a785d3817df2f8d75787aa07a6","sha1":"cdb5fdd8f0853c5bcfd215eb678a783ac6a5d0e1","sha256":"2789adcac4e76c1c5fde20d49dae9b1fea4d99ba9b5e3dcf1060832daf77b196","sha512":"54dd4e3578bd1b0fb7f76e65834e0048aa038d6a3f467174fd0b22d0bf6dae9ee1e301a48b2c576d4213b62adef2feed7495c848616b530d72e8ac9811b461ab","ssdeep":"","tlshash":"747163f1b99d3c1e2585b897c733ad1e7428525adb47cf35cc846a6bd00a1b12fc3626","first_seen":"2026-02-11T06:40:22.601797Z","last_seen":"2026-02-11T09:56:55.09217Z","times_seen":2,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/plugins/premiumbox/premium/js/jquery/script.min.js?ver=3.6.0","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/premium/js/jquery/script.min.js?ver=3.6.0 HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 07 Dec 2023 11:48:00 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6571b0f0-155ec\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ywc6oiQomB%2FTqmEoqq9RW3Iu3OSrWyg36NKKkB4pG9nDQ8s1%2BW2KGHuF6U43lnXqvKdNn%2B9MpHdz1ZDREUSutcEW8OYq78%2BS1N%2B8Os%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9ef5f8fde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87532,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-06-06T12:46:10.767152Z","times_seen":27414,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcsale.me/wp-content/uploads/BM88X31.gif","fqdn":"btcsale.me","domain":"btcsale.me","tld":"me"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 15:22:25 GMT","end":"Mon, 06 Apr 2026 16:20:54 GMT"},"fingerprint":{"sha1":"ED:0D:32:E1:71:7A:61:A3:6B:9B:9A:6F:F2:C6:4C:BD:93:48:E7:62","sha256":"8D:6C:D5:5D:60:83:7B:FB:63:45:0C:92:A1:1C:8A:3C:FC:0B:D7:95:FA:38:44:E4:5D:D2:18:81:77:96:E8:12"}}},"request":{"raw":"GET /wp-content/uploads/BM88X31.gif HTTP/1.1\r\nHost: btcsale.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: text/html\r\nlocation: https://1.btcsale.pro/wp-content/uploads/BM88X31.gif\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 457\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UfN9wJa6qiPZ%2B%2FrYNF9RvewzcZWYQDnec2DcD61RVYq1cCL%2FmRWG%2BTzWCV1sqP2xhEwN%2BtUnLhpBdL9jj7s9Q58Qmhvv%2Fp057ok%3D\"}]}\r\ncf-ray: 9cc2f9f02dbdea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32229,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T13:09:45.117471Z","times_seen":16178700,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/uploads/BM88X31.gif","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/uploads/BM88X31.gif HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1.btcsale.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/gif\r\ncontent-length: 32229\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Apr 2023 17:57:51 GMT\r\npriority: u=4,i=?0\r\netag: \"64402b9f-7de5\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y1QkBN852vAA5VRU%2BbYQWxUbUz%2Fmex2Mt%2BuVbPT5ydIIt69Pm2YpD6qXeVRDDLSmlj4EjsU0T3Jimr72tNhbpXLyRvBNG0TVuLAJfoI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f0dc9cde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32229,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 88 x 31","md5":"d40df225969e26e3a0ce5e4dce3af192","sha1":"23992003d815ff5d6de4a3c5ab3151817fad957b","sha256":"6ab43834f8624141520102b84ac4a1a5594b20d3c767e1395fd0f5b2c4d4b190","sha512":"3e7479238940c39967fd02a044ea05206384b42fd513a7b8c78b5251d62593698c57f0607994ca50b5986437755180d843e965b08a20d54a656c5c98bc4bd025","ssdeep":"768:dRVmOklm7OZJ6m1WFHsBWZrDWR+RTiz8MsR09eAAh:1ksylEFHsBArCRCk8MiueX","tlshash":"c3e26b0ece0d9c4dc47299b5032d6a59631cfd7e1a48926f68ccab75f81b1bd2c8f246","first_seen":"2024-01-21T12:22:29Z","last_seen":"2026-05-19T19:02:51.251108Z","times_seen":25,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/uploads/Sberbank.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/uploads/Sberbank.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1971\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Jul 2022 20:33:00 GMT\r\npriority: u=4,i=?0\r\netag: \"62d714fc-7b3\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s75fwnN1Uv9Uew3hKX%2FxckABBYkUmnLMxzjixp%2FXeCXV76iSs4ZgackQVYlwFL6Np0LPRSERnsjDKK6t8WpKaVgct2kXKqtLK29Wx6w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f2fb1ede91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1971,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 4-bit colormap, non-interlaced","md5":"7ec51046c85bbb8419e8b0d4e9f1b15f","sha1":"b0385dd8bc8545688688652227e66d74a1c3c71a","sha256":"af5e39e55f68f03c54abc1a51443027e73f7b97ad02a11d5cbe3eb93ef3025bd","sha512":"1f628175b33a2bb61e4e6e35e6be234f75b0ffd322c53f6e76a446daedbed11a8934441bd6b8f6e320d10d6c90d1a224eb9c4d5311ac87748dae4840e45ed1eb","ssdeep":"","tlshash":"6a410a4b57429c58ff37d4178d1f421b0e065fd77a2846348db494232b851640e523bb","first_seen":"2023-05-07T19:46:49Z","last_seen":"2026-06-05T20:39:27.026178Z","times_seen":24,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1.btcsale.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 19:45:58 GMT\r\nexpires: Tue, 09 Feb 2027 19:45:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 137428\r\nlast-modified: Thu, 04 Sep 2025 17:11:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23776,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23776, version 1.0","md5":"61611e47a80abeae7bab6335b074c70b","sha1":"6902954d25cbd00a037f12421a0d25580a0a81f7","sha256":"6e310df94df0c3e75cd1c6ecd08e22cc559eb0667d54013afdc469671ef4614a","sha512":"8207ee33de460e5f705a53a54ed45f4ad921141672b995584b2718a9bee837ae3331647f0f8fa9b62b812e6b54f9397e1da11160f9b3bf51ae39fc1ec32bb07b","ssdeep":"384:uEEi3OYr7g0sF91UG3qkcKtr40D/w18XHu3Nr/UL2s+HSeSN/Z26s6A296:fEieY/gfj1UVKSow1TVs+HY/Z/a","tlshash":"d4b2e142401cf0b1e7c76f7daacf24c095d613bacf3f95981145db7855ad5932c9c88a","first_seen":"2025-09-05T05:16:31.285834Z","last_seen":"2026-06-06T06:59:33.476173Z","times_seen":8424,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":75,"dns":6,"connect":7,"send":0,"wait":8,"receive":3,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/uploads/Ether.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/uploads/Ether.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1.btcsale.