{"report_id":"05341ff0-1078-4528-93c7-2d0a65cce1c6","version":6,"status":"done","tags":[],"date":"2025-09-03T18:44:30Z","url":{"schema":"http","addr":"bitowex.com","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bitowex.com/","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"title":"Buy/Sell Bitcoin, Ether and Altcoins | Cryptocurrency Exchange | Bitowex"},"submit":{"url":{"schema":"http","addr":"bitowex.com","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-08T18:44:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"lottie.host","ip":{"addr":"172.64.154.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-10-18","domain_rank":46478,"first_seen":"2022-08-22T00:10:05Z","last_seen":"2025-08-31T07:58:23.827967Z","alert_count":0,"request_count":1,"received_data":8406,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"bitowex.com","ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-21","domain_rank":0,"first_seen":"2025-09-03T18:44:31.743Z","last_seen":"2025-09-03T18:44:31.743Z","alert_count":76,"request_count":76,"received_data":2004166,"sent_data":36747,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-09-03T15:27:27.695589Z","alert_count":0,"request_count":1,"received_data":1128437,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-03T15:14:36.780259Z","alert_count":0,"request_count":1,"received_data":2415,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bitowex.com/web/main.5fa6f5ab58c66d59954e.js","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37e6c8c30a77963fa12045ccf64ff892","sha1":"a75771c078a858b53d488a623dff513dadd2f675","sha256":"5c169d7956f1782be2ab8604ac340e21168cf40c8be1b3ac7ff6bec6cb11a068","sha512":"b7dd8378066455e31d4c70a17d672cd40d9ad6114bf6e7241b22b9ba99aeac29b033b0bc4e319c0c6e0b3655d1763956d42ec1c0c942d3cf58a3cb46ac9c4adb","ssdeep":"3072:dDDwIuJOe10L9CZZrIx5IfUoDUO6w2D0EeH/2GwK+OQ8J0Il73AYQGusuTTEGQV0:dY1Zi4j2GwK+OQ8Jxl73AYQGFsmt18lf","tlshash":"99941a88f6d5b0dc93735134612f340af33f3a65650884f0f2b8a8a5595fa9de227f68","size":417062,"data":"","first_seen":"2025-06-30T14:28:31.88973Z","last_seen":"2026-07-05T15:56:39.039918Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/743.3bd8b706661122578b4c.js","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d929b4aa77bbbf23ad67b41c871c3fc","sha1":"bc32968717a664126bc7624c6d79476d03841e6b","sha256":"8a28fec90aea7e59d543559ec86ddeb0bb24273f2184ab5b2703c1931bb1827e","sha512":"29b68b74609c34c5ca8bddbf93e0ba55c77323f3898435c612d3fd610d2ff4c6b5d2cfb150d3484d79efa79aa630772786766092800ccb265f95213ba85aba90","ssdeep":"6144:7ZJOTEVtPbwhuFE61CtcMtT62YjXouFmhDE+ByXFyWPrqA0:7htPbw8Gvm0uFkF9","tlshash":"c7e430a2738427a6a64909e94029a107d0f6d42d302525ccfbf6f7d7f83d9a2f82d774","size":691784,"data":"","first_seen":"2025-02-23T17:36:35.640209Z","last_seen":"2026-07-05T15:56:39.080759Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bitowex.com/web/assets/user.032a7e4eccc29151ea8f.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/user.032a7e4eccc29151ea8f.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1842\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:29 GMT\r\netag: \"67474a8d-732\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AhH9sIxJ7FS%2FP%2FQ76E9jXaUTzE6HV4MnAUZySAv8XI55%2Br5aIlt0o13sgmEJsYSDu4%2F3iCfsCH2KYgbZgKHUISGkTwmFU0m2jVrk\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659bfdf16d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1842,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ce2403e4b3891ed2105c9abc3ec5126c","sha1":"0732243fd7c18fcb186ef2587ed863ebebe5c8e7","sha256":"2acc670bb677dcb2f7859f5ff174ce80e26435ace807a211e31e5dcfeb032289","sha512":"ec3c3cf93cadb9c224267c416a6ed91befceca81dbd31dbd9eb07b625716a231b541916cdec5be48029fdbc555188e1cd8b9412bb98e1391830fe7982b2e3dd8","ssdeep":"","tlshash":"32312b0bd41f5b4fd583f8684c2ff248ad12ba240aed326181ab27a047a15731e17a80","first_seen":"2024-08-19T22:55:39.116208Z","last_seen":"2026-07-05T15:56:39.093101Z","times_seen":37,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/error.e3510c7af78f977e7bf6.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/error.e3510c7af78f977e7bf6.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6666\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:21 GMT\r\netag: \"67474a85-1a0a\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nYQNd%2FpIojtM4%2BQ4KbKOmAAC6AikTnBMMRej689r5%2FLOX2yC7P7rJcAtFyh3UmISBIKVgWkXvcLk%2FAZv3wZnuEg3rV4J4SC7NqeE\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659c0e006d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6666,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a9773df695767dcad01e980616b15f09","sha1":"a75244e29484b89a7eacd1b548e95dd1154c0720","sha256":"7f9c0299cf7f92c7e8bf2f398c1acbd255373be527479baf622970c3bd980682","sha512":"8fcf44a9b687837ec31e617f4f5fbcb58f4c9e8bddcaef27f022f6908aed1773c5ea89643f86e99b45846e3ec82901bcb43b0b706473bfec9c32e98e8f59dd60","ssdeep":"192:HNaBtv3P1Uotl2Acc3kvPSwJynePam+hncXhobQXv+:H03ltl2tc0XWeym+hny+T","tlshash":"0dd17e56d112e3a4427e251dcc3179d89a4bae5eb24bcd05e14ba204cd1b096882bff7","first_seen":"2024-08-19T22:55:39.115572Z","last_seen":"2026-07-05T15:56:39.045803Z","times_seen":37,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/IBMPlexSans.9f2053ee915629980221.woff","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/IBMPlexSans.9f2053ee915629980221.woff HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XroARTVORdE%2Bcl3zifam5C69%2B%2B5lsMsKa91OYG60Q1v2EyHsiEZFAdtZCYNNuvw5ntbhPDIq4u53gwk3T5M%2FXMh3psb1EWexEeXM\"}]}\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Wed, 03 Sep 2025 17:19:40 GMT\r\nx-fastcgi-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-ray: 9797659cae116d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"048d68d71c6fee61f21710309ffa1385","sha1":"871f67e82c82f829a2e05f7ea179216fbcd3fe01","sha256":"bc9aafb4ce9f3dd84068d8d28bf375fd0f168863c21ec259ee38344bdd5298e6","sha512":"668da9b2202af7667191121992c100c8fdb64a1f08018f807f021052501f1c4a177e6b5a7aafe125e7148aa7dd759aef8df9b6ebbcb1cecc4784cedb29f40925","ssdeep":"","tlshash":"cff0c9972d13804d04005a96b479fb0ed5ceed647b93ac6078c85abe8c9cedd2c63048","first_seen":"2025-06-30T14:28:31.827217Z","last_seen":"2026-07-05T15:56:39.03125Z","times_seen":30,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/IBMPlexSans-SemiBold.be20edc8f3385060c0c1.woff","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/IBMPlexSans-SemiBold.be20edc8f3385060c0c1.woff HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VCyvaIRhWpXOCXrkm8%2B1m9zAyAeSjOHnxDdCQZsiSUl11EJpGG9%2BHoiNifLyA2k%2FO1THrxfqaTUz%2BaQmxQ%2FjtYK5KzSGHIaTBoi3\"}]}\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Wed, 03 Sep 2025 17:19:40 GMT\r\nx-fastcgi-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-ray: 9797659cae126d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"048d68d71c6fee61f21710309ffa1385","sha1":"871f67e82c82f829a2e05f7ea179216fbcd3fe01","sha256":"bc9aafb4ce9f3dd84068d8d28bf375fd0f168863c21ec259ee38344bdd5298e6","sha512":"668da9b2202af7667191121992c100c8fdb64a1f08018f807f021052501f1c4a177e6b5a7aafe125e7148aa7dd759aef8df9b6ebbcb1cecc4784cedb29f40925","ssdeep":"","tlshash":"cff0c9972d13804d04005a96b479fb0ed5ceed647b93ac6078c85abe8c9cedd2c63048","first_seen":"2025-06-30T14:28:31.827217Z","last_seen":"2026-07-05T15:56:39.03125Z","times_seen":30,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/IBMPlexSans-Medium.ec22ea3142b488f48c8b.woff","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/IBMPlexSans-Medium.ec22ea3142b488f48c8b.woff HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VY5p8DaMY304LZQPFe%2BrMsM2jOCFSno7%2B%2Bn01ABF0WEkmhXD1PtAbBQGRz9YXXVLh5H4M%2Bg3qqM%2FgQ4X8u3bTUE0ZJEqtWe%2Fwh6M\"}]}\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Wed, 03 Sep 2025 17:19:40 GMT\r\nx-fastcgi-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-ray: 9797659cce166d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"048d68d71c6fee61f21710309ffa1385","sha1":"871f67e82c82f829a2e05f7ea179216fbcd3fe01","sha256":"bc9aafb4ce9f3dd84068d8d28bf375fd0f168863c21ec259ee38344bdd5298e6","sha512":"668da9b2202af7667191121992c100c8fdb64a1f08018f807f021052501f1c4a177e6b5a7aafe125e7148aa7dd759aef8df9b6ebbcb1cecc4784cedb29f40925","ssdeep":"","tlshash":"cff0c9972d13804d04005a96b479fb0ed5ceed647b93ac6078c85abe8c9cedd2c63048","first_seen":"2025-06-30T14:28:31.827217Z","last_seen":"2026-07-05T15:56:39.03125Z","times_seen":30,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/main.5fa6f5ab58c66d59954e.js","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/main.5fa6f5ab58c66d59954e.js HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vIr%2FgZQVVB4%2F2ODUWAgZe80cdZ%2BqHJ%2F%2Bt0SFmfmqJ3kr0zdnU3FSQomWDmvADW%2BOf69ThozyXMXiFTKImf%2FHwY0ZikynW%2BXhaOcO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 27 Nov 2024 16:36:19 GMT\r\netag: W/\"67474a83-65d26\"\r\nexpires: Thu, 03 Sep 2026 18:44:09 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97976594cc9a6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":417062,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"37e6c8c30a77963fa12045ccf64ff892","sha1":"a75771c078a858b53d488a623dff513dadd2f675","sha256":"5c169d7956f1782be2ab8604ac340e21168cf40c8be1b3ac7ff6bec6cb11a068","sha512":"b7dd8378066455e31d4c70a17d672cd40d9ad6114bf6e7241b22b9ba99aeac29b033b0bc4e319c0c6e0b3655d1763956d42ec1c0c942d3cf58a3cb46ac9c4adb","ssdeep":"3072:dDDwIuJOe10L9CZZrIx5IfUoDUO6w2D0EeH/2GwK+OQ8J0Il73AYQGusuTTEGQV0:dY1Zi4j2GwK+OQ8Jxl73AYQGFsmt18lf","tlshash":"99941a88f6d5b0dc93735134612f340af33f3a65650884f0f2b8a8a5595fa9de227f68","first_seen":"2025-06-30T14:28:31.88973Z","last_seen":"2026-07-05T15:56:39.039918Z","times_seen":37,"resource_available":true,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/mobikwik.95c6327d3d81fd505f44.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/mobikwik.95c6327d3d81fd505f44.