{"report_id":"f455573a-1cf5-42a5-8b61-126da5bff50c","version":6,"status":"done","tags":[],"date":"2026-02-08T22:03:20Z","url":{"schema":"http","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"title":"BTC365 Arnyvo — Premier site for professional market monitoring","dom":{"size":211784,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51941)","md5":"ab30293addee2fb3e8a696b405c92f2e","sha1":"5fd16f8a50f8926575cea07df1c0c2d38b0f4a76","sha256":"3bda63a430252f340569c8f08c2dda0644aa6983e0ee7b08011cf18b31607c0a","sha512":"718d3cf0983f3b9486b69b50de54b464b9a9e06639ae9281b63bf89836fd552c579c9ec62c2bfbf0ade94a4b428b09e3668a6812a11723365c6b5b962edda1f9","ssdeep":"1536:PdZpR4nXBKpSpFl26vwvb9t0RBcVXEAzXX8FAgs+aFy6DB:PZUMdJt0RBaxYYDB","tlshash":"67247923426925264437c2d134aa5b3bd5a6dd9bfae709403eeccbf62bf9c90701b11d","dom_hash":"domhashf150a109d21accfa9ac21062b1cf43db","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-15T22:03:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","ip":{"addr":"104.21.22.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-07","domain_rank":0,"first_seen":"2026-02-08T17:33:23.635773Z","last_seen":"2026-02-08T17:33:23.635773Z","alert_count":0,"request_count":21,"received_data":1932486,"sent_data":21890,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"GenerateBlocks","description":"GenerateBlocks is a small collection of lightweight WordPress blocks for the WordPress Block Editor.","website":"https://generateblocks.com","common_platform_enumeration":"","icon":"GenerateBlocks.svg","categories":["WordPress plugins"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.bti.live","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-04-12","domain_rank":0,"first_seen":"2019-04-10T10:12:44Z","last_seen":"2026-02-02T23:33:22.476513Z","alert_count":0,"request_count":4,"received_data":478247,"sent_data":2118,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/files/main.js","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1dd39e6d9f32a8032b197f108acc300c","sha1":"51c3c431df923da644adad5fdc74b3655272579e","sha256":"f66818b333bb5493d57e7cc073a223fab3c09d1c37f26c3ba6fc346963d93443","sha512":"85509237908fd90c7e0490a04a9353936b5afaf6fe4697815f58705aa2c29cbf644c54fe59c4c3ae92249072ef31b768dab3e97eb23a6721ed6cc4efbf5d0b27","ssdeep":"96:7dg+UjKtmwwNFnkTF9V6vlWBBeFgWJBbpFg+WQB1YHBxMFBzs72smbDD:7dg+Uj3N2TnaiP2sW","tlshash":"5fc14124251a016a8a7277bb6f831559f7a5617fac82c3963e2d03452ff185483f0fbd","size":5742,"data":"","first_seen":"2026-01-07T16:08:23.979696Z","last_seen":"2026-02-11T09:36:19.639458Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/files/intlTelInput/intlTelInput.min.js","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf4b3a1c24ece82c400022387d34e13d","sha1":"e22fbe21329db01967d139fd157a75736a2a4913","sha256":"f0c96e6848522adeaa6f202c2f115684216b36dcbdf4a5b03d4a904817d9548d","sha512":"4a5b14eb929d2de8f6b24436e2323e3ce2f8d0a09e27b691f5dcba9614fa6548202907a8aaae8b8feee7ea2f33a8eda071e9584013e039daed2300d717a70b23","ssdeep":"768:Oq03XVqC/iPIVXpwJx/cndN9esRjJK7dg24txpIO:OyPIgcno4JwdcR","tlshash":"09e2e6aeb3656b37abfd82a270b44503af7f79444604046d78ac8ede1188ed171f5b38","size":32378,"data":"","first_seen":"2025-05-18T09:30:05.434446Z","last_seen":"2026-06-06T08:37:20.814803Z","times_seen":441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/files/jquery-3.7.1.min.js","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-06-08T22:12:23.652195Z","times_seen":166627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/files/intlTelInput/intlTelInput.css","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","date":"2026-02-08T22:03:00.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcxorvel92.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 10:59:39 GMT","end":"Wed, 08 Apr 2026 11:57:03 GMT"},"fingerprint":{"sha1":"45:3D:40:CA:7C:F5:78:DA:E9:1E:AE:04:CE:4D:2E:77:5B:80:27:A7","sha256":"BC:C2:A5:EA:EB:6F:B5:67:93:75:A8:D8:ED:8E:E4:74:E8:34:9E:1F:85:B3:AD:12:4C:2C:E0:8D:1E:26:99:2B"}}},"request":{"raw":"GET /files/intlTelInput/intlTelInput.css HTTP/1.1\r\nHost: kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/\r\nCookie: PHPSESSID=0dcjok7moddbaing3vsrp1k8ft; _subid=1sjos4f8jj11; cef0b=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzMDVcIjoxNzcwNTg4MTc4fSxcImNhbXBhaWduc1wiOntcIjkyMFwiOjE3NzA1ODgxNzh9LFwidGltZVwiOjE3NzA1ODgxNzh9In0.XXA9KLW6lks4tI7ePB9zI3nPah04GYxJiUOJWSnwn4Q; 0bd260b6s920=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiMjMwNSJ9.JkAeFB0F4qnO6hsJdAHLDOHd_DV3hyLeysqcc99Ymbo; 0bd260b6s920ip=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiXCI5MS45MC40Mi4xNTRcIiJ9.-p8Lz-MZZz09KPlV-96BDKWPKa3aWDtVgYO0mnPWn4k\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 22:03:03 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 28 Nov 2025 09:55:42 GMT\r\netag: \"4080-644a4a1e92380-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 2962\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uUgx5z4IQ3QYXlWhqnPChlxbg%2FG6ioByXLmUZfzkJc1xaP8TA0TNARGX9wmX1TG%2BCYBQZW8XM9OKl9Ud9IcX5ARHUzdQz%2BaYNovQzQ%2FXWvmkR3lJyeLvWe%2BMA5yI1D5P0vLeSi%2FH%2FkkNd5by0V3nvGCmynsrDK0%3D\"}]}\r\ncf-ray: 9cae6a1e0dac568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16512,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c0f3965c0b3cd022504604d9bc324dd8","sha1":"397ca478670ca0d8110b4a9d9291480d3a16754f","sha256":"9c8d6b2364efcee7f281de2da1f2c0be6e20b19d7e43d159b89b37184301001b","sha512":"483131914e3b7b3870a8190fb18d7ada518caf4cce24d0ed1e22a2a4f5e23e7542554af04bb15c8e05d845507a61da97fc5d4c3921b544d252ccfbe71311f8c4","ssdeep":"192:WzvjbT2sd5uVsAPRY6e5yE9y3tzEUbyhG/JYyiKdjr+/TEHRik1B3EBu:4T2sdk1RdE9y3C+Rd3+/TyH","tlshash":"86728b2742b41d3ea31dd1ba38a2c0f5733f588a70aecd96eec8500e5c87791a1ebc50","first_seen":"2026-01-07T16:08:23.978428Z","last_seen":"2026-05-07T16:25:36.031625Z","times_seen":77,"resource_available":false,"data":null}},"time_used":3009,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3009,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/favicon.ico","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","date":"2026-02-08T22:03:03.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcxorvel92.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 10:59:39 GMT","end":"Wed, 08 Apr 2026 11:57:03 GMT"},"fingerprint":{"sha1":"45:3D:40:CA:7C:F5:78:DA:E9:1E:AE:04:CE:4D:2E:77:5B:80:27:A7","sha256":"BC:C2:A5:EA:EB:6F:B5:67:93:75:A8:D8:ED:8E:E4:74:E8:34:9E:1F:85:B3:AD:12:4C:2C:E0:8D:1E:26:99:2B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/\r\nCookie: PHPSESSID=0dcjok7moddbaing3vsrp1k8ft; _subid=1sjos4f8jj11; cef0b=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzMDVcIjoxNzcwNTg4MTc4fSxcImNhbXBhaWduc1wiOntcIjkyMFwiOjE3NzA1ODgxNzh9LFwidGltZVwiOjE3NzA1ODgxNzh9In0.XXA9KLW6lks4tI7ePB9zI3nPah04GYxJiUOJWSnwn4Q; 0bd260b6s920=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiMjMwNSJ9.JkAeFB0F4qnO6hsJdAHLDOHd_DV3hyLeysqcc99Ymbo; 0bd260b6s920ip=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiXCI5MS45MC40Mi4xNTRcIiJ9.-p8Lz-MZZz09KPlV-96BDKWPKa3aWDtVgYO0mnPWn4k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 22:03:03 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Sep 2025 19:57:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZR8pacm3gpuqRACf0yZqkuCu7jQmh%2BJUHx55A2EM46F0lp9apFPt2wNmG6xkv83CohixqmkV6A4AHtkZL715GQkBMfHj1ZQY3ItdLzJ04yYKH%2F%2BIHHH31MAOXhWa6squx5SOGDhJTMbhGQvPuYpWq8kjzEO00YM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\netag: W/\"34f5-63ff60b7537c0\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9cae6a327ea7568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13557,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 498 x 499, 8-bit/color RGBA, non-interlaced","md5":"46a5ddddbc7e56b4f302d364ef07843a","sha1":"0f06fe45efa8e96017d969f65a2fcc21de4a4be4","sha256":"97dc45c2992b3b4bde02f76af77ff5c2c8ef31bbc9f44a9d1a957353899f6a06","sha512":"3d4a79c85a1340c28e300a1a99fa73a278a2f2e30ec0c76cd4593b3145917ad25afc74f8eff8bc5401c0267bf4a05ecdaceed2b29400f9ace8677e7153d5fb52","ssdeep":"384:GhZY425loqXYPauwQzGM7WooPGOnffpMzXDhk97IethwL9L:E6PowAC/J4esxL","tlshash":"4c52ae21f2ad1a63f70a47258807541466c27eb02619480a84c7944f3ea3f18acf8ea2","first_seen":"2026-02-08T17:33:27.949911Z","last_seen":"2026-02-08T22:03:22.932415Z","times_seen":2,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/files/style(3).min.css","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","date":"2026-02-08T22:03:00.