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 2611\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Jul 2022 20:32:50 GMT\r\npriority: u=4,i=?0\r\netag: \"62d714f2-a33\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sneagrsGj68WnX%2FHpw5TWfqAfbmwNQIlR8QSKp02zz8UrvG43j%2BzvEqG%2B7ph4tn6DydmNEeV9XDZEd2EuYGwQPr9VfeqRz%2FlBPvJsZI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f41eabde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2611,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"a578eaf6647aa6e7ce126543dc334490","sha1":"2a46e38869c19529a66960c9040da3b9b2e74ee8","sha256":"9de374df86ba2cee9931c637c2f1e598b6899f315da9cc4c9ebec907b05b9510","sha512":"68b0b0ffa457a35640b21c21ff6a250e32c831c3c082f238c36be63f77b56015b7af47dff0c25c3eee44effd3d8cb4b5296aec05bcb65cb44e8b5c352522e789","ssdeep":"","tlshash":"f8512b49854c9449e15b075d0c89dec52ae1f015f1b29dac07c8f0549d92a1cb90c9db","first_seen":"2023-05-22T09:18:58Z","last_seen":"2026-06-05T20:39:26.971273Z","times_seen":50,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/script/widget/config/XFKvrcxlqA","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:27.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /script/widget/config/XFKvrcxlqA HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1.btcsale.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 09:56:27 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1748\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: gzip\r\nexpires: Mon, 09 Feb 2026 20:56:04 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: STALE\r\nx-cached-since: 2026-02-09T18:56:04+00:00\r\nx-node: m9-up-gc90\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4012,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JSON text data","md5":"da67f014133ded8c5fbc98c82114a548","sha1":"6761aac6e4ad13fb8896a4281aaa06bf9f8bd1bd","sha256":"9e69162337ca1d76aa3f9f0ecb03834278be65d9b59094278daba9dbaab203da","sha512":"814bd3265903f44b23adc98f9e3dda7b2011b76d9624984926de1680c323248764367cde74032d6bd0fba8bdec1b0961af10b8ec199194826fcb6c13db46a1c3","ssdeep":"","tlshash":"b38152f1f89d3c1e2589b897c733ad1e74585256db46cb3acc882a5bd0091f06fc3626","first_seen":"2026-02-11T09:56:55.100627Z","last_seen":"2026-02-11T09:56:55.100627Z","times_seen":1,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":113,"dns":1,"connect":58,"send":0,"wait":268,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/XFKvrcxlqA","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/XFKvrcxlqA HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 09:56:27 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6201\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: br\r\netag: \"698b2a9a-1839\"\r\nexpires: Wed, 11 Feb 2026 11:56:27 GMT\r\nlast-modified: Tue, 10 Feb 2026 12:54:50 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9p-up-gc8\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18065,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18065), with no line terminators","md5":"08bb2b1c65762b11c191fd16e2399c86","sha1":"7f4fee0da92a42d27660159f34ed106b4ef79dbc","sha256":"7c0bcc2ed0efcd10baaf3ec249d1ef86ba0d93e7c523bdb4795b9ac128ae010f","sha512":"3d03e03e1f9d56ff1ef3307f17e39b75266b82f6c34626d132fd540eed90dbec23be22fb0d0b838cee19d406130855b1335bdbc39556c44b70f0575ca3136b57","ssdeep":"384:boU4JkQamum040erAN8OX7HMiqJISOVJBz8U08wYWcPY4:RtM/AfX7WO8UFWcPY4","tlshash":"2a822b6e7959b97743b208f9606f6209733549ebd404c920a401ea4d7db8ede813fef8","first_seen":"2026-02-10T14:15:11.610153Z","last_seen":"2026-02-18T09:49:24.551113Z","times_seen":234,"resource_available":true,"data":null}},"time_used":2446,"timings":{"blocked":1149,"dns":69,"connect":63,"send":0,"wait":89,"receive":1,"ssl":1070},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: application/javascript\r\nexpires: Wed, 11 Feb 2026 10:44:26 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X1qJ7dZKoGJ6VL2JhHBhn1JC9JhOSDnM1p9%2BMpWHtRWCoham5SWQ7B7YWy4quTTDj5FV0kIIwhjYZlG%2FYg6nKU2xgqRLoX%2BbXRSjxvY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cc2f9ef881fde91-ARN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-06T13:10:26.372426Z","times_seen":362012,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcsale.me/wp-content/uploads/Ether.png","fqdn":"btcsale.me","domain":"btcsale.me","tld":"me"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 15:22:25 GMT","end":"Mon, 06 Apr 2026 16:20:54 GMT"},"fingerprint":{"sha1":"ED:0D:32:E1:71:7A:61:A3:6B:9B:9A:6F:F2:C6:4C:BD:93:48:E7:62","sha256":"8D:6C:D5:5D:60:83:7B:FB:63:45:0C:92:A1:1C:8A:3C:FC:0B:D7:95:FA:38:44:E4:5D:D2:18:81:77:96:E8:12"}}},"request":{"raw":"GET /wp-content/uploads/Ether.png HTTP/1.1\r\nHost: btcsale.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: text/html\r\nlocation: https://1.btcsale.pro/wp-content/uploads/Ether.png\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nage: 457\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=woi7%2BwqeQXsJ2lJxkczkNqyFltAX%2BUP6nqbEpD320SCgkNl%2B2slhd6Jmm3dkSvHI2R3uxWuOCK7Wu28htyR3b2EE7FDh58cM9B4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f2d9adfb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2611,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T13:09:45.117471Z","times_seen":16178700,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/outgoing_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:34.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/outgoing_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 09:56:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5014\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"69775d6e-1396\"\r\nexpires: Wed, 11 Mar 2026 23:28:23 GMT\r\nlast-modified: Mon, 26 Jan 2026 12:26:22 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-02-09T23:28:23+00:00\r\nx-node: m9p-up-gc29\r\ncontent-range: bytes 0-5013/5014\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5014,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"7bf3e4962a5ecf1f8cbcc2ff3428f531","sha1":"f75c694461a643d2e096ae8d0f6c1a9d19602eee","sha256":"d44244617bf21df7a137694fa762d5cab3b82cb9fae8f33de5917977b02b2a11","sha512":"53fb17ca3361636acb0b80107f66810150a8bbed9aa5f878c2b1fb5a23ddf7fd349b30eb082b05efb3c0d08dc5383d30ef15d0ca99ad98d62e0a9a335112ed6a","ssdeep":"96:nKEOyBuK+1D2sMVx9FX7+0YQQinefV/1gr/EaadKXdGdimO1:K2QhGvYinsLE/SUdUime","tlshash":"5da1399616202262f6090cbf124ec2f4e3996f6b39044726b67cd290f46ffa25366983","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-06-06T11:46:13.093012Z","times_seen":16378,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-includes/css/dist/block-library/style.min.css?ver=6.2","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.2 HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncontent-encoding: gzip\r\nage: 4801\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 11 Feb 2026 08:36:24 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EtOWru53%2Bbbl66rI%2FIN9FYStNSSNjuo9fMVJffsWJa1XejFqbgeVpgFXutxnHfd97fANc73OfB7HFkukiBcN2gcdoOQ0O5cHZ%2F%2F1u7A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9ef5f8bde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97539,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (48347)","md5":"cbbd7db2ddf20db438fc99f32b9b6949","sha1":"bb75462b18cf535ef2a1659fcf73dd783db143b8","sha256":"7801e99befbe45135fbf231d94ce480257cc21ac880a25194d1388d33486de1b","sha512":"a94dd6cf66cc79084a36232e17f71a661692684a0d0e3d3f63f3e0cf4ac5872d723e0b4ef6b11068dd93626648332c885ce3bf15f001c9126d31b505a048ae7e","ssdeep":"768:Bi44/Jj1eJYfD5n4CTb2u5SOV+UQ3ZoQsFvc7i9bGUg5zyH5Hi/UYvcHLrbuS/KT:sheJYf6W2u5SOV+UQ3Zo/xHHgf1E0Qz+","tlshash":"3193305417b0dcf939ffa73a5e5ee248a513aa41c24a9be7e076d190614ca490cf3b0f","first_seen":"2026-02-11T09:56:55.105636Z","last_seen":"2026-02-11T09:56:55.105636Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/themes/btcsale/js/site.js?ver=2.5","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/themes/btcsale/js/site.js?ver=2.5 HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 30 Mar 2023 09:46:44 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"64255a84-e49\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tXULje6YkjiB9otQ8MSS7QzaBOfH5vMy%2FV9wlCE3SnvEbDKJGzqHFmUlrBTsYm9IeC7TVSITU3FeygDEyuNdQE5VhWLeZWYBU12ZuQo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9ef6fd1de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3657,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"2cbbad038b046e8718545fc5642ce336","sha1":"c04a2e2225454f407074c4709fe5e93002203c79","sha256":"3079ca11bf5c8216304a73a79fb9e5b1404174a6c42b40c24ecbf5fb51e7c47d","sha512":"e6de3938fdecb7245139c513b6df60a65f2eb3932c12190074ebbd628a9e12b4805e6c2a326fab4b5abe713415a4e296e5a6c50890adf359c2ffa3ecbc53b7ba","ssdeep":"","tlshash":"c971e2827a74b66dd1fb3059a17f4140ef29d4138a062c58f8fa55606aa070ab7e3c3e","first_seen":"2025-10-13T22:08:38.95098Z","last_seen":"2026-04-07T12:23:33.007188Z","times_seen":9,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/uploads/26-TRON.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/uploads/26-TRON.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 7618\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Jul 2022 20:32:02 GMT\r\npriority: u=4,i=?0\r\netag: \"62d714c2-1dc2\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DyIuSs1mQZCposjN%2BRT61LBZwSo2A7NbJ%2BZRiYTVwIzyU%2F%2FNQ05Qlk5RA%2BtAfN4icYuSWqGnra2mSuPkZQ0KAEP79rWP7pDX5pZB70A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f2eaf2de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7618,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"ebc4d203072eca5a27588e3dba6b28cc","sha1":"0ed899e5833b958a58078250c1952f57dd65fc36","sha256":"22ff046086ca9fb62e7c73616cfc4a61eac9ff721a11143ab9d109e631bd7a78","sha512":"7a530bbd84b394b8a00a6bd0a10f318bfd6c6f6f131f80fdbe8bad1b3ec1b5ba3bacdaab53f9f0fbd0b7bf3d620083325844436d49c48ee2fc48192d8a114b3c","ssdeep":"192:eSfiESQdUIMEEXY/0Ftjeh/66GWGGDmeOlxmUVIlcac7:BfNSQDEm0s3GQOlxBIA7","tlshash":"fef1bfd397df08782b19c0f15891e6507b9b16ebe061a67854fb246b9e94cc89c2c387","first_seen":"2023-11-07T08:56:27Z","last_seen":"2026-06-03T16:40:00.140258Z","times_seen":27,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/uploads/Visa-Master.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/uploads/Visa-Master.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 2525\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Jul 2022 20:33:04 GMT\r\npriority: u=4,i=?0\r\netag: \"62d71500-9dd\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bqf4eHcX6DLfvxWm07yARgvGI3o4ipG5kYMa0djYa3ZXdi1dknDrk2%2B39g6E1RPsHxlI8N6qiKlqsZrZ3Wkbsy1yTA2akHlskmxo9vQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f2fb38de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2525,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"1125cce2aef7e8596054164a416a1a5a","sha1":"3c36ad8836b950d8a1b2b9dea031246a30952e3e","sha256":"66c47b2654b7a2b0db9f96756c407a0fe868faf1f5e6111f2c96e6ed9069f448","sha512":"aeac0fa302a1f1cb2b815d9ea5c51e1119079948911aca72c3390b8ff86b6712f04e658f7614e90483897a9f97350b40ae3542057792c00f594cffbdb7eb9bb7","ssdeep":"","tlshash":"4b514cd654b43600f4b998edada069736e39300b36501b3b5b8dc08dd651665c19a687","first_seen":"2023-05-07T19:46:49Z","last_seen":"2026-06-03T16:40:00.212209Z","times_seen":31,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1.btcsale.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Feb 2026 23:23:18 GMT\r\nexpires: Thu, 04 Feb 2027 23:23:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 556389\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-06-06T13:12:43.960627Z","times_seen":508033,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":217,"dns":1,"connect":12,"send":0,"wait":8,"receive":2,"ssl":264},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/themes/btcsale/images/telegram.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/themes/btcsale/images/telegram.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/wp-content/themes/btcsale/style.css?ver=2.5\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1187\r\nserver: cloudflare\r\nlast-modified: Thu, 30 Mar 2023 08:22:42 GMT\r\npriority: u=4,i=?0\r\netag: \"642546d2-4a3\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2FGhBroBFsX9bV0OoKXsj5sHBv5NP61ytGVmv%2FadquSVaIVpqirOGKvU8E65GGNPBHs66zDJe0Akx%2Fr3TuVeiYlErJxSCyzV2aUEohM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f42eccde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1187,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 14 x 13, 8-bit/color RGBA, non-interlaced","md5":"63118e9709d7ad0ebe5f1c8ba6b30901","sha1":"986657a9407a852f0d6f104b8b4ac4521bba2add","sha256":"dc6353ca979358751a088d2ae2f94aae207d4c24a3299860d99b54973eb51294","sha512":"20b9eccc6d83441e937321975c28926d918f403957d17b232a1e898b902d5a6f239a83db808c4b091ff36edf73581ac798297c049568c756ff9ed4baa5e21f61","ssdeep":"","tlshash":"ad217446f6501c428b0da4c118ff8026a46201c15ed1f6d5bececac38cb53bb44696d6","first_seen":"2026-02-11T06:40:22.589819Z","last_seen":"2026-02-11T09:56:55.111471Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/uploads/E6X8NVktZGZRR.