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 949\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:27 GMT\r\netag: \"67474a8b-3b5\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=79WiET%2BJ8oNa5aqUL2jS%2Blpc%2FYFDzgjS2PzKtxic6k8vnu30p4ftpaDbZbtCyyh2LviKa2Y0I2I1Cg5TtvWFzDLeGna4Eay2Ih%2Fn\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659a3d7e6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":949,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 25, 8-bit/color RGBA, non-interlaced","md5":"030a424dbc0bdcb747d621181100d2cc","sha1":"889bdec3216ef1ca13db7fb6baeeaf16690571a0","sha256":"784903df288c376616bd23cd9ccd1028968cc89579de33a2e89b65cbb54af1ab","sha512":"f744db60395d72ce5924640549e8afed83a468bd9d189f8e7577dc39039367543664e1119518927e031b94a34521f3b228df4a26e35c4b4c54505d9d4e58b17e","ssdeep":"","tlshash":"2f11c497aa9dd2a4c98e0027aa4bb1039a0dac4417a4a63923023e7b7ae80c75a44b54","first_seen":"2024-08-19T22:55:39.096423Z","last_seen":"2026-07-05T15:56:39.066119Z","times_seen":56,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/m-sardine.a4769595be458a8e95c3.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/m-sardine.a4769595be458a8e95c3.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 653\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:27 GMT\r\netag: \"67474a8b-28d\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SE0CgKJPpeO%2BWIXH3U2bOpTqnhoEFyl5vyPd2KDsP7PtfyQ0%2FtwKA7yVlueAC8hY1PQFKKgMUzdHFdbWdazKxwdHRT45um53YIK9\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659a4d8c6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 31, 8-bit/color RGBA, non-interlaced","md5":"e871b8f044a7faac11210e188b364274","sha1":"0ebd03809661d2946532f72d55c05ad075b6d99a","sha256":"cae7e6bb7bc09bcf7be9d5eba982260dffe922541e87bc35deafc7f805e57542","sha512":"4f4e67b2670e1613a253c7edb4644ef5d30f7796dd39b78156f8aac10f2d60f57f5b49f62950b7cd020d1e310e9b4cb977cb3fb7d2f2243ca3d41a1eaa84f08d","ssdeep":"","tlshash":"bef023de8e0d2c3d03b79032f25a4a08d976589ec391b8124773ac0a3456ec97d3e2d6","first_seen":"2024-08-19T22:55:39.103287Z","last_seen":"2026-07-05T15:56:39.062458Z","times_seen":57,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/images/currencies/s/bd7b6d7d.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:11.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /images/currencies/s/bd7b6d7d.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 505\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 25 Apr 2023 19:05:32 GMT\r\netag: \"6448247c-1f9\"\r\nexpires: Thu, 03 Sep 2026 18:44:11 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RuvgM1800FLoruLK3uLjFPtqIuP4qHK3GSrQGapng4wta48HRJpbonyAkmIRJONedvbHhB8cwmW8Cdhy3kvzuL1WJl5WNhkjaezv\"}]}\r\nvary: accept-encoding\r\ncf-ray: 979765a11e886d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":505,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGB, non-interlaced","md5":"34eb8ed79f2b56bab72aa6417154b8a1","sha1":"89042f338dab72a024948bf188aa78c21bb8bc45","sha256":"7b21ca5397fd139ea6a3fd6d62e75fb24ead705b64786d5a7a5ee7723499b4a5","sha512":"d3f1b059287fc830518036da3a73ceb3572a2298f2734cc3d63d6b16ee6e4c6d17e46fffad2d0afdab09c8bec3e03b1198be9a037cc332394194ced56fbb0724","ssdeep":"","tlshash":"67f075ee8e819ab4d10e287ab02949c67033a9bc332c478016c08124744fc48b3156e9","first_seen":"2024-08-19T22:55:39.125891Z","last_seen":"2026-07-05T15:56:39.064969Z","times_seen":57,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/IBMPlexSans-Medium.56adf7eff2eb278eece8.ttf","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:11.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/IBMPlexSans-Medium.56adf7eff2eb278eece8.ttf HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iYzRR%2FZcauU03iVeDPGuxDj4H3etVsflhQjYRL2SINSDjIKqKXas7p%2FXV0l8ra76CggecVp847YLXit%2BPYPH0DsZyQ7wNyOMtuyR\"}]}\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Wed, 03 Sep 2025 17:19:40 GMT\r\nx-fastcgi-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 979765a3bf126d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"048d68d71c6fee61f21710309ffa1385","sha1":"871f67e82c82f829a2e05f7ea179216fbcd3fe01","sha256":"bc9aafb4ce9f3dd84068d8d28bf375fd0f168863c21ec259ee38344bdd5298e6","sha512":"668da9b2202af7667191121992c100c8fdb64a1f08018f807f021052501f1c4a177e6b5a7aafe125e7148aa7dd759aef8df9b6ebbcb1cecc4784cedb29f40925","ssdeep":"","tlshash":"cff0c9972d13804d04005a96b479fb0ed5ceed647b93ac6078c85abe8c9cedd2c63048","first_seen":"2025-06-30T14:28:31.827217Z","last_seen":"2026-07-05T15:56:39.03125Z","times_seen":30,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/pix-min.902eca13d07c4e9f55a5.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/pix-min.902eca13d07c4e9f55a5.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 983\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:27 GMT\r\netag: \"67474a8b-3d7\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gglec3npAl7%2BQ0Re0OYhyuAp%2FFC3TFQ4M98kLfpqQ%2BVBwbjBE9uBsjOfUGKxHXZycslSlDO8OJsjOzbLukmAjIz5%2FgTly4b8ItIx\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659a3d816d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":983,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 24, 8-bit colormap, non-interlaced","md5":"e816609f9c890ba46c0e6cd2941d0f37","sha1":"97677f71ff343368b094bbe71c761946f4c63e0f","sha256":"7475ab06b503a7e0bbc4cb7cc3e228e640ffd91a7cde79890734168b52da79b8","sha512":"b1bfbe6a0669ee8eb03f4e85880653770da40e6b710d44bdc9103da7e42bf7bb56c3693eb5bd18b711cdb7898f4829eaedc93ab4a6d54a46ae44b5c7c45b6ae9","ssdeep":"","tlshash":"4311c8cca34fe8a0545c60f9007a75057ca673a720524c6de974c423373c066311cd09","first_seen":"2024-08-19T22:55:39.097663Z","last_seen":"2026-07-05T15:56:39.125453Z","times_seen":57,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/m-b.31a36725791158de270b.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/m-b.31a36725791158de270b.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 290\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:26 GMT\r\netag: \"67474a8a-122\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8%2BhyglWogE7or9Ez9wT8ZyxZ8JbzIuL1ze1Ker07BnsS2Yzj1qNosVNQWNHvXZM8MrQchpW6tXi79Hqk4qSj9cHRutqT1tBif2Sj\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659abd9a6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":290,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9d5d1dabf3ed1486381c059780abe642","sha1":"ccc65dead291b6824caef2fd73e060125a9db588","sha256":"47fe4ee4b507c886c5542cc5ed5693669aad7d2a9f8889ec76d629b400648a84","sha512":"f6fc97091b73973e91182848336898426dc8d2fb29c5aa36f138574b63f942b441e1e4ae0d2baf4333edd70969596bc46bd8ebb4cde2c104b1b78f8f621d172a","ssdeep":"","tlshash":"f8d0eba2e38808086b309ab88acc0d71cc623ae89481d7d338c03c9928ba601d00d0aa","first_seen":"2024-08-19T22:55:39.108301Z","last_seen":"2026-07-05T15:56:39.073414Z","times_seen":37,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/images/currencies/s/e2acd857.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:11.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /images/currencies/s/e2acd857.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 3962\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 25 Apr 2023 19:05:31 GMT\r\netag: \"6448247b-f7a\"\r\nexpires: Thu, 03 Sep 2026 18:44:11 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qHzEnX32T4IUmgb%2FW%2BhATl69owWwdIFrYbe3Dva19Bi%2FriCu%2ByoKChx%2FJ%2FHKALi4to8QBhFpSLU6rLydsdruWLFmq%2FhDlOmVSI9M\"}]}\r\nvary: accept-encoding\r\ncf-ray: 979765a10e866d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3962,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"2b2c8509d7a9c699f5249f4fd52579f2","sha1":"5960eea3e3dfb2dbe3af962edb097341f1add752","sha256":"8b448aecf28bb536e4fd66c8eddafc50fc8b338ed52585402bf06d75359080ca","sha512":"3b4f6f30f6ff3aa2f6072e1c9918ee771cd1cc537778be14c459ad516f6d846597a72141dff1e379859ca880141c8f2582727dd8686879abca9be547bc1c2398","ssdeep":"","tlshash":"41818d504beb1d40db064943ec794d389fa25867bedae07109cbb4109945f56c28b943","first_seen":"2024-08-19T22:55:39.121239Z","last_seen":"2026-07-05T15:56:39.082626Z","times_seen":71,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/mpd-btc.568f0b5bfe8a3b1cf311.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/mpd-btc.568f0b5bfe8a3b1cf311.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1330\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:27 GMT\r\netag: \"67474a8b-532\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gwfS1D7pJSEW8vwqtqAMj5mkQwm%2F0lRjdAEpBQwwRz6%2F2MGhYKNgPmIg%2BusO4n50X0t2jAh%2BdNsjvpACzbr5dXm0JGMp6xfHAyjr\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659abd986d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1330,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4d5f0661d0b22b19fcdad164455a67c3","sha1":"7eac4f6cf5670d0d417d7400af0d888635fff070","sha256":"d528a71069aef18ced7da7b0901bfe7c31f12001d6578d0068df2edb30a99eba","sha512":"431929e32bcb090e9c183d72c2f8d29e3b4495200dc2ec22b055cc028d068c1afc4e9c085da706c41eb45dd65b13f024a5286ce999bd3d4df3c680cb0675d800","ssdeep":"","tlshash":"f621d8a01c1399f5560b716f655661b0a124896a02d4d75e6292fb2e68a49c18ff0a08","first_seen":"2024-08-19T22:55:39.106193Z","last_seen":"2026-07-05T15:56:39.050131Z","times_seen":37,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/deposit-dark.232fcace609985ead5f8.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/deposit-dark.232fcace609985ead5f8.