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcxorvel92.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 10:59:39 GMT","end":"Wed, 08 Apr 2026 11:57:03 GMT"},"fingerprint":{"sha1":"45:3D:40:CA:7C:F5:78:DA:E9:1E:AE:04:CE:4D:2E:77:5B:80:27:A7","sha256":"BC:C2:A5:EA:EB:6F:B5:67:93:75:A8:D8:ED:8E:E4:74:E8:34:9E:1F:85:B3:AD:12:4C:2C:E0:8D:1E:26:99:2B"}}},"request":{"raw":"GET /files/style(3).min.css HTTP/1.1\r\nHost: kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/\r\nCookie: PHPSESSID=0dcjok7moddbaing3vsrp1k8ft; _subid=1sjos4f8jj11; cef0b=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzMDVcIjoxNzcwNTg4MTc4fSxcImNhbXBhaWduc1wiOntcIjkyMFwiOjE3NzA1ODgxNzh9LFwidGltZVwiOjE3NzA1ODgxNzh9In0.XXA9KLW6lks4tI7ePB9zI3nPah04GYxJiUOJWSnwn4Q; 0bd260b6s920=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiMjMwNSJ9.JkAeFB0F4qnO6hsJdAHLDOHd_DV3hyLeysqcc99Ymbo; 0bd260b6s920ip=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiXCI5MS45MC40Mi4xNTRcIiJ9.-p8Lz-MZZz09KPlV-96BDKWPKa3aWDtVgYO0mnPWn4k\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 22:03:00 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 28 Nov 2025 09:22:22 GMT\r\netag: \"2f61-644a42ab38f80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 2087\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3I%2Bf01CKQe01RSgBT76xgDi5%2Fs5RsB8cMyiIio8HnYqmGm363nhDjzvZObURRzqnPMz%2FhoSctd3JXDBYa1um1dh8bsdiyGQxLw5Zy3zuXcp9b1JnrsUxhkDXrkIUFME506ppGZEPAQa7pi%2FqWShI4sDb8Lkbjq4%3D\"}]}\r\ncf-ray: 9cae6a1d8da1568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12129,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (393), with CRLF line terminators","md5":"b3d8b819ec25e48ae8d27242b6a58e72","sha1":"ab852037106027a558a8e368817e7dc298cc2d38","sha256":"226600812628e193677ea29c978dbf722fa964b3ac0edff7c5e6a1e73ae75b81","sha512":"c1b5fcc7107ad8721589a5be7bf2e96aa9d5f79935b9f96ad6ed3e73932407c454e4098bc2226ab7095c49c15c175d257639a43750157171e056044431eb13fa","ssdeep":"192:3GYxQbr1Vz1+dQdykYvv8s/ZBWQWyLFVxwR0uEc3uvIn+wR0VzUXl14ywR0VZW:+1Vz1+CI7vvt/ZBRjJBjvIn7Xl6GW","tlshash":"2542cc84c2a332b227b7173d6b95d204fbd5b0a3dd0513cc3adda1615fe06b96952e8c","first_seen":"2026-01-07T16:08:23.967884Z","last_seen":"2026-02-11T09:36:19.632586Z","times_seen":17,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":587,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/files/style-1521.css","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","date":"2026-02-08T22:03:00.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcxorvel92.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 10:59:39 GMT","end":"Wed, 08 Apr 2026 11:57:03 GMT"},"fingerprint":{"sha1":"45:3D:40:CA:7C:F5:78:DA:E9:1E:AE:04:CE:4D:2E:77:5B:80:27:A7","sha256":"BC:C2:A5:EA:EB:6F:B5:67:93:75:A8:D8:ED:8E:E4:74:E8:34:9E:1F:85:B3:AD:12:4C:2C:E0:8D:1E:26:99:2B"}}},"request":{"raw":"GET /files/style-1521.css HTTP/1.1\r\nHost: kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/\r\nCookie: PHPSESSID=0dcjok7moddbaing3vsrp1k8ft; _subid=1sjos4f8jj11; cef0b=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzMDVcIjoxNzcwNTg4MTc4fSxcImNhbXBhaWduc1wiOntcIjkyMFwiOjE3NzA1ODgxNzh9LFwidGltZVwiOjE3NzA1ODgxNzh9In0.XXA9KLW6lks4tI7ePB9zI3nPah04GYxJiUOJWSnwn4Q; 0bd260b6s920=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiMjMwNSJ9.JkAeFB0F4qnO6hsJdAHLDOHd_DV3hyLeysqcc99Ymbo; 0bd260b6s920ip=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiXCI5MS45MC40Mi4xNTRcIiJ9.-p8Lz-MZZz09KPlV-96BDKWPKa3aWDtVgYO0mnPWn4k\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 22:03:00 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 28 Nov 2025 08:26:47 GMT\r\netag: \"b1f6-644a363eb7fc0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 4647\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2PgFB3muqnOVP78%2BzI%2BZrD1BEIKYn9j62i1sw5Bj3zqez8l66ly6vy08zwlhYKLL4duwtioycx3bH4sHu4QMlAXXN7o%2FNsEbY15HpOt%2Bb1VrdUXcTq87HtkuUVmK3%2F8hn%2BuPToe330rvFV7Rqu0aqtAHRFMU%2Fsk%3D\"}]}\r\ncf-ray: 9cae6a1d8da2568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45558,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1f880dd295434d6c63f1be05572d6834","sha1":"5a0b3106ab8c56db8c3243fad9b54958f84dffcf","sha256":"89a0ead85c62f2c4e411adb42e8223b7772e947ab031f1e7b8e900e3e1251cdc","sha512":"07e6bd3be64edc238a0a5d20c0d61b01955788b37437f1063be021c3867a69f9ead137b1229a1f30d6d3d91d11615806f13351391eb448b01f41c3f082522702","ssdeep":"768:RRAWaclvnxxVD3bbwqoA6JJwvnPt1Drpwr:LAWjnxxVD3f+","tlshash":"fd13ef914f227115b3b3963c8ba95918fb904173ca0e58de3ed4a094cffa1a16872ddf","first_seen":"2026-01-07T16:08:23.971308Z","last_seen":"2026-02-11T09:36:19.637127Z","times_seen":17,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/files/img/screens-2-1024x462.png","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","date":"2026-02-08T22:03:00.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcxorvel92.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 10:59:39 GMT","end":"Wed, 08 Apr 2026 11:57:03 GMT"},"fingerprint":{"sha1":"45:3D:40:CA:7C:F5:78:DA:E9:1E:AE:04:CE:4D:2E:77:5B:80:27:A7","sha256":"BC:C2:A5:EA:EB:6F:B5:67:93:75:A8:D8:ED:8E:E4:74:E8:34:9E:1F:85:B3:AD:12:4C:2C:E0:8D:1E:26:99:2B"}}},"request":{"raw":"GET /files/img/screens-2-1024x462.png HTTP/1.1\r\nHost: kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/\r\nCookie: PHPSESSID=0dcjok7moddbaing3vsrp1k8ft; _subid=1sjos4f8jj11; cef0b=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzMDVcIjoxNzcwNTg4MTc4fSxcImNhbXBhaWduc1wiOntcIjkyMFwiOjE3NzA1ODgxNzh9LFwidGltZVwiOjE3NzA1ODgxNzh9In0.XXA9KLW6lks4tI7ePB9zI3nPah04GYxJiUOJWSnwn4Q; 0bd260b6s920=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiMjMwNSJ9.JkAeFB0F4qnO6hsJdAHLDOHd_DV3hyLeysqcc99Ymbo; 0bd260b6s920ip=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiXCI5MS45MC40Mi4xNTRcIiJ9.-p8Lz-MZZz09KPlV-96BDKWPKa3aWDtVgYO0mnPWn4k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 22:03:00 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 28 Nov 2025 09:09:05 GMT\r\netag: \"3ca8f-644a3fb324e40\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 248463\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GMUqyhurUkIYQbed7Aw5FyBm3b5dReQbimzdAe9CRvg73EwyTpnB%2BkFx7KHbeYHOXHc%2BNFtdJzZWOSSd36MLniJ6T0Tt%2FiUj2TUc6kzyKmfQIo8TKAGKtp%2BWPJh6uqZrPPGnCH7DeHZUhYrDAwJA7sQmJ8xAki8%3D\"}]}\r\ncf-ray: 9cae6a1d8da6568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":248463,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 462, 8-bit/color RGBA, non-interlaced","md5":"231544ff432ded9abae5afe7b585dea7","sha1":"3d20b6c6da3ede1056a05acadf0d39c527ebf822","sha256":"6cbc8277e4ecb28efe386e291bd36761c52a7a2df864d6fe3c5d714e78b336e1","sha512":"5e7069a879f4ddd55f1eaada23caf9b3b4f4caa72bf811365a8225778a14298dfd6596c7f993a31bf2257ca7a55174df7a4e880c4c4a4bc0d9563cd2dcab48d5","ssdeep":"6144:fR+oxSfm1i6YEnjaB3aDBhyFw/ktVWMWOZC8u3k:fR+DfmiEOFa3yFVf22C8u3k","tlshash":"2a34126290e9d38c92ac907732a2736cb360f5ab9237016df196d731dc5c201be49dbe","first_seen":"2026-01-07T16:08:23.97389Z","last_seen":"2026-02-11T09:36:19.622564Z","times_seen":17,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/files/img/login.png","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","date":"2026-02-08T22:03:00.