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/uploads/E6X8NVktZGZRR.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1.btcsale.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 2657\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Jun 2023 10:13:22 GMT\r\npriority: u=4,i=?0\r\netag: \"648c35c2-a61\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BdZz1o8bnGscch7W%2FSm9IPnGaqgXHofVHZF5rmBLQLTA7O5yI3ohgbSWR2%2FieOeP%2Fh14SrJBHiPVuBrt7VSAPIZCeNMqYzlp%2FaBFU%2Bs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f0dcb2de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2657,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 31, 8-bit/color RGBA, non-interlaced","md5":"1f0be31d16767dd8dbc0e68e2047cc21","sha1":"7558ca295ea0029a0f0c0a25bc68cc991c9a72ec","sha256":"53a30e03e8b91fc52c39f1430726043d956628e27a8d15a057674adde43aaf34","sha512":"6a6a9e8a87a433474e87038ab982cfb8da926630ba4eb501b1ea1d1ca5212316fa66f599cd5cdde14542be5fbb41da59d9f7f5661aef4e847d39e0624fdeca9d","ssdeep":"","tlshash":"66513cac8b24e6adcc9603075558ab19d4d60c4fc296d149d3b2b8093d0ee4b81db253","first_seen":"2026-02-11T06:40:22.662717Z","last_seen":"2026-02-11T09:56:55.113184Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcsale.me/wp-content/uploads/Monero.png","fqdn":"btcsale.me","domain":"btcsale.me","tld":"me"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 15:22:25 GMT","end":"Mon, 06 Apr 2026 16:20:54 GMT"},"fingerprint":{"sha1":"ED:0D:32:E1:71:7A:61:A3:6B:9B:9A:6F:F2:C6:4C:BD:93:48:E7:62","sha256":"8D:6C:D5:5D:60:83:7B:FB:63:45:0C:92:A1:1C:8A:3C:FC:0B:D7:95:FA:38:44:E4:5D:D2:18:81:77:96:E8:12"}}},"request":{"raw":"GET /wp-content/uploads/Monero.png HTTP/1.1\r\nHost: btcsale.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: text/html\r\nlocation: https://1.btcsale.pro/wp-content/uploads/Monero.png\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nage: 457\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VOLSodSzGjkCRWyNqlJ6WN1GNmwGlnPY702XMzPmi4C9WW32j%2Fw6FuRJKkmrP2PfOYu%2Bm9tcW6x7vW%2BXw64NZrDj7qmBUt1PRZE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f2d9d0fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1742,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T13:09:45.117471Z","times_seen":16178700,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/themes/btcsale/adv_images/2.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/themes/btcsale/adv_images/2.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 17579\r\nserver: cloudflare\r\nlast-modified: Thu, 30 Mar 2023 08:22:22 GMT\r\npriority: u=4,i=?0\r\netag: \"642546be-44ab\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o1oYs0iKmERUCdUKt1YyBUABFYjWKa2%2BWAWa0xWKuQ251jC%2B2%2FaZXsr0rc31Bu%2B57MM9xO7E3ocH%2Fbn4iZ9XBP9OVIil8FzCL9Bylq0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f30b85de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17579,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced","md5":"d1b0973eac17853ffe4f136943025add","sha1":"cc9a0b7ea3ad6f1e2928b36df165e9181dfe8c7a","sha256":"56740e41c846743cc27a227c6eb67386304af8da15147dcaa7655ae033414e6f","sha512":"8ddde7d2b92281c741e38332b6d1e4dc6ed8ba8110aeec099e1f8e33a8a082ba487b567f3689c07f945269d197200780aab6d828c60587d187c1c1a8679968ef","ssdeep":"384:RBPkr165QfvtrH0MvR/Sf/Cl6jbTCPVXvWDQ:c16a55JkC6K9/WU","tlshash":"d482d0a998f49a78fa49c47b1433204e323d9a52acda47c48bdd37099305b637bf44e8","first_seen":"2026-02-11T06:40:22.684014Z","last_seen":"2026-02-11T09:56:55.115017Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/uploads/volet.com-black-logo.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/uploads/volet.com-black-logo.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1.btcsale.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 35908\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Jun 2024 13:17:05 GMT\r\npriority: u=4,i=?0\r\netag: \"667971d1-8c44\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SlHb8jnJM79af78bdXwx0Zqf04fKDrEkEgJkQhYibMrp6AKDfZYqlt7lk0nM2EZGAJuZYYhrfngOqnFmnwrYTz2cxYwh7cR5Z0ktRd8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f43efdde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35908,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1894 x 481, 8-bit/color RGBA, non-interlaced","md5":"055301489035204e295d2448fcf72039","sha1":"00fca541ef9cc540a3b9dc8c7ee16db31ea0bf76","sha256":"1e35de36e4a35ec180db1687f04c09673f355130506d83ef36b7f440e4e354f8","sha512":"f673b214b664a4aac67bd0151a32b439117ea0e9437a5b04d0befb3e32d4d1784fd3f85161fd987c009b9cf3cdd378de2e8f420d9ddd42308c11288e8a2b9731","ssdeep":"768:80Txlhv9QFvS4IpoO7N/R0sEbC9zqAoLKLQAgHbtbU2fY5gjk5n9537Q:8Qxeh2HJ/nN9zqAvlitbUNfn92","tlshash":"82f2e02ccb92ad45cb21377b749d2c0c61b2d68c254d332188ba17ddbed3ba5586da21","first_seen":"2026-02-11T06:40:22.679017Z","last_seen":"2026-02-11T09:56:55.117457Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/plugins/premiumbox/premium/js/jquery-ui/script.min.js?ver=1.13.1","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/premium/js/jquery-ui/script.min.js?ver=1.13.1 HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Mar 2023 12:32:00 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"64106940-3e465\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oTgL032RwTJUkOlGkVazCtttLhBqE8pnj%2FqahI%2B%2FZDS9wnrGQl0UnN21%2BNUwT8e%2BBCAIHOepsy51xMw0yldk99mcVaNX%2FdFloy7BMBQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9ef5f9dde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255077,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64399)","md5":"5b155e462c0fedd410831f44f7b1dd3f","sha1":"2dfa64c455185a48ff7c5d63a354674beae9dfeb","sha256":"a30ca67c245a3153239bcc267ce857b03f63d7644368e75ca9791ceb5810de97","sha512":"c8a1f97de315ea0053dea163e598d0151adf00734017a11a8dff53eba09eda1540518c71e03e929d03497e316285dd9d2000053499bdec305ffedc8f60688d94","ssdeep":"3072:lDaXIPaLI9fB8NPJDppujVOUc9b3QRppuzpGBICAvFBFak8J3:+Iyk9WSV3vBiY","tlshash":"e744f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","first_seen":"2023-03-14T08:22:07Z","last_seen":"2026-06-03T16:23:42.293507Z","times_seen":34,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/pn_uploads/captcha/AfREValu.