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1102\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:21 GMT\r\netag: \"67474a85-44e\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0SyoTr%2Fag%2Fsl1PfppgEDajsRWn2vOUjg2DREhoVqrk%2BJBiybMMUcxao1AI4NyUsHClqM8Awd7DAME676OQToExANOMB7RWj7T3wd\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659bfdfd6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1102,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 92x106, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4e992923e693bf8285f07f36b7a715b4","sha1":"23fac31dd3c4c8f990f1199077a885a51e8b0bc7","sha256":"e37cf8367878aedbe40f3eb0a32de6cbd3a8abb85dca859a39ed17568a582a7a","sha512":"f670ffdbf1837ca2b418a0a973c275cc2f99b5d40b36d7aa11ae7d2cca4d25e03b9a44a8954a64c01d1bc2e8672c67a2bbc5fa7286b798a7598cc4877035327d","ssdeep":"","tlshash":"2211b9a8d8410be094977d6457f956d118c731c40f1ce444ba672b1054aa3e1f60e62f","first_seen":"2025-06-30T14:28:31.874837Z","last_seen":"2026-07-05T15:56:39.063803Z","times_seen":36,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@lottiefiles/dotlottie-web@0.32.0/dist/dotlottie-player.wasm","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/@lottiefiles/dotlottie-web@0.32.0/dist/dotlottie-player.wasm HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitowex.com/\r\nOrigin: https://bitowex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: application/wasm\r\ncontent-length: 443693\r\ncf-ray: 9797659adc94568b-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.32.0\r\nx-jsd-version-type: version\r\netag: W/\"113381-mWkMy66B/YKVhRUUMP8ZIzhdDMQ\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-etou8220119-FRA, cache-lga21938-LGA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 190370\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=n5M5Q26FzF%2B%2FZd7Y%2FDWjiRHM0%2B%2BBZFS8eRQGZZ9FX0Fvxh%2F14ay1PEWKCbFeLKJ5646zE0gjZ%2BO91YmAd2dEzhqkgztLKWd1q57Nx9pmP8Q0ad6oWMs5sQj%2FUx%2BWhcbHFvY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]}],"data":{"size":1127297,"size_decoded":0,"mime_type":"application/wasm","magic":"WebAssembly (wasm) binary module version 0x1 (MVP)","md5":"c41339dea2d5506e8331cf3460343be4","sha1":"4eb48ed2031b61561773dc6c39cdfa40a98dec4e","sha256":"b6fe944e1b229f3e20364cfc41e23a58e1425d665c9b543696ade3c4cfc441ab","sha512":"42ce8907ad4e69aacd66a9ce75284408ef2d9bf7ddd5d064fc0535b250e25277c47fb554c777bd65ed50ec375e9e7c741cc5bcdc08fc2f1a8e2ca8ce0f9ee601","ssdeep":"24576:4+99UBZ4I/EkspR9exUeawsBiBCp8j+wpM6yb0S0ASvSxW43/fDGFqUgVDmTbEtx:Pqa","tlshash":"b925fb13b21aa969f000e8671a0dd5772b67d580b2a4b0b9df8d2aa77cffc057487770","first_seen":"2024-09-08T01:36:36Z","last_seen":"2026-07-05T15:56:39.098705Z","times_seen":50,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":13,"receive":21,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/samsungpay-min.6be24e529f3aac9f2d57.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/samsungpay-min.6be24e529f3aac9f2d57.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 756\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:28 GMT\r\netag: \"67474a8c-2f4\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0y2dvCQG9ZjNweABeUIOySBMxiimK403Dk7SGKtn5qQ6gPqTu46n5j3SZpK%2FadbZOippnkCl2GgaJihVbuD0uD8JnxI%2BBuF6kZHa\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659a1d776d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":756,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"abe0afa6c18376b35bd836370d06fdad","sha1":"5037b6caf8b1ea1e5ed0591efa66ae3a91791c60","sha256":"0ea0db6603fa4a69a4445483a322e3970ee99cd64761a688cb450f0964deadec","sha512":"d86fb595a49e634ffe47c61bbd5145df50f505c39c7df7b90d7c676f4804a62b7dd98463c21168bd7bb45f043202cecff3b6529a2d0fe5cbe058fcf5478af341","ssdeep":"","tlshash":"ac01252d93754171aa0654f0469f1d38e6ae757113b5e99116a4c0e919ce853e001b42","first_seen":"2024-08-19T22:55:39.092355Z","last_seen":"2026-07-05T15:56:39.090858Z","times_seen":37,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/n-simplex.e5916b0b80b022d5a117.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/n-simplex.e5916b0b80b022d5a117.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 772\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:27 GMT\r\netag: \"67474a8b-304\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0KkYTkQREbvQnACLaxsLInwM1FaA2Hbtv4E0QawlN%2BEbtc7nDN%2BmWBt9vTbCrpYCmQxqFg6vOtvgaU09JgtP6MYDMXzdCLWOnGAl\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659a3d7b6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":772,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 31, 8-bit/color RGBA, non-interlaced","md5":"4860290aaac9f5e327038861c0f7f2ff","sha1":"8362097705965d1f9cea6647bd5423d5703cb41f","sha256":"21a31a38c5dd4247332f9a29881d716b24a705ab164baffe061e47e34ac24bed","sha512":"0d090a4b1061fa0c36b345e19bd5c45e92f59f173d8f58db44e374568789e1a97783c6bd8a9aece3c6e8f1f02187adcf30efab0ee2ea0c3670def6014bf8fa1f","ssdeep":"","tlshash":"820170e20d10cafa006ec6c552229251e039816b9fa5014c1a8fa1050152c1fc69277b","first_seen":"2024-08-19T22:55:39.094433Z","last_seen":"2026-07-05T15:56:39.077826Z","times_seen":57,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/m-mercuryo.7710f67810c7342e9efc.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/m-mercuryo.7710f67810c7342e9efc.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 872\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:27 GMT\r\netag: \"67474a8b-368\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nDjXGat2x2BsX3ccxKDxPaI%2Bvab%2Fao7OQ%2Flg2ryrXZS6ZgnZHTSNqgai3CQ3s%2B7sYtlAvdz1xn179Xqu%2F6mgbYNmXA1lw2aZvfPY\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659a4d896d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":872,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 31, 8-bit/color RGBA, non-interlaced","md5":"17d3d7c8e2ef88d6a1d1720c32cd9aee","sha1":"ee303b8a18fd6db19fb9ff2702f46a105e40e02f","sha256":"bf7e574aea52d79064adeef0bb383abe1963271a41807e98afc42ade0d4f76eb","sha512":"c2c91f867a5bfe7a36edb22818d0650f89fe078ea894cea5b58d9e2b74a1a04bc317f6004f8a72c3ed8b180fc8162b994cdf416825700e91315bdb9a2c49ebc8","ssdeep":"","tlshash":"af1196fb2a5e1a7cd0acbb7568228744f18b5d8906a900516a52b810838b0664b67382","first_seen":"2024-08-19T22:55:39.100415Z","last_seen":"2026-07-05T15:56:39.108475Z","times_seen":57,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/images/currencies/s/395f877e.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:11.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /images/currencies/s/395f877e.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 3150\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 08 May 2024 03:05:54 GMT\r\netag: \"663aec12-c4e\"\r\nexpires: Thu, 03 Sep 2026 18:44:11 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9w4th1KrBoZ1IA9yPGbVPm910mzq9Xs5YlzCeNYxxOlRpPeELJy15AtdYhK4OCOW7TxNkWFzsOanHmJ7kENKTIwxtU41k9V7E%2B1g\"}]}\r\nvary: accept-encoding\r\ncf-ray: 979765a11e8c6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3150,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"50cda183020bdebffe4d8145b4c059d9","sha1":"c2e930f2a32b6cdc25e2e2086e73b69de9f02375","sha256":"ea9f80508c4ad5252f9a615509ec1f5c2921caa0cc4dc1b76a6cec99c6e0ad3c","sha512":"2879ce06df48cce28dfd590149c2433412ae12bd0d015fdc5c11ffb446b2cb83e336a85b17b855b9b93c017bc871c2ae0d70745f207481dc56ef6b32e5f96f1f","ssdeep":"","tlshash":"4d515c5a2e58a7828084bdfd434553a25665aa207787eaa2c330bcd16b3351c60b3fcf","first_seen":"2024-08-19T22:55:39.123657Z","last_seen":"2026-07-05T15:56:39.05771Z","times_seen":57,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/api/spa/_/translate?language=en","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /api/spa/_/translate?language=en HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-API: bitowex.com\r\nX-Lang: en\r\napi-id: MTc1NjkyNTA0OTc3M3wwLjIzNTUxMjI5MjYzNTcxMDM5\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WkQHa8vhh9yZWc4CkhyeXGLwj%2B9n6UjH%2BmC6HFGt%2FISs0aRZrW%2Fa26CTkLVk0j%2Bm%2BuJ0fD0DNZ5JlXksvlcCoVR50AmHszhUkoQd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Accept-Encoding\r\ncharset: utf-8\r\ncache-control: max-age=600, public\r\nx-fastcgi-cache: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 979765993d326d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26988,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e71aecdfca2108feb92bf735ed2b4254","sha1":"7336714563c7bd089d712e045b66176d91b8c294","sha256":"5212b5f45f99719d70389136cdc57447a76c390b839f494429a3eedbc4ebc161","sha512":"308398c5217d6e2dd0b465fee2d98beb4122f7a769d378d7874e7a561aefb5c8a48019e1212b0d6984a91109f6551ec8492e87f610185e3d3f50803763b7ca36","ssdeep":"768:hBECieeaWtiHaFUxZVAkOXmLRTuNdS8u9uqwQ0xAMCFGc:bECyaWtt0VUZIcuMC5","tlshash":"18c2a64ad2407b6d8e9172d1374ad9e939bfb6c4bd03f1a0448a407c22e563cd66b7b3","first_seen":"2025-06-30T14:28:31.868407Z","last_seen":"2026-07-05T15:56:39.081493Z","times_seen":55,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/m-onramp.0d295364e4acddaeb264.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/m-onramp.0d295364e4acddaeb264.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 725\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:27 GMT\r\netag: \"67474a8b-2d5\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yQJ4MrzkpYvI1ROJZdcluHyPX2AJhkjCS65ACZw590hXCFWRIA8PhbW9AWCyaqVn0Xh1dmcXgYHiP2Kql2YaVz7z9THgjqgZuZl3\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659a3d826d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":725,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 31, 8-bit/color RGBA, non-interlaced","md5":"a5e8a3b66813095d2c8f84aba6cc3379","sha1":"fbd6b84b370da0d35e86efcf527b484ecc144d72","sha256":"47ed4c4a3ee32ca75aea54c5cdb411f0f890532629d47ae4f512589f6a05d9e9","sha512":"987c5ed562a16fd13d3e9f4e2cff1b1ee1cfcdce3e2ed1e50764f9469efc94d2a66ed7772682d029970bf4bdc77d6debe90a7124c8cccaaecafd351d1cd22aa6","ssdeep":"","tlshash":"4b0165dea9e05bf90d5c35b0a3d509f955e538dc9e49b0860a874220016dca02651f66","first_seen":"2024-08-19T22:55:39.129741Z","last_seen":"2026-07-05T15:56:39.078629Z","times_seen":57,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/spei.d3dab82536d11c16b9dd.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/spei.d3dab82536d11c16b9dd.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 981\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:28 GMT\r\netag: \"67474a8c-3d5\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SNrXzXGvxdygPVT7gr7A3mV2kDeRu7h0eOj2I%2FJZd%2BXp36zgkiojrogXLs7MBv8b6PK%2FkaYJIJJ%2BLnK47MCxkOrX0lFX%2FyjjeZZ0\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659a4d866d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":981,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 24, 8-bit/color RGBA, non-interlaced","md5":"0cb4042864ee8404906ab14144a6f529","sha1":"516037131850fbe7c714a6213e2c7b0627be1ef3","sha256":"17de4da8e0d3c4dee38f1d2cc949d76215ba68a3b1d82775e9370b3b50f1649c","sha512":"63dbaba8ab8217c3ed423f90e34231cf36279c27e2d32fdb2615de724c28aa404f6189886f912b2ee15abf56dac70642418c5060b931e8b79bfd22f37d79950c","ssdeep":"","tlshash":"d1110c92d6e6d737132c1660515fc5eec2a3a78c1808602c3f7c4d051e854c5113f7f0","first_seen":"2024-08-19T22:55:39.101131Z","last_seen":"2026-07-05T15:56:39.060274Z","times_seen":57,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/IBMPlexSans-Light.6df767030da44b67fb7e.ttf","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:11.