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcxorvel92.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 10:59:39 GMT","end":"Wed, 08 Apr 2026 11:57:03 GMT"},"fingerprint":{"sha1":"45:3D:40:CA:7C:F5:78:DA:E9:1E:AE:04:CE:4D:2E:77:5B:80:27:A7","sha256":"BC:C2:A5:EA:EB:6F:B5:67:93:75:A8:D8:ED:8E:E4:74:E8:34:9E:1F:85:B3:AD:12:4C:2C:E0:8D:1E:26:99:2B"}}},"request":{"raw":"GET /files/img/login.png HTTP/1.1\r\nHost: kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/\r\nCookie: PHPSESSID=0dcjok7moddbaing3vsrp1k8ft; _subid=1sjos4f8jj11; cef0b=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzMDVcIjoxNzcwNTg4MTc4fSxcImNhbXBhaWduc1wiOntcIjkyMFwiOjE3NzA1ODgxNzh9LFwidGltZVwiOjE3NzA1ODgxNzh9In0.XXA9KLW6lks4tI7ePB9zI3nPah04GYxJiUOJWSnwn4Q; 0bd260b6s920=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiMjMwNSJ9.JkAeFB0F4qnO6hsJdAHLDOHd_DV3hyLeysqcc99Ymbo; 0bd260b6s920ip=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiXCI5MS45MC40Mi4xNTRcIiJ9.-p8Lz-MZZz09KPlV-96BDKWPKa3aWDtVgYO0mnPWn4k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 22:03:02 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 28 Nov 2025 09:09:06 GMT\r\netag: \"d647-644a3fb419080\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 54855\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VdBHJceGeC4d6joCpmmpNwKskUWROifW3fVP2jwwfktTmv24s3Odv0lSCenfQohxT%2FFmhi3kftu8Ev9WIvWUmyGoBSacGoiVBcbjJpAxHA8Ry4o8EgB1nsXpacU3beXpBrJMZHoemwsaSdWapjEnF9OTs9ZB1Es%3D\"}]}\r\ncf-ray: 9cae6a1d8da7568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54855,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 862 x 541, 8-bit colormap, non-interlaced","md5":"5a95ad9019502609c50c1c9a1cb1e695","sha1":"45827a50074a3769f2c2e1ba61527d5acbcb0a79","sha256":"0545e961c1306a19bd97f544fe50dcdb80d41b3d41d86b4f90b5cc41a348aeea","sha512":"e499bebe9f00a11de515236d722eaeb53790025a9f54cde06046a597a8e0af19bc33942d74cc1d7beeaa46c183de71ab4c88d531a259a04c9f578891f5bd9cb0","ssdeep":"1536:yWrTPwbZaF1Mb5rrJveW87ikYDg/XNRRHj12q9uur6hPysm4Iu:9zib5rmiyXNRl91evH","tlshash":"6e33f24ceed48b72185ec5b704a95634988fe209c4bb26f708eb1fdd4ff418e874a661","first_seen":"2026-01-07T16:08:23.9851Z","last_seen":"2026-02-11T09:36:19.615841Z","times_seen":17,"resource_available":false,"data":null}},"time_used":2075,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2073,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/favicon.ico","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","date":"2026-02-08T22:03:03.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcxorvel92.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 10:59:39 GMT","end":"Wed, 08 Apr 2026 11:57:03 GMT"},"fingerprint":{"sha1":"45:3D:40:CA:7C:F5:78:DA:E9:1E:AE:04:CE:4D:2E:77:5B:80:27:A7","sha256":"BC:C2:A5:EA:EB:6F:B5:67:93:75:A8:D8:ED:8E:E4:74:E8:34:9E:1F:85:B3:AD:12:4C:2C:E0:8D:1E:26:99:2B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/\r\nCookie: PHPSESSID=0dcjok7moddbaing3vsrp1k8ft; _subid=1sjos4f8jj11; cef0b=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzMDVcIjoxNzcwNTg4MTc4fSxcImNhbXBhaWduc1wiOntcIjkyMFwiOjE3NzA1ODgxNzh9LFwidGltZVwiOjE3NzA1ODgxNzh9In0.XXA9KLW6lks4tI7ePB9zI3nPah04GYxJiUOJWSnwn4Q; 0bd260b6s920=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiMjMwNSJ9.JkAeFB0F4qnO6hsJdAHLDOHd_DV3hyLeysqcc99Ymbo; 0bd260b6s920ip=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiXCI5MS45MC40Mi4xNTRcIiJ9.-p8Lz-MZZz09KPlV-96BDKWPKa3aWDtVgYO0mnPWn4k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 22:03:03 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Sep 2025 19:57:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SWASuvOxqZGvJaY26JQ1%2FIb75Ay90MhbiS%2BJCBWOn7gt9RciE1mVgKlZoQYcC3EwANUUcaLWl2cB98E3cB%2FVGXMK18JxQanNRpYj475lGrbN%2Fa1QLOJBpi8y%2FHDdudrFGVozL5AryZILwwJitO08Cpu08gL%2FgJE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\netag: W/\"34f5-63ff60b7537c0\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cae6a328ea8568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13557,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 498 x 499, 8-bit/color RGBA, non-interlaced","md5":"46a5ddddbc7e56b4f302d364ef07843a","sha1":"0f06fe45efa8e96017d969f65a2fcc21de4a4be4","sha256":"97dc45c2992b3b4bde02f76af77ff5c2c8ef31bbc9f44a9d1a957353899f6a06","sha512":"3d4a79c85a1340c28e300a1a99fa73a278a2f2e30ec0c76cd4593b3145917ad25afc74f8eff8bc5401c0267bf4a05ecdaceed2b29400f9ace8677e7153d5fb52","ssdeep":"384:GhZY425loqXYPauwQzGM7WooPGOnffpMzXDhk97IethwL9L:E6PowAC/J4esxL","tlshash":"4c52ae21f2ad1a63f70a47258807541466c27eb02619480a84c7944f3ea3f18acf8ea2","first_seen":"2026-02-08T17:33:27.949911Z","last_seen":"2026-02-08T22:03:22.932415Z","times_seen":2,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/geo.php","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","date":"2026-02-08T22:03:03.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcxorvel92.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 10:59:39 GMT","end":"Wed, 08 Apr 2026 11:57:03 GMT"},"fingerprint":{"sha1":"45:3D:40:CA:7C:F5:78:DA:E9:1E:AE:04:CE:4D:2E:77:5B:80:27:A7","sha256":"BC:C2:A5:EA:EB:6F:B5:67:93:75:A8:D8:ED:8E:E4:74:E8:34:9E:1F:85:B3:AD:12:4C:2C:E0:8D:1E:26:99:2B"}}},"request":{"raw":"GET /geo.php HTTP/1.1\r\nHost: kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=0dcjok7moddbaing3vsrp1k8ft; _subid=1sjos4f8jj11; cef0b=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzMDVcIjoxNzcwNTg4MTc4fSxcImNhbXBhaWduc1wiOntcIjkyMFwiOjE3NzA1ODgxNzh9LFwidGltZVwiOjE3NzA1ODgxNzh9In0.XXA9KLW6lks4tI7ePB9zI3nPah04GYxJiUOJWSnwn4Q; 0bd260b6s920=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiMjMwNSJ9.JkAeFB0F4qnO6hsJdAHLDOHd_DV3hyLeysqcc99Ymbo; 0bd260b6s920ip=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiXCI5MS45MC40Mi4xNTRcIiJ9.-p8Lz-MZZz09KPlV-96BDKWPKa3aWDtVgYO0mnPWn4k\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 22:03:04 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AS%2BFKlBJYyipt46cK5MFT%2BdwyENwA1RJvg4aWtIE%2F8FBrMm4r5T0einJBTw7h5moTGMeLP5gJpHu%2BoGMwUfPILCUiAhVdRMZZrPM05PcSpgt%2Fl0bozlK0I9WVDYutH%2BTVImyikyhKob4rvYc30DoNeXksn5V808%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cae6a32aeae568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5176344be41555359469941e6d16d3c3","sha1":"d3e48b1a73c838464cf818ade585ca5f20a6baf1","sha256":"5e2b7a43e28b43abf39b16ec2754d544945a4cb63aa46a54fcf3020853112435","sha512":"ec7ce04251205a836acfc2204cd0561c0d95f0cbce5e30f97f059ceda2a958558613d545f5b40cdcd619886ebb4fa22c6288be87917b9890acbf411c576d5f09","ssdeep":"","tlshash":"d890021551994d55c4327310247e7e2a24fe8512d1b92106d88c1705c71008d144258a","first_seen":"2026-01-03T02:53:10.704895Z","last_seen":"2026-06-07T20:46:11.162765Z","times_seen":80,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":643,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/files/style.min.css","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","date":"2026-02-08T22:03:00.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcxorvel92.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 10:59:39 GMT","end":"Wed, 08 Apr 2026 11:57:03 GMT"},"fingerprint":{"sha1":"45:3D:40:CA:7C:F5:78:DA:E9:1E:AE:04:CE:4D:2E:77:5B:80:27:A7","sha256":"BC:C2:A5:EA:EB:6F:B5:67:93:75:A8:D8:ED:8E:E4:74:E8:34:9E:1F:85:B3:AD:12:4C:2C:E0:8D:1E:26:99:2B"}}},"request":{"raw":"GET /files/style.min.css HTTP/1.1\r\nHost: kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/\r\nCookie: PHPSESSID=0dcjok7moddbaing3vsrp1k8ft; _subid=1sjos4f8jj11; cef0b=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzMDVcIjoxNzcwNTg4MTc4fSxcImNhbXBhaWduc1wiOntcIjkyMFwiOjE3NzA1ODgxNzh9LFwidGltZVwiOjE3NzA1ODgxNzh9In0.XXA9KLW6lks4tI7ePB9zI3nPah04GYxJiUOJWSnwn4Q; 0bd260b6s920=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiMjMwNSJ9.JkAeFB0F4qnO6hsJdAHLDOHd_DV3hyLeysqcc99Ymbo; 0bd260b6s920ip=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiXCI5MS45MC40Mi4xNTRcIiJ9.