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/pn_uploads/captcha/AfREValu.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1716\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Feb 2026 09:56:25 GMT\r\npriority: u=4,i=?0\r\netag: \"698c5249-6b4\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=unk2TXkH3Wty73QXjBpGyhtFHb6T2xcM8VQuCOo8dGpcIAzlo04Y%2FapsbyxpWGFqmrmnfGuD%2BNoT0BGdk8VQSO9Nvv%2FHO6bgLIOndXY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9ef7818de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1716,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGB, non-interlaced","md5":"5019c1c3e7f0ee51b1899816d6c8c69f","sha1":"3bfdc79d2ef36c702a64d3be6192216ef41bddbf","sha256":"a5f0dea826d04c16a571d5fd1fdca543985b7113e93743081d8486f6baf289f8","sha512":"a6b1546879f24863c16875da13ac9b5fef86a3304eb7a29964b6cd580dfff0507b08394c2b852d45600e88d965932b85a6a9c94c35249c39be086a198db186ae","ssdeep":"","tlshash":"fd31fadab3d607ad8208d5278216052166390a1d7b77f794ddfb042f2c7599048c421d","first_seen":"2026-02-11T09:56:55.12139Z","last_seen":"2026-02-11T09:56:55.12139Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/themes/btcsale/images/ava.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/themes/btcsale/images/ava.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/wp-content/themes/btcsale/style.css?ver=2.5\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 3998\r\nserver: cloudflare\r\nlast-modified: Thu, 30 Mar 2023 08:22:40 GMT\r\npriority: u=4,i=?0\r\netag: \"642546d0-f9e\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FX2lpI1%2FCDB00Zl14ana1EsIvKDkgDlxla6rOm3R3pxd1RSORiMU%2Fq8lZO4VWmKFTGvGbRFJY4Lyi0eYrTQdN3ErzXpn0XtxmK2SbvQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f2fb4dde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3998,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 78 x 78, 8-bit/color RGBA, non-interlaced","md5":"e2661ef2c586f8145f5ae53366096fe7","sha1":"fe633719e1e11b4113880b04b647fad8e1ddad4f","sha256":"57a484a899a1ddcde34b3af3876b9c85d2b3a641f1ae9a07e5ef32fb819d04a4","sha512":"c6d082c47a3ebc19c0a4ba4ecdb9724d2a3b3ed0879992fcb8a56347c781ab8f7e5e9f91bf65e50d9dce154fe819625e83028290ef4bd000bbd4c3b99f7670bd","ssdeep":"","tlshash":"1f815db5e4925549cacad3d37cfd30266da10d94c7a0b6e7eecea00509262a318d85c6","first_seen":"2026-02-11T06:40:22.670618Z","last_seen":"2026-02-11T09:56:55.123422Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/themes/btcsale/adv_images/1.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/themes/btcsale/adv_images/1.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 21503\r\nserver: cloudflare\r\nlast-modified: Thu, 30 Mar 2023 08:22:22 GMT\r\npriority: u=4,i=?0\r\netag: \"642546be-53ff\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zmn2J0WvvzYQxuCwKOqj4ELjahDRv2vg3lbsG5KGwEXZXIx3h1RrXUCXRZUrXIt2XXWWeRsOTMz7VtFk0ufskSp6GvpKj1B5DV%2FiRls%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f30b80de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21503,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced","md5":"1c5be200c21bc84deb81358401f59395","sha1":"833c7fdd375c781734cc0e50f0266b23113950f4","sha256":"3fdb7b5b35ec907cdd00c5ee1dc249114742dd4f43f10fd8986c8464b0a86f5e","sha512":"263f2f4ff76ef2da4ee725de93f15d299c2a44a0141bb55f90a08b18e45bcafdf056f9b8979be7a03e76bdb6b0b6261fa4b1c26f35e2e07c4eb28629df81de71","ssdeep":"384:03lhhMDkoUrY0bUwm2GL8qTWLngtlOc8CKeHiHLviKfn2zYre96UXSyS:0KI9IwEL8qT8gtlOcFiHPfn2zp96z","tlshash":"f1a2d19f3de123fb1509202d7bc43caaec3c3b5c89709b5a497b6ba6a51d0310966373","first_seen":"2026-02-11T06:40:22.68254Z","last_seen":"2026-02-11T09:56:55.12499Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/5f3ca08/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:34.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/5f3ca08/locale-en-US-json.js HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 09:56:34 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3407\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"698b2a9a-d4f\"\r\nlast-modified: Tue, 10 Feb 2026 12:54:50 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-02-10T13:50:35+00:00\r\nx-node: m9p-up-gc7\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10600,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10573), with no line terminators","md5":"fc00deaabfafd48080a08fc0d7f841b5","sha1":"3bf17f3bd75349b1ba1f9b78c6117fadd4620310","sha256":"be8a7243d87cc8bc1c523f0b10a41c149622c9c6af30b6a4e8231b1506cfd542","sha512":"1f3d4801665e172b54578e6d0d71f066c72df7244512cf00026104acbf6f21dab5de812d2679f56b2414ae7f40fd4963f61db75bc7bfc0893c8a3debf65638fc","ssdeep":"192:2P7mk/7Obf14M6bOIpUTPqZ8BijFLeEJK:C7H7ObdFkOIphZ8wjFCmK","tlshash":"af22d71ee7017f360fa613c3744f7b5376a480e592646cb5d89c826943b9bcab217b8c","first_seen":"2026-01-27T14:54:11.499444Z","last_seen":"2026-03-31T09:24:10.733781Z","times_seen":1154,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-11T09:56:25.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; path=/\npremium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; expires=Thu, 11-Feb-2027 12:56:25 GMT; Max-Age=31546800; path=/; secure; HttpOnly\nsite_locale=ru_RU; expires=Thu, 11-Feb-2027 12:56:25 GMT; Max-Age=31546800; path=/; secure; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlink: \u003chttps://1.btcsale.pro/\u003e; rel=shortlink\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tGbE6n%2FTxBfm2nPywwtQALP5e6qroqD77c58XqGHcODFhTdTPi%2FIgcynjIAVztx2Hq9%2BEhAeDr6pQz2J9CYLWWwcKEnHMqqI5jwoyss%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cc2f9ec6eba5cf6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":70141,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9721), with CRLF, LF line terminators","md5":"d0e3f40e1e3b0a4f4619e4107ac97976","sha1":"d1c909e23810e7d85d94e24559ab4352bd11158d","sha256":"9c366db99f0b8a0bda348dc83efac2754c96311c7c5eeb56f97450c2151c45e9","sha512":"97902abffbaa393e32e7ed351941a039da09722f310f0c2ee04ed225d91d4e04d9bb790ad78428476de026736af990cfde6fe0a9cd740232bbbe1a5f688cec35","ssdeep":"768:M1ZdapKEBBswKeG4B/f84HxHBjRbyg5Fvr:SapzBBswKeG4B/f84HRBjR+2Fvr","tlshash":"8c63eb31b19d88b7112396c7a470631e649fcf3ade0386a3f3f62bb956d5c91e427026","first_seen":"2026-02-11T09:56:55.127513Z","last_seen":"2026-02-11T09:56:55.127513Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":69,"dns":39,"connect":8,"send":0,"wait":134,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/plugins/premiumbox/premium/js/jquery-changeinput/script.min.js?ver=0.1","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/premium/js/jquery-changeinput/script.min.js?ver=0.1 HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Mar 2023 12:32:00 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"64106940-301\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B3Ehb5dVNy4BU%2F38E%2FfDZnbCcpd%2FES25xy4Wnk6fVR8o08tShCPkhjWnbL9s7AeJPs2rauKmtJXa4uWs%2FbYuYhg1t9h2JNU%2F1zoi1Ck%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9ef6fbede91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":769,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (769), with no line terminators","md5":"1153f80c5a0ba5ba80921cb2c8ec7d21","sha1":"5d1f58ae4e165bad92fbf61800402dfd6f0fdd11","sha256":"fbd7101494251cc148d058aabe91fa59e51a6a24e5c4958f7c7e504575246001","sha512":"ac0883b7b1a1f060dace5df45cce7f6646a8ef95b44ec65a6de3d66043ab762fb38d5d2caa187b24564c84107501b5bf2c81c08d4fca1f5c8b333f6dbbb02e14","ssdeep":"","tlshash":"c7018588a900690b1aa349b1547f8209622b70e0a5176040e75caaf17f1cc2d2277c3e","first_seen":"2023-03-07T13:09:22Z","last_seen":"2026-06-05T20:39:26.887734Z","times_seen":137,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/themes/btcsale/images/tw-ico.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/themes/btcsale/images/tw-ico.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1239\r\nserver: cloudflare\r\nlast-modified: Thu, 30 Mar 2023 08:22:40 GMT\r\npriority: u=4,i=?0\r\netag: \"642546d0-4d7\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YG9uvyS522Sa9O3%2FQbL7rhQ4qfeWUlRAdM67iQaBm5TeF044%2BLAdeM%2BLYtvOhoE%2F42TDHY4Re90eBA%2BTrzUbFznYDtFpViiwh3YafQs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9ef7816de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 22, 8-bit/color RGBA, non-interlaced","md5":"6f2482b8d064688e28c282528aa4b725","sha1":"61bde0dfa1ed8a1f2d9476e03c82e3f07c1b3584","sha256":"adc4fd6347cb7c9d02579fc8bbc62f3bd90b0aa757262fb6a64b92430d09bb46","sha512":"6fb8fec9f8026558233a62b7afd17822527f913550d0aee505a22108ba1c533c5954cace87377098b0db8c5bcae04b8fbd557b83b0811822ced673092a1d792e","ssdeep":"","tlshash":"ba21748edea07482995da4c125d6502bce6646808ef0e231bbcec45a0df43fb4468adb","first_seen":"2026-02-11T06:40:22.649586Z","last_seen":"2026-02-11T09:56:55.129534Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/pn_uploads/captcha/CPFCF72X.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/pn_uploads/captcha/CPFCF72X.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1743\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Feb 2026 09:56:25 GMT\r\npriority: u=4,i=?0\r\netag: \"698c5249-6cf\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nxLjUN9a7U1%2BaJCxxVOv5NuWBD2gdc1uAn2QS%2BiLREpHLneeu4tM3AgMGMrrbnafCcVcKeJXQNJlo5ffXtz%2Fs2j2sN%2BwrSuY4oKjvbw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9ef781bde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1743,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGB, non-interlaced","md5":"55efc2f719071740bbaeff4464a6bc81","sha1":"9eb92484b08110c66dd9501e24b65deee10d8978","sha256":"54db38a48bb767556e7b7577e2b724f68cc1c2568473582fa1a5e75ed31c4613","sha512":"0054d476e79e2e79e3a459e07e5b6293bcc65c38551a4525ef883468a6071d70c20e400aeb00ad3a6561247c9cd3415a47d6e440d01af095774315c59115d556","ssdeep":"","tlshash":"fd3128eb088af3fae096a080d24d72b00c3348b4daa615cfd41bb8c218c8e9605759f5","first_seen":"2026-02-11T09:56:55.130541Z","last_seen":"2026-02-11T09:56:55.130541Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcsale.me/wp-content/uploads/Litecoin.png","fqdn":"btcsale.me","domain":"btcsale.me","tld":"me"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 15:22:25 GMT","end":"Mon, 06 Apr 2026 16:20:54 GMT"},"fingerprint":{"sha1":"ED:0D:32:E1:71:7A:61:A3:6B:9B:9A:6F:F2:C6:4C:BD:93:48:E7:62","sha256":"8D:6C:D5:5D:60:83:7B:FB:63:45:0C:92:A1:1C:8A:3C:FC:0B:D7:95:FA:38:44:E4:5D:D2:18:81:77:96:E8:12"}}},"request":{"raw":"GET /wp-content/uploads/Litecoin.png HTTP/1.1\r\nHost: btcsale.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: text/html\r\nlocation: https://1.btcsale.pro/wp-content/uploads/Litecoin.png\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nage: 457\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z4wcNRjtuEa56DwlyV1QkhyNO0orvk314ZoHmu%2B0%2FbQ8gEk%2FJqU1KlGyLfj09JIWQBreDEiBf1lSOYNXV3gZ%2FDaq3ubffiodAuY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f2d9c5fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1409,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T13:09:45.117471Z","times_seen":16178700,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcsale.me/wp-content/uploads/68-BinanceCoin.png","fqdn":"btcsale.me","domain":"btcsale.me","tld":"me"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 15:22:25 GMT","end":"Mon, 06 Apr 2026 16:20:54 GMT"},"fingerprint":{"sha1":"ED:0D:32:E1:71:7A:61:A3:6B:9B:9A:6F:F2:C6:4C:BD:93:48:E7:62","sha256":"8D:6C:D5:5D:60:83:7B:FB:63:45:0C:92:A1:1C:8A:3C:FC:0B:D7:95:FA:38:44:E4:5D:D2:18:81:77:96:E8:12"}}},"request":{"raw":"GET /wp-content/uploads/68-BinanceCoin.png HTTP/1.1\r\nHost: btcsale.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: text/html\r\nlocation: https://1.btcsale.pro/wp-content/uploads/68-BinanceCoin.png\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nage: 457\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VskC1AsC089b4fjilWmo%2B%2FqvnsbEpgfSSODe0lFsTT9hhuVi8tf6g1e%2BOJp2EalbNJFh%2BVoqXvPhN8C1uPJ240Da0pVYaJmvA6c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f2e9e2fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5472,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T13:09:45.117471Z","times_seen":16178700,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/themes/btcsale/adv_images/3.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/themes/btcsale/adv_images/3.