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/IBMPlexSans-Light.6df767030da44b67fb7e.ttf HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TPiBERcLZymeEHyqSgKWiXoVeqpQpoWszXwR%2B3q%2BC3beb0FJT6%2F8kbkOB4qWvZiVcMyxokM2gS7on3fNCrgH%2FV75g8LrnPX%2BcIUb\"}]}\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Wed, 03 Sep 2025 17:19:40 GMT\r\nx-fastcgi-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 979765a3bf106d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"048d68d71c6fee61f21710309ffa1385","sha1":"871f67e82c82f829a2e05f7ea179216fbcd3fe01","sha256":"bc9aafb4ce9f3dd84068d8d28bf375fd0f168863c21ec259ee38344bdd5298e6","sha512":"668da9b2202af7667191121992c100c8fdb64a1f08018f807f021052501f1c4a177e6b5a7aafe125e7148aa7dd759aef8df9b6ebbcb1cecc4784cedb29f40925","ssdeep":"","tlshash":"cff0c9972d13804d04005a96b479fb0ed5ceed647b93ac6078c85abe8c9cedd2c63048","first_seen":"2025-06-30T14:28:31.827217Z","last_seen":"2026-07-05T15:56:39.03125Z","times_seen":30,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/main.dcf2967b39ff44fe303f.css","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/main.dcf2967b39ff44fe303f.css HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:09 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DN6%2F%2BLAC4riK9Lg0Xp3lbFhcQyVl%2Bk9K9rsRv2CHpGjSTt5fDSrtiGXOuT7MCWaFeRWY0B9Rm41d27sQhVb%2BqvyinwsPlmW48Dch\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 27 Nov 2024 16:36:19 GMT\r\netag: W/\"67474a83-27b94\"\r\nexpires: Thu, 03 Sep 2026 18:44:09 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97976594cc9b6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162708,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65409)","md5":"7284a4dc088336f64ed97390a1ce80a2","sha1":"185b51211f85ce8061c88167cadb64581869f5a3","sha256":"eaca4a66a4439be75d0014b281983ac0e45e445a909245c44d9d55c7d64b6567","sha512":"b1265343045f6b8ad25526a31338017005ae29d3706e6f175038a94558a2faf1de287513b70530ab2669bfbeff14c93a0b364f87e7fa99a8776239794d8f66da","ssdeep":"768:OtBtnUeHuGkDumwdgCdJPNPlL3P3J+i41ZjndNIEfI3RYMHTRNQyXGBXJv7qSBX9:Oyw9mwLkBXJv7qSBX7YdmVk8yDSKufr","tlshash":"1cf3f6702262b03cf937daa2b7d0ae9db019d202da7382edd6956178c5cb2e7173175c","first_seen":"2025-06-30T14:28:31.877498Z","last_seen":"2026-07-05T15:56:39.105829Z","times_seen":57,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/IBMPlexSans-Medium.bb6bb1b56ef163ca467c.woff2","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/IBMPlexSans-Medium.bb6bb1b56ef163ca467c.woff2 HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I0W71K1MY3yafLA19IAOxCP7HTM5wpi9muaN5Xuga881hNq7p1317%2BkTwUHOxu3V0N1LZ2sl3C8znDBIUwBkjmrUrndpLIOPwn9V\"}]}\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Wed, 03 Sep 2025 17:19:40 GMT\r\nx-fastcgi-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-ray: 9797659b1dab6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"048d68d71c6fee61f21710309ffa1385","sha1":"871f67e82c82f829a2e05f7ea179216fbcd3fe01","sha256":"bc9aafb4ce9f3dd84068d8d28bf375fd0f168863c21ec259ee38344bdd5298e6","sha512":"668da9b2202af7667191121992c100c8fdb64a1f08018f807f021052501f1c4a177e6b5a7aafe125e7148aa7dd759aef8df9b6ebbcb1cecc4784cedb29f40925","ssdeep":"","tlshash":"cff0c9972d13804d04005a96b479fb0ed5ceed647b93ac6078c85abe8c9cedd2c63048","first_seen":"2025-06-30T14:28:31.827217Z","last_seen":"2026-07-05T15:56:39.03125Z","times_seen":30,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/gift.9a8fdfde80fc75e18b67.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/gift.9a8fdfde80fc75e18b67.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8678\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:22 GMT\r\netag: \"67474a86-21e6\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eh3PUJbLiVwkkIVb6RkU0u2n8%2BsGqmYrgkCvUtHS3ezPOmCvyPe6rmo38wG9KyM%2BWDxUhLWEvS1CzHUxePPxsTaQjAolKFeEq9%2Fl\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659c0e016d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8678,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a8db38ac73605fd309f12f18d9dbca4f","sha1":"fb73b259124226ebf85ee3c151d107fed3207baf","sha256":"74b1265e9f07a8a82e8a53bb0def454902e3e925eb8f0bdd5252a7972a30b200","sha512":"02f314747625105e5a9405de633c11a6aebe68d943bc198376dfe4fba79f74dc02ce751a64887b550d4e8a237cef33c0949c97bad003bc99ae7e423321db250d","ssdeep":"192:DAAIJ9lCuvQgsT7ZwxBFiYdNDB7bn2z9HV91tlt:kAIJ9NtsOd//2VTlt","tlshash":"8c02af8e1ab9067ffa7ddec1a57b0578a5c3c42134c29ef4dd76ac214350a5034e192e","first_seen":"2024-08-19T22:55:39.116947Z","last_seen":"2026-07-05T15:56:39.048042Z","times_seen":37,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/wiretransfer.3fc68e27c5ae2fb0c9ae.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/wiretransfer.3fc68e27c5ae2fb0c9ae.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 628\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:29 GMT\r\netag: \"67474a8d-274\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ebTHr0MNJJXd3%2ByyTXmCDAE8e%2BImBBc5lpIzS7aoMFX3e%2BAZTzZEo7IDyqDOfeoMojoo008O%2BLxEghm4T40psW%2Fo%2Bw5emUnNVzz%2F\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659a4d8b6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":628,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3e0823fc3a1eb3b798db90188d420066","sha1":"02835210547b5798c38bd68b4156d985288d94da","sha256":"761c8a099f4ff6ed30d1a77e7cf74b654ec86b8bba39dd49c48d41140db8f879","sha512":"90ab2b42ff8d60b72dfaca9b5aa8d484d9f6c626528d81d8975c2c738c4c926becf3085ebef7eccf491d058bffc19d7552c8eafb30d10078effc5eeb719c2ff0","ssdeep":"","tlshash":"3bf062fd49acbe11e7dca86c846f059c2f32764a03b1723498493db89b6514891a1e9e","first_seen":"2024-08-19T22:55:39.104748Z","last_seen":"2026-07-05T15:56:39.127526Z","times_seen":37,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/fast.eb019ad670eca0686130.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/fast.eb019ad670eca0686130.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 656\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:21 GMT\r\netag: \"67474a85-290\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kfdOfOMuLcrzBRa8t%2BgReODeiAS2JoC%2FlV7LseXVGIWAWJtsIlvFsOVdd10gwHGqXrAFqwHY%2FEm0xyZ3Dztqg989AWZw7qirwk3h\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659a4d856d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 24, 8-bit/color RGBA, non-interlaced","md5":"c04115d1a3dd19352f0447746bb9a884","sha1":"9d9b4f922b03a378a09607a6fc201d3d3d2cb00f","sha256":"f5c69351a5fb179e18841735cb33fdc073dd38e59b12265eb3ce6887503c654d","sha512":"b29b9001a4bbe68acc67dad60c612c20569750ae642b6ea131f610af34ced6f4881fa8704068e6d7627396853aa15495513ff549560f8b43871d5ac9e4c89f98","ssdeep":"","tlshash":"0df083be230cacd8916f4f3ac97bda6419bd2ff8100c500c7000c4281aa2c5d64c6601","first_seen":"2024-08-19T22:55:39.09968Z","last_seen":"2026-07-05T15:56:39.068065Z","times_seen":57,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/m-phemex.26ad10e59925cf82a57e.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/m-phemex.26ad10e59925cf82a57e.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 540\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:27 GMT\r\netag: \"67474a8b-21c\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S4lxvLMBb0SaNxealZF0J4hK4dd8PHcdW4pLQMAdCILHfTOapaY%2BttGAiDi4GA6TYDAzSYUQ0wbt3Aq2AwzjFUNkTXRdVbx2%2B4Db\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659a4d8a6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":540,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 31, 8-bit/color RGBA, non-interlaced","md5":"494d0514b7aab4e5f3e615a017efc38f","sha1":"d265a72fb20b2c58401cc55ea0f54df1169eeab0","sha256":"06cf9375c4b2bfa841e1838cbbe702fa8ac1e85e0b1c689b6b3712802d5df4bd","sha512":"7f456c18819a07398199bbcaee0a1efe948789f70ec9a0a61b6d82ffe487c2161be8057971517d23957c7235506a40cb1edf9d3850ebd721adb676623ab38a7d","ssdeep":"","tlshash":"08f026f07b0768dbb95e8516124ec241d629e86bc301a85b1c52a71555563405944f86","first_seen":"2024-08-19T22:55:39.102432Z","last_seen":"2026-07-05T15:56:39.110661Z","times_seen":57,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/mpd-eth.e5ad21a04b559331dc50.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/mpd-eth.e5ad21a04b559331dc50.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1164\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:27 GMT\r\netag: \"67474a8b-48c\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ECjaeltYD3czUgCeeyP6iezmSLV1dGb%2F5R%2BEHy%2Fd7%2BZ9o4bL4cldq2QaaP3FusutzvnLQg5DbLIrpMjS6LQSTZkk5e4uT7RdoU2x\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659abd976d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1164,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"743a5853ba9d64f5886243656bb65e6c","sha1":"4edd3c053fa0d9477fa6d062b5837a4b5a749f96","sha256":"1c967171f867584dbf6b522f619409e99d345204535f505d5bbc89fc31eeb59c","sha512":"bcada85c1d435e55b3bd8e509267dc6630383e53d12aaa3d3655f6b6db8a2bb5336136454aa4880dadccf371f8fd6801051e98042e60eb14b5d87f7b489c6315","ssdeep":"","tlshash":"a7210a67af2c64f0a35054f9ac5cc2401c64840a96158ba0dac22a05d02e6317e5dc9d","first_seen":"2024-08-19T22:55:39.107531Z","last_seen":"2026-07-05T15:56:39.07233Z","times_seen":36,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/withdraw-dark.3b6f4d9fb67d7a7eefe5.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/withdraw-dark.3b6f4d9fb67d7a7eefe5.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1144\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:29 GMT\r\netag: \"67474a8d-478\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mq9Hiu0%2BqDNAkB3q4BD%2BvYK4mI1IOT1UrLrgItcu6CfguQ4SDnxPYimW3D7FY08G8iktksz3oU6c28R%2BVbJ0S7JqeEqJNpMhjWPN\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659c0dfe6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1144,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 92x105, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"88c9d2ffd94ef1ba3f07c8ada5f57454","sha1":"0adb3080ca66419c0d7fc497ff5511400ccdb67d","sha256":"edac1dd0944eecf065e1666cf9e87531410ead804a410214d81ec4802ab0a390","sha512":"07a6693b1fbf4dcd85eb5a3a4c2f224ab7f3e8286fa8f50839186e6d9bc32e6ea8581153488d0afca25befe9ef0cba8acbb3de46f90dcd4413aaecc8aac6b288","ssdeep":"","tlshash":"5321b998d07971a4277d41fb5de9c6e2c0705a7c192d6ccd3543057c039682bd558849","first_seen":"2025-06-30T14:28:31.871581Z","last_seen":"2026-07-05T15:56:39.07443Z","times_seen":36,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/images/currencies/s/5cab691c.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:11.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /images/currencies/s/5cab691c.