-p8Lz-MZZz09KPlV-96BDKWPKa3aWDtVgYO0mnPWn4k\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 22:03:00 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 28 Nov 2025 09:55:11 GMT\r\netag: \"22b1b-644a4a0101dc0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 18227\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Su5Y2jjKEITR1metM%2F6wpTy5tJPWV89YjUmy5B6kfgODemOIsPKbz5iGS3KjmBJslvGUwphVeDn2WtTe0TXsqAr5jxEmx54XZ39M918%2F2O6rqB1ZpMDWdRVzBZgrbbTrK6l0BK%2BqInsfVM4xr1%2BqsfsIl8DwqSQ%3D\"}]}\r\ncf-ray: 9cae6a1d7d9e568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142107,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2946)","md5":"71a40141ef4588f38c52aeac76c49bc4","sha1":"5b1011c8ff3434ff3e1993663ad51468e887e104","sha256":"c39744598c86ce0b4d8ded3ed2c4b479620be8b77ce2a49979dad5f833176410","sha512":"2f3d29aa54836d8a28803ddc18594b94fd10e6f06202c98f941b68c1bea6d71170e955d1c1cb2f8c2c28c75b9c30f8528d09b12651798e5ed4f61e53b5e1bce8","ssdeep":"3072:EzM2cL64K5kOF9ae8JbbcP2D8UAaXZ3N5lqoXblr:Eo2cL64K5kOF9ae8JbbcP2D8UAeZ3N5p","tlshash":"acd34e4027f19cf439bf932a1d4ea614b6965c80c64e9beaf4e2d094768ca550cf3b4f","first_seen":"2026-01-07T16:08:23.932402Z","last_seen":"2026-02-11T09:36:19.626652Z","times_seen":17,"resource_available":false,"data":null}},"time_used":799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":608,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/files/widget.css","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","date":"2026-02-08T22:03:00.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcxorvel92.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 10:59:39 GMT","end":"Wed, 08 Apr 2026 11:57:03 GMT"},"fingerprint":{"sha1":"45:3D:40:CA:7C:F5:78:DA:E9:1E:AE:04:CE:4D:2E:77:5B:80:27:A7","sha256":"BC:C2:A5:EA:EB:6F:B5:67:93:75:A8:D8:ED:8E:E4:74:E8:34:9E:1F:85:B3:AD:12:4C:2C:E0:8D:1E:26:99:2B"}}},"request":{"raw":"GET /files/widget.css HTTP/1.1\r\nHost: kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/\r\nCookie: PHPSESSID=0dcjok7moddbaing3vsrp1k8ft; _subid=1sjos4f8jj11; cef0b=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzMDVcIjoxNzcwNTg4MTc4fSxcImNhbXBhaWduc1wiOntcIjkyMFwiOjE3NzA1ODgxNzh9LFwidGltZVwiOjE3NzA1ODgxNzh9In0.XXA9KLW6lks4tI7ePB9zI3nPah04GYxJiUOJWSnwn4Q; 0bd260b6s920=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiMjMwNSJ9.JkAeFB0F4qnO6hsJdAHLDOHd_DV3hyLeysqcc99Ymbo; 0bd260b6s920ip=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiXCI5MS45MC40Mi4xNTRcIiJ9.-p8Lz-MZZz09KPlV-96BDKWPKa3aWDtVgYO0mnPWn4k\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 22:03:00 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 28 Nov 2025 07:50:38 GMT\r\netag: \"29bf-644a2e2a32f80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 2382\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oNa%2BQLsMkanJmcr1Un2qj%2Bw8LB%2FBGyUnmT2GGsTyRuiCWVGX2n1wPfX79pIGoAmvswvsNEgr3CRuKaLK7n1b0pzSI5OmLScdBFafDmqqWuhkwhPSdfUQRGLimDWRyDpDQagJQqeiBrV0KgQOPzzRAqkFjWq5aqQ%3D\"}]}\r\ncf-ray: 9cae6a1d7d9f568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10687,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b58eab7e198803b7a22eba28979c3efc","sha1":"ec2678baacfbf46887512df5b50c339181523903","sha256":"0b91005cdd3621bccab2002e248aab48669ef6ce9bead2ae1e706255f37ac155","sha512":"f22962af430097907499c527debb2cd9f6b0a5d583e786b9a18f1d46021a05d3c0f746cac102a85ea81d6e7b3b08eebd069d2dd508cbf59e4d5a90529adb5a4f","ssdeep":"192:I79a6jk9oAfnsHf6O5i+4sHf6O5i+A4BFGf9sOB9R7puqWxnD2ks4u:IZPjk9duGf9HB9R7puhxnIf","tlshash":"3522fe96aab40101314bc46cb1d757d5633ea0c2a80ecdfdb7a470dd9f8c5da52bbb84","first_seen":"2025-07-03T06:33:15.924485Z","last_seen":"2026-06-06T05:06:17.091397Z","times_seen":162,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/files/img/logo.png","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","date":"2026-02-08T22:03:00.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcxorvel92.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 10:59:39 GMT","end":"Wed, 08 Apr 2026 11:57:03 GMT"},"fingerprint":{"sha1":"45:3D:40:CA:7C:F5:78:DA:E9:1E:AE:04:CE:4D:2E:77:5B:80:27:A7","sha256":"BC:C2:A5:EA:EB:6F:B5:67:93:75:A8:D8:ED:8E:E4:74:E8:34:9E:1F:85:B3:AD:12:4C:2C:E0:8D:1E:26:99:2B"}}},"request":{"raw":"GET /files/img/logo.png HTTP/1.1\r\nHost: kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/\r\nCookie: PHPSESSID=0dcjok7moddbaing3vsrp1k8ft; _subid=1sjos4f8jj11; cef0b=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzMDVcIjoxNzcwNTg4MTc4fSxcImNhbXBhaWduc1wiOntcIjkyMFwiOjE3NzA1ODgxNzh9LFwidGltZVwiOjE3NzA1ODgxNzh9In0.XXA9KLW6lks4tI7ePB9zI3nPah04GYxJiUOJWSnwn4Q; 0bd260b6s920=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiMjMwNSJ9.JkAeFB0F4qnO6hsJdAHLDOHd_DV3hyLeysqcc99Ymbo; 0bd260b6s920ip=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiXCI5MS45MC40Mi4xNTRcIiJ9.-p8Lz-MZZz09KPlV-96BDKWPKa3aWDtVgYO0mnPWn4k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 22:03:00 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Sep 2025 19:57:27 GMT\r\netag: \"34f5-63ff60b7537c0\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 13557\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lQ5eZnkyuJMg0wKSd0848movOhGZwaPt%2BXC3JAeeXu9phdauV7Dk8hTlJekV0eUHxju5tcJ1vjxihoewU0nEoMUVbZkmToLIwIy5UGAJraWkrpadagDZ91zi2U8J2RAYn4%2FoY%2F4J8mVAiXTEWPjQspb0YdeUa40%3D\"}]}\r\ncf-ray: 9cae6a1d8da4568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13557,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 498 x 499, 8-bit/color RGBA, non-interlaced","md5":"46a5ddddbc7e56b4f302d364ef07843a","sha1":"0f06fe45efa8e96017d969f65a2fcc21de4a4be4","sha256":"97dc45c2992b3b4bde02f76af77ff5c2c8ef31bbc9f44a9d1a957353899f6a06","sha512":"3d4a79c85a1340c28e300a1a99fa73a278a2f2e30ec0c76cd4593b3145917ad25afc74f8eff8bc5401c0267bf4a05ecdaceed2b29400f9ace8677e7153d5fb52","ssdeep":"384:GhZY425loqXYPauwQzGM7WooPGOnffpMzXDhk97IethwL9L:E6PowAC/J4esxL","tlshash":"4c52ae21f2ad1a63f70a47258807541466c27eb02619480a84c7944f3ea3f18acf8ea2","first_seen":"2026-02-08T17:33:27.949911Z","last_seen":"2026-02-08T22:03:22.932415Z","times_seen":2,"resource_available":false,"data":null}},"time_used":584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/files/img/visa-300x130-1.png","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","date":"2026-02-08T22:03:00.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcxorvel92.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 10:59:39 GMT","end":"Wed, 08 Apr 2026 11:57:03 GMT"},"fingerprint":{"sha1":"45:3D:40:CA:7C:F5:78:DA:E9:1E:AE:04:CE:4D:2E:77:5B:80:27:A7","sha256":"BC:C2:A5:EA:EB:6F:B5:67:93:75:A8:D8:ED:8E:E4:74:E8:34:9E:1F:85:B3:AD:12:4C:2C:E0:8D:1E:26:99:2B"}}},"request":{"raw":"GET /files/img/visa-300x130-1.png HTTP/1.1\r\nHost: kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/\r\nCookie: PHPSESSID=0dcjok7moddbaing3vsrp1k8ft; _subid=1sjos4f8jj11; cef0b=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzMDVcIjoxNzcwNTg4MTc4fSxcImNhbXBhaWduc1wiOntcIjkyMFwiOjE3NzA1ODgxNzh9LFwidGltZVwiOjE3NzA1ODgxNzh9In0.XXA9KLW6lks4tI7ePB9zI3nPah04GYxJiUOJWSnwn4Q; 0bd260b6s920=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiMjMwNSJ9.JkAeFB0F4qnO6hsJdAHLDOHd_DV3hyLeysqcc99Ymbo; 0bd260b6s920ip=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiXCI5MS45MC40Mi4xNTRcIiJ9.