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 17708\r\nserver: cloudflare\r\nlast-modified: Thu, 30 Mar 2023 08:22:22 GMT\r\npriority: u=4,i=?0\r\netag: \"642546be-452c\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UzpbBWzNqsgcYi3xf9C%2B7GIoFhvtz8LS1tiuX1ZT9DQUWwipAbqgaGTkdlfcDpVwwlaNz48xQ%2FXy0QSHAeVRBXazPumH9svhiUEZ%2Fq8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f30b8dde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17708,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced","md5":"1e841c6a23db34946cc1110f71418aec","sha1":"2bc97ae2056470ab33d8cf40f9c84e0ce32808f1","sha256":"d7056ca7295202a2f67995f5d423560dbb835205475d6e115c0e5774862d6f1d","sha512":"fa83862c762439f2f22430aa3b7de56f4240fbf10c502ebf47ab3e5002bb919c3621b90c610769bda2d0762948b786f3724344b80d414e6a8e56afca003b8875","ssdeep":"384:uGCusnEu0M3wnvn7AXAcpFX2PC7crZEeCq:uGCusnWMAEAqFX0ActEFq","tlshash":"ac828eb0ccd78a5d90b10b0149f62bae123f2afab4f4924541c30fd66eb5816772f785","first_seen":"2026-02-11T06:40:22.677396Z","last_seen":"2026-02-11T09:56:55.131673Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/uploads/Litecoin.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/uploads/Litecoin.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1.btcsale.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1409\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Jul 2022 20:32:52 GMT\r\npriority: u=4,i=?0\r\netag: \"62d714f4-581\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UZGjmZT4ue5%2F8fiJjpkEo8YzKwyaLAs%2F0vr65RPHBXzCfHL9r0WPHHfdfgIyC3TWKkRHvkrNEdSAscc28VtlM1r7eagW6Xlgv1FWrx4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f41eaede91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1409,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 4-bit colormap, non-interlaced","md5":"0fc84fdbbf57ba2b420e505c05c51690","sha1":"3efa9a275fe3c89bd153f0885af312773af47341","sha256":"4e2a623d834fb731ee69ba74fa79a80183a91f1dfe99c9072fc80d66c9e4de31","sha512":"7a0c17eb214d3b9670eba910e0e8ca259112f30e2b6ac413305b923d1d258041f3c5b5fff464200b56abf996bd9c802c04eb3fb2721a5a9e310a7e628e9cc21b","ssdeep":"","tlshash":"7e2119fa5f00a158e9ffe8bad775cc25f6540dbd6200a827443b61a9362e462ccb6841","first_seen":"2023-05-07T19:46:49Z","last_seen":"2026-06-05T20:39:26.974192Z","times_seen":46,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/themes/btcsale/images/l_arr.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/themes/btcsale/images/l_arr.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/wp-content/themes/btcsale/style.css?ver=2.5\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1020\r\nserver: cloudflare\r\nlast-modified: Thu, 30 Mar 2023 08:22:40 GMT\r\npriority: u=4,i=?0\r\netag: \"642546d0-3fc\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FTq009Fru6fTFAvQD%2FqfQ6K2q4Ki0oY9rhVokZu%2BMLvFX%2FvvsGzvq5hRgR3Xyr5VSiVcR8W6p%2B2f5K5KYgcB8EeJWt5fgGclryJuwOE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f2ba4ede91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1020,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 10 x 6, 8-bit/color RGBA, non-interlaced","md5":"b15f859ff48e75521bd2df7cf21d35c3","sha1":"190fa83e3d5ab840ee90e960457bd259c4dad88f","sha256":"b2887f5bd87f119387b599120fb173591fb5d11e37b06dca227290647a760dd9","sha512":"9c785f76dcff65e38fc6db08a028fbee83677547b88f54dd9eb0bcd804a274b4171424a700b6af1c92470026a006f241988042bc2f87100b490fd1d1ca6d7d95","ssdeep":"","tlshash":"76113289f6502c42da5dd6c130f68022d5a34840e6d0f07af79fdd4f4c782ba04454cf","first_seen":"2026-02-11T06:40:22.627691Z","last_seen":"2026-02-11T09:56:55.133082Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/plugins/premiumbox/premium/js/jquery-select/script.min.js?ver=0.7","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/premium/js/jquery-select/script.min.js?ver=0.7 HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Mar 2023 12:32:00 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"64106940-c45\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oESCCR0AwWnH2DQw2tm%2BkFxynCctrL245H8XJ246wB3A%2BhJgz2%2BdnZwVIBAEjpU%2BCKxUrhD8GTaO64iiOdpUrHSSWUnh1UEIVD7z4P0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9ef6fc5de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3141,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3141), with no line terminators","md5":"7149857b0902065441343b1eabc916c6","sha1":"25201485d18e8e8a5ad50ee3da086305915aded6","sha256":"1f6882c6adebf60b39fdb469342ecf11c4168260c5988afbfa2b3c4b46dcaa02","sha512":"4ff9552c83c023f632d0ad13ecdecd30b3826abedbec6b8427bdc2e43725b8a0044fb72141f8ae9e31d562bc643aba07abb8a8a82d0046aae601626105511332","ssdeep":"","tlshash":"1a51cb1861d0a1b6537f19e31dfa7a0f3196992f8826c940e0ba49f11ebccc59273ca7","first_seen":"2023-03-07T13:09:22Z","last_seen":"2026-06-01T12:33:00.333517Z","times_seen":31,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/themes/btcsale/images/logo.svg","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/themes/btcsale/images/logo.svg HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 30 Mar 2023 08:22:34 GMT\r\npriority: u=4,i=?0\r\netag: \"642546ca-e57\"\r\ncontent-encoding: gzip\r\nage: 4801\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jE5qYNY%2BhKkP2YJui2HnbRlXpbczAMFmTm4ExpeL%2BeP0n6SEIGtYeKZHwlWCdAdGzbqCmq3V0%2BX5SOYAKwxTRdbJb7Y1DBC0%2Bwrc%2FTs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9ef7ffcde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3671,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"40d47ae2b895ca8944c9812fbf3730f0","sha1":"61c116c409a5e37f00b43b76ae698e27d7f40d8a","sha256":"d53050feaad11e873aa3a6d168ece8260839e194ff2eea6a492e859b2bb27108","sha512":"ce19c0574906f9f7e5a740f2c9abbacac16af0b3c706a53ce5ca20a6787fc63406665a2456bbc742f32e351cb6a6457c1050e8684d75997a1e2788525d371a33","ssdeep":"","tlshash":"7271bd03c290a7baad41426943b57cd575e5ac9bf431f1ac69ff2097e10ccc095a87fa","first_seen":"2026-02-11T06:40:22.618745Z","last_seen":"2026-02-11T09:56:55.135653Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcsale.me/wp-content/uploads/E6X8NVktZGZRR.png","fqdn":"btcsale.me","domain":"btcsale.me","tld":"me"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 15:22:25 GMT","end":"Mon, 06 Apr 2026 16:20:54 GMT"},"fingerprint":{"sha1":"ED:0D:32:E1:71:7A:61:A3:6B:9B:9A:6F:F2:C6:4C:BD:93:48:E7:62","sha256":"8D:6C:D5:5D:60:83:7B:FB:63:45:0C:92:A1:1C:8A:3C:FC:0B:D7:95:FA:38:44:E4:5D:D2:18:81:77:96:E8:12"}}},"request":{"raw":"GET /wp-content/uploads/E6X8NVktZGZRR.png HTTP/1.1\r\nHost: btcsale.