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 4435\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 25 Apr 2023 19:05:31 GMT\r\netag: \"6448247b-1153\"\r\nexpires: Thu, 03 Sep 2026 18:44:11 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lP5T4sLOqAft9D1D51Yky3qK%2Fn4rNCHpCbK4FQHSFSGHV%2BGyoDd0JwsNULpuaToXXxitRbz0KUocBbdHPRGE2MJ63HyxImSBe3WE\"}]}\r\nvary: accept-encoding\r\ncf-ray: 979765a11e876d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4435,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b7c5c893939873015be0673f9fa98a82","sha1":"a16c0273f4dad92fea722af4e7591ec6850dbd7b","sha256":"4d89493e2136a102c1e9447fd3d6e0c8753a93dd0bed218a88ef655a5c225895","sha512":"92998a52f2ed726aa017f43f14ca0f4124d4b638fe60af50a6975d15e5817ffdc31302fcacdb6b6b7523a47d373ef7d22be8501c9f6841219b93c831bf267c5c","ssdeep":"96:DSx9Gi27S4a6MjjLGSF1lHkjMmpp+l5aroeq5gR0dYDKbK0mke:DSfGua4LGAbqMmb+l5oEx0KFve","tlshash":"4c918e9e66e80b71324ed3201148ce99a6bd8d5b8d8a054d077acc213c2c86991ba3c7","first_seen":"2024-08-19T22:55:39.122228Z","last_seen":"2026-07-05T15:56:39.049125Z","times_seen":71,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-03T18:44:08.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 18:44:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Wed, 03 Sep 2025 17:19:40 GMT\r\nx-fastcgi-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CM8nr5gDmx7eHJTQqXS%2FGo%2BsmcCOhTYEIKH5ccvUH9SNek7hIc6B2PN6HmuaAP1dzLlxrLtAVwP7nwhKefYQNbWV%2FsoquzUmZw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 979765928aae56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"048d68d71c6fee61f21710309ffa1385","sha1":"871f67e82c82f829a2e05f7ea179216fbcd3fe01","sha256":"bc9aafb4ce9f3dd84068d8d28bf375fd0f168863c21ec259ee38344bdd5298e6","sha512":"668da9b2202af7667191121992c100c8fdb64a1f08018f807f021052501f1c4a177e6b5a7aafe125e7148aa7dd759aef8df9b6ebbcb1cecc4784cedb29f40925","ssdeep":"","tlshash":"cff0c9972d13804d04005a96b479fb0ed5ceed647b93ac6078c85abe8c9cedd2c63048","first_seen":"2025-06-30T14:28:31.827217Z","last_seen":"2026-07-05T15:56:39.03125Z","times_seen":30,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":37,"dns":9,"connect":1,"send":0,"wait":204,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:22:25 GMT","end":"Mon, 03 Nov 2025 19:22:24 GMT"},"fingerprint":{"sha1":"05:AF:87:21:D4:6B:A6:86:ED:A7:D2:07:92:06:E4:D4:79:84:27:E8","sha256":"F6:EC:75:67:99:66:34:CC:0C:0F:9D:D7:8B:6A:04:94:98:0C:7B:B5:47:E2:47:37:A6:F8:E2:08:99:72:AB:BE"}}},"request":{"raw":"GET /css2?family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 03 Sep 2025 18:44:09 GMT\r\ndate: Wed, 03 Sep 2025 18:44:09 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1729,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"800257054702d2030dd8373918177849","sha1":"09180528ad5af0fbb2a3836615c3c24e616d49d3","sha256":"46bcd5bd83f68447eb4ec2438e389817d252e41580caaa01fea21743e6a0eaa8","sha512":"aad2cc72767b7bbc01d18430b6ea39141abf776e4996e2bb9761d6b0d860871f0a05e146321cfd56b8142328cd58e1c3d4189b8afc73f745c2776c811f94e6b5","ssdeep":"","tlshash":"f931dd81087b6114eb972dc122ce7e32ef1fa19064549878bbfe1898fc96c2d5371b4d","first_seen":"2025-06-02T21:31:17.48416Z","last_seen":"2025-09-11T14:10:20.197976Z","times_seen":388,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":101,"dns":1,"connect":28,"send":0,"wait":47,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/upi%201.0dc9658005d1daefa490.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/upi%201.0dc9658005d1daefa490.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 895\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:29 GMT\r\netag: \"67474a8d-37f\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jteBNlvvFrn%2BbOiUbVEsDUHgRUHHYGpggRpLZJ1ExiCZFP%2BVDPEgt2hGuuYFIt4sus3J1Fm35QpOWFRQDYT7om426IwVhJDGxvd2\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659a3d836d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":895,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 24, 8-bit/color RGBA, non-interlaced","md5":"d8de50224bb58571978cfd7149162a0e","sha1":"bea8cf80a7a6ef1a1a0092ec6b28ab43f06c9da9","sha256":"d403924817cfae4f12b1a1f881390d316979e8494ecf1c33200874a2907c9ad9","sha512":"12dc5252d924967207271c08bf80f5b2500eea231b3048252cdc5e1fd2971fcf83b76c75c52d03ec13f066c71981333de6453ac7615911be0b123537076821a2","ssdeep":"","tlshash":"4811b7db22a7a0730b383e5a0355e340ae4507458e42288ccc6674445238b7405e12d1","first_seen":"2024-08-19T22:55:39.098952Z","last_seen":"2026-07-05T15:56:39.101839Z","times_seen":57,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/part-bg2.37252da6fbff13395c4d.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/part-bg2.37252da6fbff13395c4d.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 39528\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:27 GMT\r\netag: \"67474a8b-9a68\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KEJ0k28ENgeZStw9DpLt3hosy3kPxfomqEvVb7j%2Bi0WgBAidTFNc0jeyzG5Z6hEa1XPqiIbQILcb7Z53FoGbLMxWwtXFyABh%2B%2BDv\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659acd9e6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1360 x 320, 8-bit/color RGBA, non-interlaced","md5":"cfb023d77dae085238931e3bdd8099aa","sha1":"edb62c1f13fbe1aca8569f21c9f880146dd9c417","sha256":"f44852807af10b913177ae88e64cc52a0e019bdfe1f2f5bfdb1203abcdf3a7ee","sha512":"8334724449ffb6db608625caac9f1bfc4991dba44a1ca251c6658f7a695eae0e630b53430728dda48ef3cd7aa915c264e98a42aa907d38a97f7e6c03ee245ce1","ssdeep":"768:m/WvM0fuSqRK2Lut1+AV4/wReD1FnTAdNuQFiXn/:KWvM01JhPVV4I4DL1QFiX/","tlshash":"d903e15d70d1e230e32782b3bfc45892fe208f7586f61ce6c8c7447e89a161e34ad559","first_seen":"2024-08-19T22:55:39.108984Z","last_seen":"2026-07-05T15:56:39.076936Z","times_seen":57,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/IBMPlexSans-Light.f1a87b33e4188494f66f.woff2","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/IBMPlexSans-Light.f1a87b33e4188494f66f.woff2 HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JNT50K0WzJemARL%2Baz2cUJU7JUc%2BQnlxUbg4zKIBTNApWQfw%2B553nE9mRd8F1JQ4agtFzQ8wFeeMhhYNeiQ2DpAQVfzXZ5RtFdr2\"}]}\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Wed, 03 Sep 2025 17:19:40 GMT\r\nx-fastcgi-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-ray: 9797659aeda66d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"048d68d71c6fee61f21710309ffa1385","sha1":"871f67e82c82f829a2e05f7ea179216fbcd3fe01","sha256":"bc9aafb4ce9f3dd84068d8d28bf375fd0f168863c21ec259ee38344bdd5298e6","sha512":"668da9b2202af7667191121992c100c8fdb64a1f08018f807f021052501f1c4a177e6b5a7aafe125e7148aa7dd759aef8df9b6ebbcb1cecc4784cedb29f40925","ssdeep":"","tlshash":"cff0c9972d13804d04005a96b479fb0ed5ceed647b93ac6078c85abe8c9cedd2c63048","first_seen":"2025-06-30T14:28:31.827217Z","last_seen":"2026-07-05T15:56:39.03125Z","times_seen":30,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/IBMPlexSans-SemiBold.aa898056e8ad8de0c170.ttf","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:11.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/IBMPlexSans-SemiBold.aa898056e8ad8de0c170.ttf HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FKQKydoHG92WoSjlkHbvKtGvDn6DwcgYtXWWcTrgQ7LA7EEtZlJFHUz9B0GZ7AGUxEndnvfTtqDW6WbG6sTjdsV4K373imruo%2BWL\"}]}\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Wed, 03 Sep 2025 17:19:40 GMT\r\nx-fastcgi-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 979765a3bf116d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"048d68d71c6fee61f21710309ffa1385","sha1":"871f67e82c82f829a2e05f7ea179216fbcd3fe01","sha256":"bc9aafb4ce9f3dd84068d8d28bf375fd0f168863c21ec259ee38344bdd5298e6","sha512":"668da9b2202af7667191121992c100c8fdb64a1f08018f807f021052501f1c4a177e6b5a7aafe125e7148aa7dd759aef8df9b6ebbcb1cecc4784cedb29f40925","ssdeep":"","tlshash":"cff0c9972d13804d04005a96b479fb0ed5ceed647b93ac6078c85abe8c9cedd2c63048","first_seen":"2025-06-30T14:28:31.827217Z","last_seen":"2026-07-05T15:56:39.03125Z","times_seen":30,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/en.97dad0732ba6ff4485ab.svg","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/en.97dad0732ba6ff4485ab.svg HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9NbGViHUyKo86vouJx9igU7g6jFbXFbi2ggFt%2FeKA7%2FLVTaBRvDtVQI5%2F9RSSS5HIBioEVuS5LHPoYwvPQR2TTv%2Fl898TNOsTftl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 27 Nov 2024 16:36:21 GMT\r\netag: W/\"67474a85-3dc2\"\r\nexpires: Thu, 03 Sep 2026 18:44:09 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 979765997d3c6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15810,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"25ca7a0462e20d1bd351c275b5289ed6","sha1":"b14224389998d472b9b9c30bae14545733325334","sha256":"e0d3fe2e62ec67c66a23f4e942a951b5993fdc52a0bf96bd613b2d65016a4dd2","sha512":"b9285b0c55687f428718e1f9de328710a3d33807694784577b047ecf0a0a0569f215ed70180ba231a5b2c723e88c680db602f0aeb48c263daa8d83f10f63621d","ssdeep":"192:O7kb3r9mPWXVM3vOEtC0BiA9c3xrlQ2pcLeccIchG6B4YmmbzAbOCINR0tVGNoy:UVe","tlshash":"82623aa507f898916d5d03b8c73f2bd2705958efd680cd49725f6ca46f42fa42e2cac2","first_seen":"2025-02-23T17:36:35.633768Z","last_seen":"2026-07-05T15:56:39.051599Z","times_seen":56,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/applepay-min.11671a6ba0b35458e8a4.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/applepay-min.11671a6ba0b35458e8a4.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 834\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:20 GMT\r\netag: \"67474a84-342\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OlMibyRHjPR7o%2BMZK0jmwH1I3ZS%2B%2BAopVfwemtEs%2BPAmEdDOPStVXDKHHYSO2kCcLY3rhzokMNHCfqZF0%2Bdn9SSBLwP6Ta3ZoHRe\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659a2d796d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":834,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 24, 8-bit colormap, non-interlaced","md5":"f4ad09dbcccc65c11c4de14de41f1ad5","sha1":"8117008ac01a9c15754e0142bfa08ea5c4910d53","sha256":"a7249103dd20a9675bd8db35631341595f18770789cb093bf7d97ba207e4be1f","sha512":"3a5b32221ba5712736e3bb822ada53f0eca78af7a4214b6e55968b8f01d83f575f26c31a40874a55d6c092640ae7195d671fc54b83445f34c0d1102104a497c8","ssdeep":"","tlshash":"eb0186dc663cfcdba4792793944fab6b4edda0d8f0907104743958106fb8a098aad4d1","first_seen":"2024-08-19T22:55:39.091714Z","last_seen":"2026-07-05T15:56:39.123326Z","times_seen":57,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/imps.7c81e3d3114b6d346c2a.