-p8Lz-MZZz09KPlV-96BDKWPKa3aWDtVgYO0mnPWn4k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 22:03:00 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 28 Nov 2025 09:09:06 GMT\r\netag: \"1054-644a3fb419080\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 4180\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AkwbE2aG1XrRAviGoktCpXyPXtlIo157FrFYJhH86YYo%2BGnijAZpE9yMrz4D2bQbYgnXRTpX53yKQdpNkSQR9Z%2FdtnmcIoWO6Unu%2FKJ4oi%2F6AIQ83uea8geDl9Xj42Mkir77q2COeg%2FAYog0aQXVfAclL3r%2BAr4%3D\"}]}\r\ncf-ray: 9cae6a1d8da8568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4180,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 130, 8-bit colormap, non-interlaced","md5":"6dbf70412d55a323b7eb5814e2794143","sha1":"4e0ce760a33de341072014ddf374d37b8bb5c108","sha256":"aa974f4e3d49c9bb187ec725b17c85e85617d8fab6213a729d7e2dbb4fb8085c","sha512":"c43d9d2d3d86cd6f1a5588a9c222428fe8c4e357f770da26c2c46ff1aa1285defe9be3827380557b96e9f8d6977fa1a67d0fd18121d3bcef0c3c9bc87a6a8f2a","ssdeep":"96:CK7HoMII+8jT08K6pueLamTQ/g0OcJYXhvRCb2gMQNsJzga1N:CKI/DSNu6TQSuYXhRCazUa1N","tlshash":"62817f719b60d70aa405dcd13010afe19df756a988fd91af3a1fc181241d6aedf44166","first_seen":"2026-01-07T16:08:23.952764Z","last_seen":"2026-02-11T09:36:19.616604Z","times_seen":17,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":568,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/files/img/regSuccess.png","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","date":"2026-02-08T22:03:00.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcxorvel92.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 10:59:39 GMT","end":"Wed, 08 Apr 2026 11:57:03 GMT"},"fingerprint":{"sha1":"45:3D:40:CA:7C:F5:78:DA:E9:1E:AE:04:CE:4D:2E:77:5B:80:27:A7","sha256":"BC:C2:A5:EA:EB:6F:B5:67:93:75:A8:D8:ED:8E:E4:74:E8:34:9E:1F:85:B3:AD:12:4C:2C:E0:8D:1E:26:99:2B"}}},"request":{"raw":"GET /files/img/regSuccess.png HTTP/1.1\r\nHost: kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/\r\nCookie: PHPSESSID=0dcjok7moddbaing3vsrp1k8ft; _subid=1sjos4f8jj11; cef0b=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzMDVcIjoxNzcwNTg4MTc4fSxcImNhbXBhaWduc1wiOntcIjkyMFwiOjE3NzA1ODgxNzh9LFwidGltZVwiOjE3NzA1ODgxNzh9In0.XXA9KLW6lks4tI7ePB9zI3nPah04GYxJiUOJWSnwn4Q; 0bd260b6s920=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiMjMwNSJ9.JkAeFB0F4qnO6hsJdAHLDOHd_DV3hyLeysqcc99Ymbo; 0bd260b6s920ip=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiXCI5MS45MC40Mi4xNTRcIiJ9.-p8Lz-MZZz09KPlV-96BDKWPKa3aWDtVgYO0mnPWn4k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 22:03:03 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 28 Nov 2025 09:09:05 GMT\r\netag: \"109b-644a3fb324e40\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 4251\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2B3Cv3NCxcOjl%2BxxUv0VzkHA423MktxOXlZaMJbb%2B4PmgoX4KPeR8vBJRlpcqph4tB4PFI0vf3KF5Eqh1Ys%2BNzSYDBGCckbYvG2QxjLtQ55Y2Tjkv%2BJYi7UJqx1pxkD5SoYI%2BB%2B0eI20mB5UXjF%2F8lWQByZpBsc%3D\"}]}\r\ncf-ray: 9cae6a1e0daa568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4251,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"4cd1d4874ebef5120e63efa1c66278dc","sha1":"3648f90f2ccc2e8ded42794dc0c0a363fc945527","sha256":"caae22c3dadc5664eff10a1e3d0a5959bfea87d28f52f03ca4f3d7ebf560e5de","sha512":"783589d822d0061de8cba5d2f0ee536652658ed258c3c280e7f5c6185b27afd27341ead4b9ea332f7de2542d1199cf4c48e45a3dab23989f1bcaac947c85f691","ssdeep":"96:MV1y7p9Ua3aCNlllyBf33Pf3h03Pf3+238J+tjzrs2f4Qk5O5DN33a4t4dUNxWcE:FAOaCNlllyBn+W23W+tjXs2f4X5O5DNI","tlshash":"2291c6ac40ecd767e9430d7497fa612edf6eeab31474c123ad94b6fa8b54240d012536","first_seen":"2023-04-30T21:53:58Z","last_seen":"2026-06-06T05:06:17.071565Z","times_seen":750,"resource_available":false,"data":null}},"time_used":3020,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3020,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/files/main.js","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","date":"2026-02-08T22:03:00.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcxorvel92.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 10:59:39 GMT","end":"Wed, 08 Apr 2026 11:57:03 GMT"},"fingerprint":{"sha1":"45:3D:40:CA:7C:F5:78:DA:E9:1E:AE:04:CE:4D:2E:77:5B:80:27:A7","sha256":"BC:C2:A5:EA:EB:6F:B5:67:93:75:A8:D8:ED:8E:E4:74:E8:34:9E:1F:85:B3:AD:12:4C:2C:E0:8D:1E:26:99:2B"}}},"request":{"raw":"GET /files/main.js HTTP/1.1\r\nHost: kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/\r\nCookie: PHPSESSID=0dcjok7moddbaing3vsrp1k8ft; _subid=1sjos4f8jj11; cef0b=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzMDVcIjoxNzcwNTg4MTc4fSxcImNhbXBhaWduc1wiOntcIjkyMFwiOjE3NzA1ODgxNzh9LFwidGltZVwiOjE3NzA1ODgxNzh9In0.XXA9KLW6lks4tI7ePB9zI3nPah04GYxJiUOJWSnwn4Q; 0bd260b6s920=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiMjMwNSJ9.JkAeFB0F4qnO6hsJdAHLDOHd_DV3hyLeysqcc99Ymbo; 0bd260b6s920ip=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiXCI5MS45MC40Mi4xNTRcIiJ9.-p8Lz-MZZz09KPlV-96BDKWPKa3aWDtVgYO0mnPWn4k\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 22:03:00 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 28 Nov 2025 11:12:29 GMT\r\netag: \"166e-644a5b4826140-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 1582\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Ije3Iuq%2FB33m%2BJzuB4iWpFG%2BlZXT1WO8UeAqmNbSEuUJJ5UaTSA4EWsa9gdtxTLQ2wHWfvJvi5BXAXJTZnGuD6URst%2FF997sx2bflmTX0UoFAczHylxr3f6SAj%2F4%2B1zZnksHWKe4GozmEnoBUSIsS7rGNcNws0%3D\"}]}\r\ncf-ray: 9cae6a1e0dae568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5742,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"1dd39e6d9f32a8032b197f108acc300c","sha1":"51c3c431df923da644adad5fdc74b3655272579e","sha256":"f66818b333bb5493d57e7cc073a223fab3c09d1c37f26c3ba6fc346963d93443","sha512":"85509237908fd90c7e0490a04a9353936b5afaf6fe4697815f58705aa2c29cbf644c54fe59c4c3ae92249072ef31b768dab3e97eb23a6721ed6cc4efbf5d0b27","ssdeep":"96:7dg+UjKtmwwNFnkTF9V6vlWBBeFgWJBbpFg+WQB1YHBxMFBzs72smbDD:7dg+Uj3N2TnaiP2sW","tlshash":"5fc14124251a016a8a7277bb6f831559f7a5617fac82c3963e2d03452ff185483f0fbd","first_seen":"2026-01-07T16:08:23.979696Z","last_seen":"2026-02-11T09:36:19.639458Z","times_seen":17,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bti.live/wp-content/uploads/2022/08/shutterstock_1976768306-b-scaled-1.jpg","fqdn":"www.bti.live","domain":"bti.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","date":"2026-02-08T22:03:01.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bti.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 19:28:40 GMT","end":"Thu, 12 Mar 2026 20:26:06 GMT"},"fingerprint":{"sha1":"6E:5B:18:DC:80:53:56:BE:83:7E:08:37:6E:7E:F9:64:A5:D3:A0:3E","sha256":"B0:0F:3B:A9:0A:80:29:97:FD:C3:2F:E1:31:AF:9A:46:4C:62:D6:AF:B0:DF:AA:F6:38:84:7D:5F:79:1A:8E:E5"}}},"request":{"raw":"GET /wp-content/uploads/2022/08/shutterstock_1976768306-b-scaled-1.jpg HTTP/1.1\r\nHost: www.bti.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 22:03:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 14:49:49 GMT\r\netag: \"4c917-640efd69-3b1cf5;;;\"\r\nlast-modified: Mon, 13 Mar 2023 10:39:37 GMT\r\naccept-ranges: bytes\r\nx-turbo-charged-by: LiteSpeed\r\nage: 25991\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bItSfUCSfjlqhkrZlbWrUSrurM3O12oYuyx105uTYaoBbiQWqqwXDfLMGdoHJ1TIPngG99IB%2FD3mHxaCDxVzVTP%2BhwpRA%2FUKcvA2bg%3D%3D\"}]}\r\ncf-ray: 9cae6a24ca7e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":313623,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 2560x1594, components 3","md5":"875bf58c5ebe275c8a96a25bee4d1fe5","sha1":"bc231e4e58c08b9f6d72b99d1af75b6ac86f1cbb","sha256":"0c22b65d3eb58822d90096be44bb305d62b9d84cf4323669ff232d1f29e5bc54","sha512":"85181bbed7831b7ceece0a7cc04b5cfde8318c01124d9f9544410b00662b01a7f1c51493ffe2bfd8db30994a550f754f3f80b3208953f90e765557c27b445d6f","ssdeep":"6144:98TLk0WZKT89muV3PXp3DRImtjzhPnzStXHAvyhczHH9km7P3BnyI:98vM4utND2mXO5AKheHym7/F/","tlshash":"0764133377b1ba8fe07da7f0535f697828215678e35c70118ac8ac654ed6f60fa20c69","first_seen":"2026-01-07T16:08:23.981776Z","last_seen":"2026-02-11T09:36:19.623125Z","times_seen":17,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":75,"dns":25,"connect":1,"send":0,"wait":10,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bti.live/wp-content/uploads/2021/04/sander-weeteling-KABfjuSOx74-unsplash.jpg","fqdn":"www.bti.live","domain":"bti.