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: text/html\r\nlocation: https://1.btcsale.pro/wp-content/uploads/E6X8NVktZGZRR.png\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 457\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=otm3HJZvaOqrEgf3G5rUIpI6WBeJYEOm2CfvGslNgkVp3B6OaNNkexH42gpShwv7l6LJvd6ukRq6Su27ovEfLVnXmAU6%2F6bvvos%3D\"}]}\r\ncf-ray: 9cc2f9f02dbcea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2657,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T13:09:45.117471Z","times_seen":16178700,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":49,"dns":64,"connect":8,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/themes/btcsale/images/email.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/themes/btcsale/images/email.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/wp-content/themes/btcsale/style.css?ver=2.5\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1150\r\nserver: cloudflare\r\nlast-modified: Thu, 30 Mar 2023 08:22:28 GMT\r\npriority: u=4,i=?0\r\netag: \"642546c4-47e\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ovFjf1%2BGLYCTRoj3SX08HyN93IwKRn6SEWV3B30Lk7NahVFKuKvkc5DY7HXIb%2BHyUmGXpJwCXmftxxjcPW9Zd0F3BNtPGgvbfshlhrE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9f42ed1de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 15 x 11, 8-bit/color RGBA, non-interlaced","md5":"43aac23305ab30d9542597849b05ea60","sha1":"ad7f4cdf39429a5ec11ad9cc6f29946d5880082b","sha256":"3513122a87b951eeccba6e0cb7e21ce6f4b0f902194025ccd83244fcf94b1a69","sha512":"0a8a452ca06f159743b7caa995a13be6c55e13bbd83e7bdf715775bc878ae0a9d7cd01e338479afe959cecdff150d08a93701d8163f3bc4490bc159159a27032","ssdeep":"","tlshash":"2b21604afd80e802e21ca58068e308279a678440f9d0e56833cacc4a6d351fa44880cf","first_seen":"2026-02-11T06:40:22.597081Z","last_seen":"2026-02-11T09:56:55.138854Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btcsale.co/","fqdn":"btcsale.co","domain":"btcsale.co","tld":"co"},"ip":{"addr":"172.67.176.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-11T09:56:25.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 14:49:31 GMT","end":"Thu, 07 May 2026 15:48:17 GMT"},"fingerprint":{"sha1":"AB:BB:52:2A:5A:F8:E4:CB:A1:FB:57:2A:97:77:C0:95:42:37:AB:20","sha256":"55:64:71:9C:56:42:B9:26:A2:45:80:06:DA:BC:9D:B7:8D:A0:6B:CE:14:93:9F:37:55:A9:02:A8:30:4D:6F:FB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: btcsale.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 11 Feb 2026 09:56:25 GMT\r\ncontent-type: text/html\r\nlocation: https://1.btcsale.pro/\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BLdp0yGIMn8mbrVYmmcLZQqZc%2F8UhP3zO7eBjYddQZkrbI4ymbzxZIvoOhdCIx3CcxmKO7eMb%2FNBGWepl5cbAxbuedBhFwsxssY%3D\"}]}\r\ncf-ray: 9cc2f9ebaf45aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70141,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T13:09:45.117471Z","times_seen":16178700,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":83,"dns":50,"connect":8,"send":0,"wait":43,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/plugins/premiumbox/premium/js/jquery-table/script.min.js?ver=0.4","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/premium/js/jquery-table/script.min.js?ver=0.4 HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Mar 2023 12:32:00 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"64106940-614\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FTS1%2BWi6gC8YO2sHxyktQIw%2Foz%2FSK6dfyGspRBk%2BUjaSeqcaoRo8tDjLRoNvcoXbAwzmtM1f4UTW1r8IysYXzZBK4TLDa1Wo%2FrNhetw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9ef6fc6de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1556,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1556), with no line terminators","md5":"36e709d5d389e3003a8763f7ea5edd24","sha1":"0738b4c12f822fd25f8fa7064e7f93fa3b0159c2","sha256":"0453a58e5eebd61b5604c73b02be34aa556911e825f44829cce98c8fc673ef3b","sha512":"662d1045e230bd1f69cedec9a2f4026aec9a1c6e320149408f4e0771ae77e4a94ab1348e4129274202225d50a97bbc910c6db2b34009b089381e34f66c8ebdba","ssdeep":"","tlshash":"f231ccc063a064ab85b773e1221be1153210deb1ba8e006ee43ec13e1df7d01763ae97","first_seen":"2023-03-29T23:53:25Z","last_seen":"2026-06-05T20:39:26.889397Z","times_seen":121,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.btcsale.pro/wp-content/plugins/premiumbox/flags/en_US.png","fqdn":"1.btcsale.pro","domain":"btcsale.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1.btcsale.pro/","date":"2026-02-11T09:56:26.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcsale.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 13:45:46 GMT","end":"Sat, 25 Apr 2026 14:44:08 GMT"},"fingerprint":{"sha1":"06:25:3C:24:37:CD:04:31:1E:59:D4:80:F7:5C:69:8C:07:FF:08:D4","sha256":"07:D3:FA:55:89:0A:99:D8:8E:E9:72:82:0E:F8:EA:43:C1:27:9B:2F:14:B9:A8:98:A2:C9:0A:1E:16:AA:52:FA"}}},"request":{"raw":"GET /wp-content/plugins/premiumbox/flags/en_US.png HTTP/1.1\r\nHost: 1.btcsale.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1.btcsale.pro/\r\nCookie: PHPSESSID=art0drdgs0l8do6t9n2b2mhdsp; premium_session_id=iLFKXdWFX3Yg33muNrYaISPvO1QdARocVF5IFmwI89PaYKR8QwHryf3mOpiijZNj; site_locale=ru_RU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 09:56:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 377\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Mar 2023 12:32:00 GMT\r\npriority: u=4,i=?0\r\netag: \"64106940-179\"\r\nexpires: Wed, 11 Feb 2026 10:26:26 GMT\r\ncache-control: max-age=1800\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2NHzPdrMXqxOE6ftYN3Iczi6aWlExc6T46eVARg0MKksUbw4CkCYVftPLnBbFMPS%2FyIRtQ5ptkHhqRmlSwHquqoazYjUB3arxoz12UM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2f9ef7ff2de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":377,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 18 x 12, 8-bit colormap, non-interlaced","md5":"01367587c92ac7e722da3048abd7cecd","sha1":"0b1cd55f2c2ba1cc8f8bc7425a953645556f79af","sha256":"f7af4db553d7bd32059bc4ab3c01655690c20312d6131dc7ebdaa527b4852fdf","sha512":"8b0908a51849450f8ea77fe8b533a2f9791f8bf5cfc3a034b371b90e817feb6e2ae6e9d01a6196654a640fb75e35eb2fbb8120602d8f41202116496e507b9d89","ssdeep":"","tlshash":"c7e0c0d2c7334c6fdee0b47aa9946208fb445476912337cb991c77365262203c5c6a61","first_seen":"2023-05-02T14:04:01Z","last_seen":"2026-06-05T20:39:27.015583Z","times_seen":53,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}