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/imps.7c81e3d3114b6d346c2a.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 588\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:26 GMT\r\netag: \"67474a8a-24c\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YhjAVxXuB5%2BHNcfbxbbLWFIrquadJ0e8%2BUsxt4SL%2BOcd7dSwnFuQM2Tq5IVuMDIMZspc99hMhM1UUk7wiE9YP%2Bfjqf4rJAAAyzO4\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659a4d846d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":588,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2e7602ec7da43c7b62451b2b424e5249","sha1":"b2f8b8e537b251b4102104fc377ce83236c78f91","sha256":"006062a2edd264467fc5d96ac99d67f1b8eb2bf357a2a743b4184ce8cdadcb00","sha512":"58a3b8abe1a5eca0583dd65f233b537ad5badbf8eb9c33a13db90e59e9a59ae76d0f485556059f7df81a3daed936d9ff390ca268f94390d0f341eedc82fa49b9","ssdeep":"","tlshash":"04f096478f4bd0c9ce13647f53433605b142b8be3c515fb9004448f1b053a6d967a1d4","first_seen":"2024-08-19T22:55:39.095715Z","last_seen":"2026-07-05T15:56:39.106943Z","times_seen":37,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/IBMPlexSans-Bold.0563a80e82efbad172ff.woff","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/IBMPlexSans-Bold.0563a80e82efbad172ff.woff HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K6gHyB5xKKmOdZlY8MGoh0n%2F8z8ovMX%2FuR8nNl2EcCySx1BVHkv8oMlUY0B8JM55h2Eg4ZehDRGSSJb5UbKY0NCgKshW5AFltJ%2BS\"}]}\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Wed, 03 Sep 2025 17:19:40 GMT\r\nx-fastcgi-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-ray: 9797659cbe136d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"048d68d71c6fee61f21710309ffa1385","sha1":"871f67e82c82f829a2e05f7ea179216fbcd3fe01","sha256":"bc9aafb4ce9f3dd84068d8d28bf375fd0f168863c21ec259ee38344bdd5298e6","sha512":"668da9b2202af7667191121992c100c8fdb64a1f08018f807f021052501f1c4a177e6b5a7aafe125e7148aa7dd759aef8df9b6ebbcb1cecc4784cedb29f40925","ssdeep":"","tlshash":"cff0c9972d13804d04005a96b479fb0ed5ceed647b93ac6078c85abe8c9cedd2c63048","first_seen":"2025-06-30T14:28:31.827217Z","last_seen":"2026-07-05T15:56:39.03125Z","times_seen":30,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/24e92ff8-9777-49dc-924f-09d54b2b6606/BOFyLGbARF.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"172.64.154.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 Aug 2025 12:02:13 GMT","end":"Mon, 03 Nov 2025 13:00:43 GMT"},"fingerprint":{"sha1":"3F:8F:02:A9:C8:FD:11:13:F1:03:63:85:C6:CF:D7:5B:13:30:6A:D9","sha256":"60:55:4C:E5:C6:A0:59:62:7A:E8:52:AF:E7:D1:84:34:D5:3B:81:A5:FC:A3:90:9D:F4:8A:88:4F:97:10:3C:2E"}}},"request":{"raw":"GET /24e92ff8-9777-49dc-924f-09d54b2b6606/BOFyLGbARF.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bitowex.com/\r\nOrigin: https://bitowex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: application/json\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Fri, 02 Aug 2024 21:45:58 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: kCobLU5syybAw6B7dM4tZ0xbxI6ZC_OL\r\netag: W/\"a87512a76547aaac373b31a1ed805745\"\r\nvary: Origin,accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 2H6QRl06BZz-LvTNO1gYh4IwsbMeYl_pdkxGNzx8fL8rdFikLTENAg==\r\nage: 60\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9797659d6ab9b4f9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7677,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a87512a76547aaac373b31a1ed805745","sha1":"b5fd266499fa10b6fcce29f4f2ff087d0f5c92c5","sha256":"1e5855edd333e31f118c5b4f2d311b09ac8117c2a971fbaba2b520a6f0d3059b","sha512":"b5f6eee4183e9eadec089c76267e42e8a11a420302bc52d4b5f32cc74d9d99f2eb0470ce223fef2231a0bd9f6d552893c3e0293fe2eecd1c5f1dd4a1c939245c","ssdeep":"192:u38Nh8xhgpbPlXT7oHi8Nh8xhxPEjbPlXUju7oHfLPOjEJx:BOKpbtXPANOrPEjbtXTAajsx","tlshash":"01f1b8c5477202fceb4668c0cb8330c59fc8a8466fc641eeeabd5d149bea96d1311e17","first_seen":"2025-06-23T06:51:10.33644Z","last_seen":"2026-07-05T15:56:39.112991Z","times_seen":69,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":54,"dns":37,"connect":1,"send":0,"wait":50,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/images/currencies/s/94dcb270.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:11.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /images/currencies/s/94dcb270.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 4398\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 25 Apr 2023 19:05:31 GMT\r\netag: \"6448247b-112e\"\r\nexpires: Thu, 03 Sep 2026 18:44:11 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ueQIw9nulZdRorZcv5pdBBrSbBlJ0J9B1SY9bCb%2Fx7sw6t4%2B1i8WwnbZ99UDL1QQxmErB4oXQB8GAkb%2FbUCXQyYPi0aNaGr8DRJb\"}]}\r\nvary: accept-encoding\r\ncf-ray: 979765a10e856d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4398,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"3fa42faa6f5304aa7cb5be62ca7d68b5","sha1":"fcb67dc6e7e1ee0518a6e766ed31fa4369a04bad","sha256":"c541d9dd2998526fc42f9945cadc321b07d7f0351bc68d54811afd106f615d64","sha512":"25724de911eb4ffee15012bee6e5995f3a601283487a3c24434b651b640d9c10b317af9e673a8a1d39b9b41965294eb5655be6a349f0da98fec6ea1cfb4843ea","ssdeep":"96:DSUXI1S4OzBXLn2y+p/5S7kL+ZMiFjit7+5AesRNtxhqSiU0:DSUYQz1CDp/H+ZMi8lgAesRzU1","tlshash":"21914aed2eab675fe4613403250e99e39ba7aa3b534b904c15ce08935060bc50a7d374","first_seen":"2024-08-19T22:55:39.12438Z","last_seen":"2026-07-05T15:56:39.079932Z","times_seen":71,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/images/currencies/s/312ccb6f.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:11.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /images/currencies/s/312ccb6f.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 3544\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 25 Apr 2023 19:05:31 GMT\r\netag: \"6448247b-dd8\"\r\nexpires: Thu, 03 Sep 2026 18:44:11 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CjfZpfWT11vn6MS2IokmGkv0Ye1MqtSYlIjGRuShtVhY5%2Fs5sfrO%2BakOPnGX1b6xV6b03mNzJ44my8lr044aJ4gIMwbZ9Wxm3Gu7\"}]}\r\nvary: accept-encoding\r\ncf-ray: 979765a11e896d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"1556c2bf9fd95b3d08f445e087097ccd","sha1":"d922fc1f66fd8fd2bce3317ff56ae9e0064c3919","sha256":"6d3ee4f47d94028e738388f3328cf7a3ad5c64680ef10f5ed0e817cfc61b9a65","sha512":"0a236ff4abb01014a59cf1a44a2e4026262c965bdab7a71ab822908355f4b1475d1e90a614f399f2d8f37d67505a32ebf4a073e9345e38a301560b90c27115f7","ssdeep":"","tlshash":"5d716d6ef69910b4fe1d7681837bc67398e16d283a0b6d3409af6f83c074c4e2155a6d","first_seen":"2024-08-19T22:55:39.125231Z","last_seen":"2026-07-05T15:56:39.094226Z","times_seen":71,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/IBMPlexSans-Bold.b6e48200888cf96927aa.ttf","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:11.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/IBMPlexSans-Bold.b6e48200888cf96927aa.ttf HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LlemzDiIq7MPZSVFifVP6JXC5zWWMs8OuEiw1S1oRdZMw9Kh7ZWkC%2FMa4dUhRIcJej5PtZTabHLbme9loxzuq40A0lIG89MQQhrF\"}]}\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Wed, 03 Sep 2025 17:19:40 GMT\r\nx-fastcgi-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 979765a3af0f6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"048d68d71c6fee61f21710309ffa1385","sha1":"871f67e82c82f829a2e05f7ea179216fbcd3fe01","sha256":"bc9aafb4ce9f3dd84068d8d28bf375fd0f168863c21ec259ee38344bdd5298e6","sha512":"668da9b2202af7667191121992c100c8fdb64a1f08018f807f021052501f1c4a177e6b5a7aafe125e7148aa7dd759aef8df9b6ebbcb1cecc4784cedb29f40925","ssdeep":"","tlshash":"cff0c9972d13804d04005a96b479fb0ed5ceed647b93ac6078c85abe8c9cedd2c63048","first_seen":"2025-06-30T14:28:31.827217Z","last_seen":"2026-07-05T15:56:39.03125Z","times_seen":30,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/googlepay-min.caceff66e44239d4af8f.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/googlepay-min.caceff66e44239d4af8f.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 650\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:22 GMT\r\netag: \"67474a86-28a\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UZLhGHx9vfI1FLyY9QFfBYk6rVpPFSDbfS%2FIRHV22xessUQ7cHxXaMqbjleO5E4r3yjrs8u5Gh627qfQEYuEnEXjgknJDei9PaRD\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659a1d786d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":650,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8f58f4505d2c001078a0ba718be9ec2c","sha1":"81ba8d40b9cb84204b80fbf72e04aabfc2e20b85","sha256":"065c0dd5e2a8e0e3d3f298e5336dcf14fb78ac5dd40c3a1b340b1fc69cb04d92","sha512":"056868299da36bf01540100ad40f0da144aa4b5e3f13c4a226ea7cff4ad7c5dbb1aab3c79bb94b10a6f68087c9c2d173a81de0eca4839b11cafa5285d6cae9be","ssdeep":"","tlshash":"66f062227b1fb46591281f228f0acc34db13d5579b2cea4072780203640bf73b27180a","first_seen":"2024-08-19T22:55:39.095071Z","last_seen":"2026-07-05T15:56:39.119682Z","times_seen":37,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/bg.b6b6edba03baaf967c63.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/bg.b6b6edba03baaf967c63.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 31409\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:20 GMT\r\netag: \"67474a84-7ab1\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i4KQQNujFYwE1N%2FpG3jcRuNrbaatpMK7P%2FClzCXX46uOQlNFlB6MIJxTx5By0%2FA%2Bn1zRaIANQI6PlAzhIAXWtWHxZBGz%2B4EBzLol\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659abd9b6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31409,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1524 x 710, 8-bit colormap, non-interlaced","md5":"d328ccbb6aa1c2830a1703be4cd93fc6","sha1":"159524a5849adbf9a511fa5ca2b48cba8ce35ce9","sha256":"cb758dba6df2fd5c241aaee85583b2f9663a7a2a9653b8a9159300da18aac38b","sha512":"7c863a913a7d861caf4cb6a3748a0da805ab80a1a250635cfeaca19b90ffec9b4538dc6588f8be881d9d22a3617fc0b881144eca1a1af90b4776299c9d6b81b4","ssdeep":"768:HrNewf9u+0NGC9YhgpJZyCH8A7qYVS3YDL/:L0wuGC9bwCH8AmYVb/","tlshash":"29e2e18c5e2c52f9b39f4cb09d2d3ff1ae6a5b77930ace79b415a1096c80240be75681","first_seen":"2024-08-19T22:55:39.110319Z","last_seen":"2026-07-05T15:56:39.076214Z","times_seen":57,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/IBMPlexSans.5b67d03f5cc7578e9411.woff2","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/IBMPlexSans.5b67d03f5cc7578e9411.woff2 HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Zf5JdoNlgNWSRZvgJSrkWicQFCF73s5DHkrrqem8NLAnGkc%2FfBQxThfGckBzcY9LQLWQeRnn7HWFGMwXU%2B8Zc3FQYEpgRUV7E5B\"}]}\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Wed, 03 Sep 2025 17:19:40 GMT\r\nx-fastcgi-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-ray: 9797659adda06d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"048d68d71c6fee61f21710309ffa1385","sha1":"871f67e82c82f829a2e05f7ea179216fbcd3fe01","sha256":"bc9aafb4ce9f3dd84068d8d28bf375fd0f168863c21ec259ee38344bdd5298e6","sha512":"668da9b2202af7667191121992c100c8fdb64a1f08018f807f021052501f1c4a177e6b5a7aafe125e7148aa7dd759aef8df9b6ebbcb1cecc4784cedb29f40925","ssdeep":"","tlshash":"cff0c9972d13804d04005a96b479fb0ed5ceed647b93ac6078c85abe8c9cedd2c63048","first_seen":"2025-06-30T14:28:31.827217Z","last_seen":"2026-07-05T15:56:39.03125Z","times_seen":30,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/mpd-usdt.1c738769a4c5484ce032.