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","date":"2026-02-08T22:03:01.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bti.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 19:28:40 GMT","end":"Thu, 12 Mar 2026 20:26:06 GMT"},"fingerprint":{"sha1":"6E:5B:18:DC:80:53:56:BE:83:7E:08:37:6E:7E:F9:64:A5:D3:A0:3E","sha256":"B0:0F:3B:A9:0A:80:29:97:FD:C3:2F:E1:31:AF:9A:46:4C:62:D6:AF:B0:DF:AA:F6:38:84:7D:5F:79:1A:8E:E5"}}},"request":{"raw":"GET /wp-content/uploads/2021/04/sander-weeteling-KABfjuSOx74-unsplash.jpg HTTP/1.1\r\nHost: www.bti.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 22:03:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 14:49:49 GMT\r\netag: \"1da6e-640f0521-3b20f2;;;\"\r\nlast-modified: Mon, 13 Mar 2023 11:12:33 GMT\r\naccept-ranges: bytes\r\nx-turbo-charged-by: LiteSpeed\r\nage: 25991\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JrRLdV%2B9F%2FkdBuoHYoHicm4wlyh%2FI3rdonAIartahX2wq4pbZvzNODitD7v1E50xqXRqvDBaHF6LX452L0hGbgJUM5uSbFaPC5UoFw%3D%3D\"}]}\r\ncf-ray: 9cae6a24da918deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":121454,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1068, components 3","md5":"c33c9eba4571e1cff588f976ff840c0b","sha1":"f227341511f4ce055acb5b27a7ef7e5d6e683c36","sha256":"21c946cb33c3eb9852b14a35c1739a708500bcf1262b88602af38bf679d67a1e","sha512":"621d2507d3aa248a854d40639dd23ef272bfe1c5252376844bc39803652ee82f2c7df977658a7294a784f0e856cfb9ac822135aebfd29f7dfbab0ea78119ccb5","ssdeep":"3072:6NgvLu9qia+4poTT9zxR0CZfX+CQG7BmFxXK+mRBg8oCl:4ZnGq9bOCQG7gF8BfoCl","tlshash":"d8c3121b021c805af099c2b4653bb13e0a690f4f63e577877ea6dd8a7e267c51d8cdc1","first_seen":"2023-09-30T19:08:28Z","last_seen":"2026-03-29T09:59:13.251837Z","times_seen":22,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":70,"dns":0,"connect":8,"send":0,"wait":11,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/files/main.min.css","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","date":"2026-02-08T22:03:00.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcxorvel92.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 10:59:39 GMT","end":"Wed, 08 Apr 2026 11:57:03 GMT"},"fingerprint":{"sha1":"45:3D:40:CA:7C:F5:78:DA:E9:1E:AE:04:CE:4D:2E:77:5B:80:27:A7","sha256":"BC:C2:A5:EA:EB:6F:B5:67:93:75:A8:D8:ED:8E:E4:74:E8:34:9E:1F:85:B3:AD:12:4C:2C:E0:8D:1E:26:99:2B"}}},"request":{"raw":"GET /files/main.min.css HTTP/1.1\r\nHost: kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/\r\nCookie: PHPSESSID=0dcjok7moddbaing3vsrp1k8ft; _subid=1sjos4f8jj11; cef0b=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzMDVcIjoxNzcwNTg4MTc4fSxcImNhbXBhaWduc1wiOntcIjkyMFwiOjE3NzA1ODgxNzh9LFwidGltZVwiOjE3NzA1ODgxNzh9In0.XXA9KLW6lks4tI7ePB9zI3nPah04GYxJiUOJWSnwn4Q; 0bd260b6s920=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiMjMwNSJ9.JkAeFB0F4qnO6hsJdAHLDOHd_DV3hyLeysqcc99Ymbo; 0bd260b6s920ip=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiXCI5MS45MC40Mi4xNTRcIiJ9.-p8Lz-MZZz09KPlV-96BDKWPKa3aWDtVgYO0mnPWn4k\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 22:03:01 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 28 Nov 2025 09:28:34 GMT\r\netag: \"6d60-644a440dfd480-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 5463\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2FYBEzm3JbYJzNq0U1LXMTUWVbDc9vmI0lFKC%2BwRkraqWyzny7k1sY9b4yDq%2Bz1rMEVmmY14ngWg9yAAhETjvVhsniV%2BiVpksGOhRMYU8qT1JkU6tgyQYvELgM%2BCGE3nUgXm6ngfiElEvTRyN%2BlAblkybZ7uKnY%3D\"}]}\r\ncf-ray: 9cae6a1d8da0568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e90fc9405676b32a5be943d5d2900688","sha1":"2d764447d41d070747e0338221398938b20996cc","sha256":"3cd5a0ccabb17f41013965a1c7d0536b25c44e3a0c5f8444819d0a33e8075545","sha512":"4f95363bf49663ace32ad06afe7b36edb4064af79cddacaa6f247e312cab19b1e648c1cfa3b4a8539138149d2776b9d7828f3d231dd090cf0e413a4569c3a148","ssdeep":"768:sGesWjhea9lqajkoJPflpdDdnVZG2hOHdiWVC3aSOLC4QDoPUV:sG6hF/ZG2hOHdiWVC3aDc","tlshash":"65c24e009a5320429377cb7ebbf09524fed940778b0b80a579d8e3448ffaa759252f9d","first_seen":"2026-01-07T16:08:23.935314Z","last_seen":"2026-02-11T09:36:19.61461Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1069,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1068,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/files/img/Featured-Image.png","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","date":"2026-02-08T22:03:00.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcxorvel92.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 10:59:39 GMT","end":"Wed, 08 Apr 2026 11:57:03 GMT"},"fingerprint":{"sha1":"45:3D:40:CA:7C:F5:78:DA:E9:1E:AE:04:CE:4D:2E:77:5B:80:27:A7","sha256":"BC:C2:A5:EA:EB:6F:B5:67:93:75:A8:D8:ED:8E:E4:74:E8:34:9E:1F:85:B3:AD:12:4C:2C:E0:8D:1E:26:99:2B"}}},"request":{"raw":"GET /files/img/Featured-Image.png HTTP/1.1\r\nHost: kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/\r\nCookie: PHPSESSID=0dcjok7moddbaing3vsrp1k8ft; _subid=1sjos4f8jj11; cef0b=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzMDVcIjoxNzcwNTg4MTc4fSxcImNhbXBhaWduc1wiOntcIjkyMFwiOjE3NzA1ODgxNzh9LFwidGltZVwiOjE3NzA1ODgxNzh9In0.XXA9KLW6lks4tI7ePB9zI3nPah04GYxJiUOJWSnwn4Q; 0bd260b6s920=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiMjMwNSJ9.JkAeFB0F4qnO6hsJdAHLDOHd_DV3hyLeysqcc99Ymbo; 0bd260b6s920ip=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiXCI5MS45MC40Mi4xNTRcIiJ9.-p8Lz-MZZz09KPlV-96BDKWPKa3aWDtVgYO0mnPWn4k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 22:03:00 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 28 Nov 2025 09:09:05 GMT\r\netag: \"1012e7-644a3fb324e40\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 1053415\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6RJJqT2RDEzgs2e%2B5XTt6de6JtUhq5LVYoRSZyknlvLHwIgGlX4XAKgSysMx3zlXP%2FOfqZ2NSeAiKYrmAqGRRqrWurhItdICfhu5pBu8QGi1IgF3xUroUeGLH2xGVWbO9m%2FGfdRBv1Vn4ObxLHwUWKy4sUeeOv4%3D\"}]}\r\ncf-ray: 9cae6a1d8da5568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1053415,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1462 x 737, 8-bit/color RGBA, non-interlaced","md5":"dfd7d5fbf4071a20261622c85ae756c9","sha1":"9b270a80b15a15a98e13e6644c3f2c13b1d388f5","sha256":"a5ef28d63d41e255e710a53f91d40dd4a6470403eebb3674cff3b8b1ae09aa6d","sha512":"37f179f97c2e70c704fb69e731f89ee5ca0ab2f4bb145d4ca3b2b372d3c04c08917aeb2c725fd9f39dc03b5884cf2d8cf019fd18c4e92e10fe9542ae46c92d6f","ssdeep":"24576:IUQT7MjElFya0o6bUuFVfJyLYC93fgf5UBq7LQE:jQT4jElFyY6R0H9vo5UBq7N","tlshash":"dc25330155839f63cf7238ff29abbec4b34bbaec03565648a0e4cf9355666650b10acd","first_seen":"2026-01-07T16:08:23.938085Z","last_seen":"2026-02-11T09:36:19.615241Z","times_seen":17,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/files/jquery-3.7.1.min.js","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","date":"2026-02-08T22:03:00.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcxorvel92.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 10:59:39 GMT","end":"Wed, 08 Apr 2026 11:57:03 GMT"},"fingerprint":{"sha1":"45:3D:40:CA:7C:F5:78:DA:E9:1E:AE:04:CE:4D:2E:77:5B:80:27:A7","sha256":"BC:C2:A5:EA:EB:6F:B5:67:93:75:A8:D8:ED:8E:E4:74:E8:34:9E:1F:85:B3:AD:12:4C:2C:E0:8D:1E:26:99:2B"}}},"request":{"raw":"GET /files/jquery-3.7.1.min.js HTTP/1.1\r\nHost: kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/\r\nCookie: PHPSESSID=0dcjok7moddbaing3vsrp1k8ft; _subid=1sjos4f8jj11; cef0b=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzMDVcIjoxNzcwNTg4MTc4fSxcImNhbXBhaWduc1wiOntcIjkyMFwiOjE3NzA1ODgxNzh9LFwidGltZVwiOjE3NzA1ODgxNzh9In0.XXA9KLW6lks4tI7ePB9zI3nPah04GYxJiUOJWSnwn4Q; 0bd260b6s920=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiMjMwNSJ9.JkAeFB0F4qnO6hsJdAHLDOHd_DV3hyLeysqcc99Ymbo; 0bd260b6s920ip=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiXCI5MS45MC40Mi4xNTRcIiJ9.