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/mpd-usdt.1c738769a4c5484ce032.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 992\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:27 GMT\r\netag: \"67474a8b-3e0\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HKu0lzq0al7csOheZ9QbhRcCVsiwpxgf%2Fq2qvxb%2Br26PktZGeZXes59%2F0ltZR3QYTsq9mrx6pZ5XfimfY7XbnoWl7S3aPNpG42hT\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659abd996d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":992,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d47b74274bee81e846fbb53bd942af32","sha1":"fe5303f86450ec5b053a63e4588808a1db3a2905","sha256":"862fd5e30e6004e7a4bb2774c0209ad8824005ce73ce06012ed8eecbcc7d7c74","sha512":"4e627c4bd4db0a181c4c951543f61c5200ecf92cdd33732dd3a360ce19afd94b40247ac18d51287ff0fcccdd2519c4352935385fc52c91fcf377737a6ac62ef7","ssdeep":"","tlshash":"ad11a5cd8f438530584ae5735863b029cfcf7134d8225bbd6276589030039a01e04be8","first_seen":"2024-08-19T22:55:39.106865Z","last_seen":"2026-07-05T15:56:39.050846Z","times_seen":37,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/table-empty.7213cd3a9eee317cc16a.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/table-empty.7213cd3a9eee317cc16a.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8184\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:29 GMT\r\netag: \"67474a8d-1ff8\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BrMfkHN58e5dHbalLECjoXMwpOEiVLwhPPs16WuLjxHqwv5IxYLbduzxSVZKIrs64wK9CMnyls%2FdktoSJGcOwKCJHgIKZSrQQd%2BM\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659bfdf76d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8184,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bcab189d0ea85d9e911034542384c63e","sha1":"9aa37978c9f0f576da3d5a61741727804139953e","sha256":"a961ab7c4dbe251f482d0aeadf08103822bfaa01a17a0e348c9bc98458c2cbe5","sha512":"401603c49f719921d0c81aaeddcc542aa2ea3641f393197412a948920b5010db2f9be1367a5052d38b3a1fba4b0745e540c498a27cd09fd0f794933847465f1f","ssdeep":"192:e151kzO7XdcsHubJZKVwNOHvUiiMPjY3K+A8HSB4Cc4w44:E1MIdudsVauvUJ3K+A8SLc4+","tlshash":"e6f1bfe61296dc112c1cf9aaf075427d5f91fcc20ef281e3fd74249625b07bc812ad90","first_seen":"2024-08-19T22:55:39.11424Z","last_seen":"2026-07-05T15:56:39.122418Z","times_seen":37,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"bitowex.com/ws/?EIO=4\u0026transport=websocket","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /ws/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bitowex.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: DlpA0Q1rmBGDA/xmjx5SVg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 03 Sep 2025 18:44:10 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: V9jXHXaq5cBqZRrDEv+CEqbfR68=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fqlqrjxyu0SwCycxw93Fo5Zl8Pxm5dB3TV6z10jaM%2BYvKIkBrSFoTIBTZadkidt8zzeNU0hE8iaeOyEc79Z3DY%2FwMYpcaGHgGdMVMy4xnM3Ov6LwoO86NG8r5NhDxA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 979765997db8b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=510\u0026min_rtt=456\u0026rtt_var=179\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3108\u0026recv_bytes=1179\u0026delivery_rate=6906200\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=25e8e3e9c9028335\u0026ts=232\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T04:24:29.374999Z","times_seen":17440528,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":31,"connect":30,"send":0,"wait":208,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/api/spa/_/currencies/changes?","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /api/spa/_/currencies/changes? HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-API: bitowex.com\r\nX-Lang: en\r\napi-id: MTc1NjkyNTA0OTc3M3wwLjIzNTUxMjI5MjYzNTcxMDM5\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZdKTvG%2BvS%2FFHk3zNg4%2B2vYTUtWEVrurMmBHiuJl%2FN60eqCs2PkBB8J4ID%2F%2BFFaSN2HwHNN3JjJZw%2FZEEGVdtBi93Em5oscSqd3Wh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Accept-Encoding\r\ncharset: utf-8\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nx-fastcgi-cache: STALE\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 979765993d336d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2904,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"990649e30076330b61a252d0865aea50","sha1":"ebf1d50f8fe515ed833ae21db008ca6a3d1c46f0","sha256":"76db3c7816b92711479c3e1a5040f3777d1c8d9cc89847374b3baad999e6f3f8","sha512":"a0ce00dbcbd166cff315a3ce98efd25382bda04c47f8984b4754535c615eb580a459b9ccebab60195a99d8d5d9cc97eb17f6217852842076d3d2eb804254e128","ssdeep":"","tlshash":"da51484ede8c706fa715444039472d0acc3d61ba7ed63ad2f1881d2e62f1bdd9316a22","first_seen":"2025-09-03T18:44:34.601183Z","last_seen":"2025-09-03T18:44:34.601183Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/m-ramp.74f071ef15aa8acbff6c.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/m-ramp.74f071ef15aa8acbff6c.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 655\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:27 GMT\r\netag: \"67474a8b-28f\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ftVx7Xo%2FcbaWN4OaMnB4dIwjb4UX8pUlwgnb7wcwHmGxwvprh60eTpdPn0yPyGl4GeBD%2BSTISYddIhhnxYTcUfvmEKYoBIvoEOwL\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659a4d8e6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":655,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 14, 8-bit/color RGBA, non-interlaced","md5":"b9eb24da0c44b46deb73299fc5db428d","sha1":"778a8eefdd242466d7480052bcf5f326712c1eae","sha256":"31da56ad9a2685cbad0bc4831a9a536744606024f053bcecfab4d70db182fe56","sha512":"9fca87605b8f394ce211b8e92ef5716e88638808570ba9b8d30dd81d6bc956743def0422db7ae27adbd314a7a4cf64ec1dc95b78ad5e790aa8b1ebb2cdd49865","ssdeep":"","tlshash":"03f083ddc1040fa4742c0a348b2ad298c8bb783def8728052de19c70e6d9ebd4ce9290","first_seen":"2024-08-19T22:55:39.103956Z","last_seen":"2026-07-05T15:56:39.097662Z","times_seen":57,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/api/spa/_/currencies?","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /api/spa/_/currencies? HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-API: bitowex.com\r\nX-Lang: en\r\napi-id: MTc1NjkyNTA0OTc3M3wwLjIzNTUxMjI5MjYzNTcxMDM5\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vp5yMOkMkw6Yi%2BJZ2TfnrE4ggEZwfyMSFew8HfFd6nK2mN1Z2fJi3fK2NOHCGEsuB8WEvo2OVtqIb%2BcH1XAuPHH0A9we9s1T4JgX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Accept-Encoding\r\ncharset: utf-8\r\ncache-control: max-age=150, private\r\nx-fastcgi-cache: STALE\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 979765993d356d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":283030,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"929687eec9b2665849443cc9097ad7e5","sha1":"ff16005ecd8b651e829c4bdc1f269be66ad26291","sha256":"42a0dad4ad4c7195da22bd6a2f07fe5679d80510a60022be4848b16a147b982a","sha512":"22181dc0672602a7f0cecc015ba1e5746e756cd6d23590f86d7224e970d6d341731eeecb4f61358a7c6e00e972762f472a7458f37082ccc5aa9fbe128a843923","ssdeep":"6144:2XGyg+65tcFAOFquEmDXLvA2yXqmjaxiYxHNx/gHuU5wWQtE82bBpKA1k5PoWWv2:2XGyg+65tcFAOFquEmDXLvA2yXqmjaic","tlshash":"555485fe911aaef9f4840398e99434542f2cb557f7c15868c39e8cb26f915e312370ab","first_seen":"2025-09-03T18:44:34.604206Z","last_seen":"2025-09-03T18:44:34.604206Z","times_seen":1,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":268,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/m-banxa.7c6e064cbd92f9d28edf.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/m-banxa.7c6e064cbd92f9d28edf.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 765\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:26 GMT\r\netag: \"67474a8a-2fd\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cEv1O3bAYXD93ZF3in8GFFqv%2BKSgpYIohmSBMTRnLDq8UXPbK%2BvvFTVG9FpnDiqvoDdobN7bf7MGNU4O9f7Sr4P%2BTfPNZli0jsqb\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659a3d806d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":765,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 31, 8-bit/color RGBA, non-interlaced","md5":"0f30e6bbed06fee3b4884d76293e35ac","sha1":"d3d3e2c7bc9f0abaf812499cb50033c21d8b3169","sha256":"a7540f61ef378ef0c3c8d7e1a070bb485c3af5b0afea4e61b0019db420dae545","sha512":"7c5f6bae8782b4b9f4dd559a76be07debb6c850544134dd96a9cec8ec1c3a6e3f014e8aeeb28b79176d1e703c0514da43b794555aced04d4b75e2a0000527030","ssdeep":"","tlshash":"af0165f1f09ae5ffe76e9e2325c54d70b4736a1f8b41328a2ab25817c108476d3176e0","first_seen":"2024-08-19T22:55:39.097052Z","last_seen":"2026-07-05T15:56:39.111608Z","times_seen":57,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/exchange-dark.25e6ad828dfadfcc3ebb.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:11.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/exchange-dark.25e6ad828dfadfcc3ebb.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1206\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:21 GMT\r\netag: \"67474a85-4b6\"\r\nexpires: Thu, 03 Sep 2026 18:44:11 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9T8UgmDugfwyhh3OybaTt90tLyY0s9pE2HPctEMnS3Nya1hJifAhLgHgeGlVwCNQHB5EnwKnuGQH5RqgBdjbP0dfvFb6VL%2FQkwo3\"}]}\r\nvary: accept-encoding\r\ncf-ray: 979765a11e8b6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 92x105, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a66d7f884c2db5c1fde8572fc73c76f8","sha1":"f53b08743d7e5b4c690c3d4a606021db3385b27e","sha256":"d7e56b008a50115d4fbee1aeb13a126e8ad61bef95c3910edeefe5c8bf8ea678","sha512":"1d393ebfc8ce35b8c414294cb1c62fa8b93733b9e792d95646561e0ca7d8ee78d9654873b9d71b5f8ed91114022b4c12e5727538bae15ecb3341b4f9d3cfeb33","ssdeep":"","tlshash":"2a210d8d1ab5e84dfd333021551b4e3651c51dc44697de5967cead456030f17c71c87c","first_seen":"2025-06-30T14:28:31.87576Z","last_seen":"2026-07-05T15:56:39.104751Z","times_seen":30,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/banktransfer.6f4c9672379367211d35.