-p8Lz-MZZz09KPlV-96BDKWPKa3aWDtVgYO0mnPWn4k\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 22:03:03 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 07 Oct 2025 12:54:27 GMT\r\netag: \"155ed-64091116c26c0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 30362\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2BJbSS6YdlTVQA6e0xd48izDD6xYSI%2FkNN9og8UHmVE8F50c0cJdnSFoTTWNx2JFrZjGMnpv0yuD95%2ByDKcyPyaz1wEYfKPn2Yd%2BO0lrUMOhB5WBcUqxotXgAofZmOno6iXVr8Fg7ELVfnr%2B665fsJ7%2F1pRamdk%3D\"}]}\r\ncf-ray: 9cae6a1e0dab568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-06-08T22:12:23.652195Z","times_seen":166627,"resource_available":true,"data":null}},"time_used":3217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3032,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/files/intlTelInput/intlTelInput.min.js","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","date":"2026-02-08T22:03:00.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcxorvel92.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 10:59:39 GMT","end":"Wed, 08 Apr 2026 11:57:03 GMT"},"fingerprint":{"sha1":"45:3D:40:CA:7C:F5:78:DA:E9:1E:AE:04:CE:4D:2E:77:5B:80:27:A7","sha256":"BC:C2:A5:EA:EB:6F:B5:67:93:75:A8:D8:ED:8E:E4:74:E8:34:9E:1F:85:B3:AD:12:4C:2C:E0:8D:1E:26:99:2B"}}},"request":{"raw":"GET /files/intlTelInput/intlTelInput.min.js HTTP/1.1\r\nHost: kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/\r\nCookie: PHPSESSID=0dcjok7moddbaing3vsrp1k8ft; _subid=1sjos4f8jj11; cef0b=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzMDVcIjoxNzcwNTg4MTc4fSxcImNhbXBhaWduc1wiOntcIjkyMFwiOjE3NzA1ODgxNzh9LFwidGltZVwiOjE3NzA1ODgxNzh9In0.XXA9KLW6lks4tI7ePB9zI3nPah04GYxJiUOJWSnwn4Q; 0bd260b6s920=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiMjMwNSJ9.JkAeFB0F4qnO6hsJdAHLDOHd_DV3hyLeysqcc99Ymbo; 0bd260b6s920ip=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiXCI5MS45MC40Mi4xNTRcIiJ9.-p8Lz-MZZz09KPlV-96BDKWPKa3aWDtVgYO0mnPWn4k\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 22:03:02 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 21 Jul 2025 18:08:46 GMT\r\netag: \"7e7a-63a745de26780-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 11902\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1naJMpTLePBY977giEO3qwbPZn0AAbdfH5pxS%2BjLgAvMHFCnUj8XUzwsiJmo6BEmkvaSuAx5gjD%2FCKQrhIMKF%2FkKi3iJ%2FMrg%2F87gX0%2FTH4vXdhsDMK3ddlQwNde0se%2BRJa4lIz9TsO3peIHnbxG3fkMDY9IFcoI%3D\"}]}\r\ncf-ray: 9cae6a1e0dad568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32378,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32010)","md5":"bf4b3a1c24ece82c400022387d34e13d","sha1":"e22fbe21329db01967d139fd157a75736a2a4913","sha256":"f0c96e6848522adeaa6f202c2f115684216b36dcbdf4a5b03d4a904817d9548d","sha512":"4a5b14eb929d2de8f6b24436e2323e3ce2f8d0a09e27b691f5dcba9614fa6548202907a8aaae8b8feee7ea2f33a8eda071e9584013e039daed2300d717a70b23","ssdeep":"768:Oq03XVqC/iPIVXpwJx/cndN9esRjJK7dg24txpIO:OyPIgcno4JwdcR","tlshash":"09e2e6aeb3656b37abfd82a270b44503af7f79444604046d78ac8ede1188ed171f5b38","first_seen":"2025-05-18T09:30:05.434446Z","last_seen":"2026-06-06T08:37:20.814803Z","times_seen":441,"resource_available":true,"data":null}},"time_used":2135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1962,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bti.live/wp-content/uploads/2022/10/maxim-hopman-fiXLQXAhCfk-unsplash-scaled-1-300x200.jpg","fqdn":"www.bti.live","domain":"bti.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","date":"2026-02-08T22:03:01.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bti.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 19:28:40 GMT","end":"Thu, 12 Mar 2026 20:26:06 GMT"},"fingerprint":{"sha1":"6E:5B:18:DC:80:53:56:BE:83:7E:08:37:6E:7E:F9:64:A5:D3:A0:3E","sha256":"B0:0F:3B:A9:0A:80:29:97:FD:C3:2F:E1:31:AF:9A:46:4C:62:D6:AF:B0:DF:AA:F6:38:84:7D:5F:79:1A:8E:E5"}}},"request":{"raw":"GET /wp-content/uploads/2022/10/maxim-hopman-fiXLQXAhCfk-unsplash-scaled-1-300x200.jpg HTTP/1.1\r\nHost: www.bti.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 22:03:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 14:49:49 GMT\r\netag: \"2062-640efd94-3b1d29;;;\"\r\nlast-modified: Mon, 13 Mar 2023 10:40:20 GMT\r\naccept-ranges: bytes\r\nx-turbo-charged-by: LiteSpeed\r\nage: 25991\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JC9F3xlxt35ycofo4yKwSteWSortJVTwQg5U1R0KI8Pv24BDZYqF9r6rh4CYCDttQhP8K%2BxLK8f5%2BnZ4qjCbJzwkYoDIY61HnZ6bLw%3D%3D\"}]}\r\ncf-ray: 9cae6a24ca6f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8290,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x200, components 3","md5":"88de3e532387d82fa1b760e5d52262a0","sha1":"8c82f8de5b86a226845ff74871f748f3ec1763f5","sha256":"257d7075303ec5f544128915ed785c9ba3c6281f9293662d88314bee190ff88c","sha512":"67ab32a080ee29d188c36133b92c9e5429f7803341591ede6977620b31e8b5da7853934f38d6ba058d31c8ee940f849b718739da8efb4da0f46b9dc7d8d8283a","ssdeep":"192:CCRN5225JviRC2GtV619awUH41RnzmgRQ2g7IyDB/xp4xJi:3P5R5liRI6TawjRnzmgyFpd/gri","tlshash":"bf02b01d5ac1f67ee8ca1fbc5806e600760cd975f5c22ba1da7cc4ad8d5d9e368b0051","first_seen":"2026-01-07T16:08:23.947848Z","last_seen":"2026-02-11T09:36:19.640463Z","times_seen":17,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":68,"dns":20,"connect":4,"send":0,"wait":12,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bti.live/wp-content/uploads/2022/10/background-blue-1.png","fqdn":"www.bti.live","domain":"bti.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","date":"2026-02-08T22:03:01.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bti.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 19:28:40 GMT","end":"Thu, 12 Mar 2026 20:26:06 GMT"},"fingerprint":{"sha1":"6E:5B:18:DC:80:53:56:BE:83:7E:08:37:6E:7E:F9:64:A5:D3:A0:3E","sha256":"B0:0F:3B:A9:0A:80:29:97:FD:C3:2F:E1:31:AF:9A:46:4C:62:D6:AF:B0:DF:AA:F6:38:84:7D:5F:79:1A:8E:E5"}}},"request":{"raw":"GET /wp-content/uploads/2022/10/background-blue-1.png HTTP/1.1\r\nHost: www.bti.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 22:03:01 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 14:49:49 GMT\r\netag: \"7cf7-640efd81-3b1d77;;;\"\r\nlast-modified: Mon, 13 Mar 2023 10:40:01 GMT\r\naccept-ranges: bytes\r\nx-turbo-charged-by: LiteSpeed\r\nage: 25991\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0nM%2FsEamyDsq8cuKaeB9zdR5QTTjF7zS99MGw7Z6FtHGrUyTp7sqbYjrXgeRpntB%2BRSZmPQNyZgTGCTgkN0fEs40g%2FClMgmN%2FfxdQQ%3D%3D\"}]}\r\ncf-ray: 9cae6a24ca7b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31991,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 530 x 726, 4-bit colormap, non-interlaced","md5":"6c6be24e57c4679ea7fbfea3f6d29509","sha1":"b6acf480793c52ca71a8f849e42f57e530a780e3","sha256":"510fbf92bcc55599a6bb1433bc99cb5ac2fb4cd001605517e94f19870396c40b","sha512":"8ccc9e7181be510473019d1b6e23eda4563163f2df1875f6534e5b653eba8d13e3cfd849c61fff5c91cb9bc27e832ac199e879bdb14615c3f380d20e819ec07d","ssdeep":"768:fF86Uw5Yu/ShVUlPyfipN5UEC6WgRjneB14Z23EAZ:986z5Y10PLxCfkQpZ","tlshash":"e8e2f122de8c49b8dcec759471de2c9cf46fd811e946c3c34a2856e335426e6cd3b91a","first_seen":"2026-01-07T16:08:23.975197Z","last_seen":"2026-02-11T09:36:19.623963Z","times_seen":17,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":69,"dns":24,"connect":1,"send":0,"wait":11,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/files/intlTelInput/img/flags.webp","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","date":"2026-02-08T22:03:03.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcxorvel92.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 10:59:39 GMT","end":"Wed, 08 Apr 2026 11:57:03 GMT"},"fingerprint":{"sha1":"45:3D:40:CA:7C:F5:78:DA:E9:1E:AE:04:CE:4D:2E:77:5B:80:27:A7","sha256":"BC:C2:A5:EA:EB:6F:B5:67:93:75:A8:D8:ED:8E:E4:74:E8:34:9E:1F:85:B3:AD:12:4C:2C:E0:8D:1E:26:99:2B"}}},"request":{"raw":"GET /files/intlTelInput/img/flags.webp HTTP/1.1\r\nHost: kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/files/intlTelInput/intlTelInput.css\r\nCookie: PHPSESSID=0dcjok7moddbaing3vsrp1k8ft; _subid=1sjos4f8jj11; cef0b=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzMDVcIjoxNzcwNTg4MTc4fSxcImNhbXBhaWduc1wiOntcIjkyMFwiOjE3NzA1ODgxNzh9LFwidGltZVwiOjE3NzA1ODgxNzh9In0.XXA9KLW6lks4tI7ePB9zI3nPah04GYxJiUOJWSnwn4Q; 0bd260b6s920=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiMjMwNSJ9.JkAeFB0F4qnO6hsJdAHLDOHd_DV3hyLeysqcc99Ymbo; 0bd260b6s920ip=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiXCI5MS45MC40Mi4xNTRcIiJ9.-p8Lz-MZZz09KPlV-96BDKWPKa3aWDtVgYO0mnPWn4k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 22:03:03 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 21 Jul 2025 18:21:09 GMT\r\netag: \"6e1a-63a748a2baf40\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 28186\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gq4bUhDOOaGxIqi1S2lqAx9o1WvbeHqWOh9qXsJGkYs7OBtMjUG2GfSP5asYieqxOqyNq9dgPVZEiW9qIKQjgkk8Osfo802nU49VdgH5rI76v2dek%2BvGeOZrSBgRTnZnPBS9szxhR3ds62WVD2pC6jKT0UACLzQ%3D\"}]}\r\ncf-ray: 9cae6a32aeac568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28186,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4af30d041d95c5a83b016ec6812cda19","sha1":"2473dd635cbd3b0d8d8db8da1b27a08b4426c9ae","sha256":"0e2a53ec4d77d08efa8e8f5fc86b1c25e8f2af39d6b44334e1219ed3e0687a61","sha512":"a43b49d0a8830608a8351b1fe3afc5d468664ad79b674583f6e8f1c647fd5270181e9b1d35cbbbddc0285dc15b49e9d53f34a8bd414d32ae3ad6d659168e095e","ssdeep":"384:NmynJhMcWfubAG0nXDutFs4CIwMB7Po+NKC5NPQic7vmUbx2Kh4du2r0mRo3d0:NmynJhMze5CD+3PZ7AEZPyx2KhSRj","tlshash":"66c2e133be32a6c76d998ab018364ffa97354446bdd359c3a1f6ba98dd374c3294020d","first_seen":"2025-03-06T15:46:52.721855Z","last_seen":"2026-06-08T20:50:27.910045Z","times_seen":2601,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":189,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-08T22:02:57.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcxorvel92.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 10:59:39 GMT","end":"Wed, 08 Apr 2026 11:57:03 GMT"},"fingerprint":{"sha1":"45:3D:40:CA:7C:F5:78:DA:E9:1E:AE:04:CE:4D:2E:77:5B:80:27:A7","sha256":"BC:C2:A5:EA:EB:6F:B5:67:93:75:A8:D8:ED:8E:E4:74:E8:34:9E:1F:85:B3:AD:12:4C:2C:E0:8D:1E:26:99:2B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 22:02:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nset-cookie: PHPSESSID=0dcjok7moddbaing3vsrp1k8ft; path=/\n_subid=1sjos4f8jj11; expires=Mon, 09-Feb-2026 22:02:58 GMT; Max-Age=86400; path=/; domain=.kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com\ncef0b=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzMDVcIjoxNzcwNTg4MTc4fSxcImNhbXBhaWduc1wiOntcIjkyMFwiOjE3NzA1ODgxNzh9LFwidGltZVwiOjE3NzA1ODgxNzh9In0.XXA9KLW6lks4tI7ePB9zI3nPah04GYxJiUOJWSnwn4Q; expires=Mon, 09-Feb-2026 22:02:58 GMT; Max-Age=86400; path=/; domain=.kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com\n0bd260b6s920=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiMjMwNSJ9.JkAeFB0F4qnO6hsJdAHLDOHd_DV3hyLeysqcc99Ymbo; expires=Mon, 09-Feb-2026 22:02:58 GMT; Max-Age=86400; path=/; domain=.kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com\n0bd260b6s920ip=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiXCI5MS45MC40Mi4xNTRcIiJ9.-p8Lz-MZZz09KPlV-96BDKWPKa3aWDtVgYO0mnPWn4k; expires=Mon, 09-Feb-2026 22:02:58 GMT; Max-Age=86400; path=/; domain=.kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mYOdPVYaS%2BKnDxFFv80DeenGLBpcY1xcRWaUq1FmlbTuWgwURo74MVTj7yl9IE8CBv5tR%2BcTJQwP5T0K4E4CvsO0Id4kP71qhFV%2Fx39uqhHt8LDoA2fN6Kq6B372%2Bmt9fMsOD%2Bgp1UgCWq2HM0v0pBJd5EzPj0Od7g%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cae6a0dbcca8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"GenerateBlocks","description":"GenerateBlocks is a small collection of lightweight WordPress blocks for the WordPress Block Editor.","website":"https://generateblocks.com","common_platform_enumeration":"","icon":"GenerateBlocks.svg","categories":["WordPress plugins"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":97573,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (807)","md5":"f2f422846dbd1506f8307f99bbda3a1a","sha1":"c9a48be890ef9d7895494f79088da450220abc3f","sha256":"33540220dc68952a716a6635fb15c9a7bcbe17dd9875b7f29aebba8bae20cef4","sha512":"871f9450220e740e98587da8fab46d012470531967eebafcba6c6ab6f1bffeca8df36e98c91bfa753c29d1328dfc37dd209be2066d69be69883ee8105b2ddb80","ssdeep":"384:1SlGy4njGxeVEcRTtdbugBrfdCKitLZnoFwve4nXfp4ciPpdrZJRuAWM:1J4eVEcPdygbCH6J4nXyc+drZJhd","tlshash":"00934021aaf41577219700edbae61e0a2f80d643df2b45c872fcc7948febd92d927149","first_seen":"2026-02-08T22:03:22.966927Z","last_seen":"2026-02-08T22:03:22.966927Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2445,"timings":{"blocked":35,"dns":16,"connect":1,"send":0,"wait":2373,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/files/featured-images.min.css","fqdn":"kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com","domain":"btcxorvel92.com","tld":"com"},"ip":{"addr":"104.21.22.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/","date":"2026-02-08T22:03:00.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btcxorvel92.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 10:59:39 GMT","end":"Wed, 08 Apr 2026 11:57:03 GMT"},"fingerprint":{"sha1":"45:3D:40:CA:7C:F5:78:DA:E9:1E:AE:04:CE:4D:2E:77:5B:80:27:A7","sha256":"BC:C2:A5:EA:EB:6F:B5:67:93:75:A8:D8:ED:8E:E4:74:E8:34:9E:1F:85:B3:AD:12:4C:2C:E0:8D:1E:26:99:2B"}}},"request":{"raw":"GET /files/featured-images.min.css HTTP/1.1\r\nHost: kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kqsaq2c80153c-d377-42ed-9424-e122d3b5e914.btcxorvel92.com/\r\nCookie: PHPSESSID=0dcjok7moddbaing3vsrp1k8ft; _subid=1sjos4f8jj11; cef0b=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIzMDVcIjoxNzcwNTg4MTc4fSxcImNhbXBhaWduc1wiOntcIjkyMFwiOjE3NzA1ODgxNzh9LFwidGltZVwiOjE3NzA1ODgxNzh9In0.XXA9KLW6lks4tI7ePB9zI3nPah04GYxJiUOJWSnwn4Q; 0bd260b6s920=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiMjMwNSJ9.JkAeFB0F4qnO6hsJdAHLDOHd_DV3hyLeysqcc99Ymbo; 0bd260b6s920ip=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiXCI5MS45MC40Mi4xNTRcIiJ9.-p8Lz-MZZz09KPlV-96BDKWPKa3aWDtVgYO0mnPWn4k\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 22:03:00 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 28 Nov 2025 07:50:38 GMT\r\netag: \"cdd-644a2e2a32f80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 493\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tFeLFNXqAPNLCxMHCKQCUmzCxINtLwtxNLiNfjQII61PEd5Tc4DOfxYMVM%2Fap6Bae%2FmQYnjJ%2Fp%2BI0bua5b994memDqhteK08B8UehtuTkGXcEXXdn%2B47tASAh2iqvwZ8VmV%2FzTlJEhZ4v3mM9qMV0PQ28V5ndGk%3D\"}]}\r\ncf-ray: 9cae6a1d8da3568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3293,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3293), with no line terminators","md5":"07e59a4db7995b6ce66bfb90fc7fbd22","sha1":"6d134cea98609f38cea5011d9f16e2199a5b5730","sha256":"3cdc8768b77b752d62d488cda4d7917a5df5d334da0f7fa7c9f86aeae573923b","sha512":"46af6c4cc817db04827aa8f96de7710fd00922e8ff901e9296282f161f3335199e71a9ffc92d64283c667dc899434b8aa2565ddd6d602ce2450661b9b551c9ba","ssdeep":"","tlshash":"c5618e8cc5876eeb77a7036fb49b50147ed76cd2939eebc6600f901683c29a386741a1","first_seen":"2023-04-11T00:48:14Z","last_seen":"2026-06-08T19:54:18.454022Z","times_seen":2736,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}