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/banktransfer.6f4c9672379367211d35.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 566\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:20 GMT\r\netag: \"67474a84-236\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o71zAPatssvSlYDe2BnEjm6mv4uJk%2B%2BBsjjd3ME54PYcbf3jLHhmOUqREnKLTCh%2BpHo%2Br%2BMtR5K6IgwWzCpHIHwf1HRQJZpl89hS\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659a4d886d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":566,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e6ec1fee8decbeccfaf162a44965205c","sha1":"c488b263466a03e7160e40c458f5e52109078a7c","sha256":"1983dd8c590eeb8854ecc3ab805e87966bfa4077525bccf4008d19edc67e2bf0","sha512":"246261954583aa7f8b57bc011bf7d2e6e7373263d7a6b1e930f8fbd21d6c3767362a1c504e328442d2251b41bb102164a3700a3b81661504d09d72741cf8ab37","ssdeep":"","tlshash":"55f090a2cc038370c40228fbf7ed92e9db23284e0d6008026ab000c1bd2e007fe079ea","first_seen":"2024-08-19T22:55:39.088635Z","last_seen":"2026-07-05T15:56:39.092028Z","times_seen":37,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/logo.62de411c3107992684f8.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/logo.62de411c3107992684f8.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2488\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:26 GMT\r\netag: \"67474a8a-9b8\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qnsgkBnH5iVg6dY0FRTU6TlFpx7zoGB%2Fpcs2xA%2BKzJqpamaecV%2FW4sQUKYDZ1gEoW2CTbF1zRwjhMmMx9kVPQxhBTrqVXl26rt7Q\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659abd966d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2488,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5453aea2285e568eefe73caf8c19f54a","sha1":"55717460c04eabb6dc16b485f6f8427a0c456fe5","sha256":"f050c8850343ed40d9ef1f87cd2cf7c11ff952a70d9b2430359e48c339e28272","sha512":"c94f7d8b27b96de1c03cc63fada07813866b99957ac4b8682d5cfd42fdf8b213837835c2bc1d454e6cbb85a5247c8b8af358bbae7e7d903a1dc96de8d332cf59","ssdeep":"","tlshash":"5251f983c8a85771392eab04c17ee49819c0e85b7bed251b1b2c514d8e980db98fdf96","first_seen":"2024-08-19T22:55:39.105463Z","last_seen":"2026-07-05T15:56:39.07075Z","times_seen":37,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/IBMPlexSans-Bold.ffdd8696ca983efc2c20.woff2","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/IBMPlexSans-Bold.ffdd8696ca983efc2c20.woff2 HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o5m%2F6L%2FfXevHNAAZb3Od7ckkgqEh7y5PnFUINDkwuipdzky%2Fv4VY6pHKrVdf5RXWTmBjaJF1j9E9tDrnKw16TlvGl4re2Vcbrdu1\"}]}\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Wed, 03 Sep 2025 17:19:40 GMT\r\nx-fastcgi-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-ray: 9797659aeda46d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"048d68d71c6fee61f21710309ffa1385","sha1":"871f67e82c82f829a2e05f7ea179216fbcd3fe01","sha256":"bc9aafb4ce9f3dd84068d8d28bf375fd0f168863c21ec259ee38344bdd5298e6","sha512":"668da9b2202af7667191121992c100c8fdb64a1f08018f807f021052501f1c4a177e6b5a7aafe125e7148aa7dd759aef8df9b6ebbcb1cecc4784cedb29f40925","ssdeep":"","tlshash":"cff0c9972d13804d04005a96b479fb0ed5ceed647b93ac6078c85abe8c9cedd2c63048","first_seen":"2025-06-30T14:28:31.827217Z","last_seen":"2026-07-05T15:56:39.03125Z","times_seen":30,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/m2.5c3b4bfb109b309ffb18.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/m2.5c3b4bfb109b309ffb18.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 10340\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:27 GMT\r\netag: \"67474a8b-2864\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jsyYxkDhMg29aM0s3Usgayuub5TpEtFahUIkTjHWZEUMIGEE5wLBbhroUb5ceKOduzliD0ozzDMlLj0E7MGG0lTeqy9XQz%2FLkkMp\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659bfdfb6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10340,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 301 x 444, 8-bit colormap, non-interlaced","md5":"b067fb894656494b4c9d62b877b738e0","sha1":"be1787818acdbdf435799ed3bdccd9ed95f67b2e","sha256":"8d07291566c82bc4dd8818b36618d675128277fb46dce75af8800c1ecfb4306d","sha512":"7896491d56d8dfa4ab6edb5e4e738f585fdec8bf1def7bb330b854debb0847394fe76da351549a1961ad4decbf11854d22ed386fb20192cbdb8b6a2d83519253","ssdeep":"192:QS3nX2o5/qBlaPN/2fFbgFZj4oFcBU2/iFbaS0GxZYov9GrMOM:33nXpZPN/2fFbgFZkoFcBUrdvxgrM5","tlshash":"eb22c0847b826043ab58837d55f31eaa67a19ed4f3e4cb451f2a771e3074d75c482417","first_seen":"2024-08-19T22:55:39.113528Z","last_seen":"2026-07-05T15:56:39.038104Z","times_seen":57,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/IBMPlexSans-Light.d1498c135c501b6edab5.woff","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/IBMPlexSans-Light.d1498c135c501b6edab5.woff HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FzmUStq%2FXnDkrX36jug7EF9r28aLXagaRr1fKC3EQYHc3Ds6YqOTryetKkkZ0lr%2FBJBQKxwPTQIj0o7TeOA31fIlqoBoBVRYuoib\"}]}\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Wed, 03 Sep 2025 17:19:40 GMT\r\nx-fastcgi-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-ray: 9797659cce156d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"048d68d71c6fee61f21710309ffa1385","sha1":"871f67e82c82f829a2e05f7ea179216fbcd3fe01","sha256":"bc9aafb4ce9f3dd84068d8d28bf375fd0f168863c21ec259ee38344bdd5298e6","sha512":"668da9b2202af7667191121992c100c8fdb64a1f08018f807f021052501f1c4a177e6b5a7aafe125e7148aa7dd759aef8df9b6ebbcb1cecc4784cedb29f40925","ssdeep":"","tlshash":"cff0c9972d13804d04005a96b479fb0ed5ceed647b93ac6078c85abe8c9cedd2c63048","first_seen":"2025-06-30T14:28:31.827217Z","last_seen":"2026-07-05T15:56:39.03125Z","times_seen":30,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/api/spa/_/config?","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /api/spa/_/config? HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-API: bitowex.com\r\nX-Lang: en\r\napi-id: MTc1NjkyNTA0OTc3M3wwLjIzNTUxMjI5MjYzNTcxMDM5\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FMiJ04ZNEsA8Kt30olswCuJPzdlWxvsArqgy4yIh7Lesv4UJOAz%2B5FXoAmTlvbrU7y%2F1k1Wr5vmV2jH4H6bCH9uXnSyen5YMe6XU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Accept-Encoding\r\ncharset: utf-8\r\ncache-control: max-age=150, public\r\nx-fastcgi-cache: STALE\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 979765993d2e6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":624,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3c2e07abe144f15216c37197beb8532c","sha1":"3e921005a78b5e356c29ee3c72978260bd632da5","sha256":"5d3ce94536ea73da339d12159f7a40504dbb9423358158573dff01ed3986a9f1","sha512":"a6ca97406ae7e8de6ac31bdd68aacc00002665f6f379a8543fd7ce168610b7f3f61a4405f188fc8f91d67e68ad4b9ec697d814cecb2a7849ece03070216f7156","ssdeep":"","tlshash":"c0f0280c5d1424fc5642c784f2687857437c8e33a6137878869c0b2c29efafc63b4a26","first_seen":"2025-09-03T18:44:34.611723Z","last_seen":"2025-09-03T18:44:34.611723Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/visa-min.33292c62f9bd14518b37.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/visa-min.33292c62f9bd14518b37.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 640\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:29 GMT\r\netag: \"67474a8d-280\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dy565XV9arZ6IEvJ%2Be50j7HUR8V5VJvKwBommlrsOnU3dEx4%2Fqa9GHvcxzjkgKAYHpzyAR%2F6xSuUcw8r3og57UMFu2JyTs64ChLn\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659a0d726d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":640,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"23d277c053339cedd78af67e875febd5","sha1":"df533b0f90c4258ac083331c2de66956e0940e54","sha256":"266b8d97c1143979f6d61515b6452b9380426a894bc6392728069fb6237a8a50","sha512":"190376e9463562afd71b1c3c795452401a4a98088bcfcab20fe5ccbf3d1c06de93a5f0b15b6b57b23fc521df899796578223e5c3175da8be00fa6d85e5a81821","ssdeep":"","tlshash":"d2f06831a862d3d4f950f67b1f7f1873634564a4ab35fd1084b0e86c0d6c072b91cb46","first_seen":"2024-08-19T22:55:39.090307Z","last_seen":"2026-07-05T15:56:39.099544Z","times_seen":37,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/mastercard-min.b9857d0fdf9c151e9c97.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/mastercard-min.b9857d0fdf9c151e9c97.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 963\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:27 GMT\r\netag: \"67474a8b-3c3\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6WBed%2BY4KF5Pin14cIQNhuZcUK5NYTM7MJwKETgZS3EfeMnUQ29LDdL86yw2KIitzLG3CBlkB9v0ZZ%2F0K23g8fzfDY3XgEWZD0Zp\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659a1d756d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":963,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 25, 8-bit/color RGBA, non-interlaced","md5":"8e61144429e289d59f613bf12942ff78","sha1":"80c548ab478d6e422c401cf392793c59a5662e7e","sha256":"ee3adcd230821125217a315b1828ba0107bac545e8c8ad33a3a6a3c332068489","sha512":"985348e450f419346d9b0ca9d81a4cb3da1c0558001c0e0a2a0c3ee146cd2845573f43887fae47efb97adfdabfd4fa88132a717fd7fc21541c234d2ef5c29bd1","ssdeep":"","tlshash":"dc1198f8184db5da9b0f02c197a34465cccb2e9d1c492a327a6cd06e5ec21d159e4759","first_seen":"2024-08-19T22:55:39.091003Z","last_seen":"2026-07-05T15:56:39.118812Z","times_seen":57,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/favicon.dce5a170e9a9617c55aa.ico","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/favicon.dce5a170e9a9617c55aa.ico HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jFlGoqEQPi6YeWq%2Fc0m4ymxBKFhP4W0g7yvfvjRfsYizv18W0VaRHX1SA9Iavrmx5ylk%2Ba1JuWAevId31FExpQg79yLqbAvdH8rb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 27 Nov 2024 16:36:22 GMT\r\netag: W/\"67474a86-1083e\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 9797659e0e2f6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67646,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel","md5":"576ab5eec86723fc67017db3c53f04e6","sha1":"76e3fe0545588d9346a9f05d84ad1b968d21927b","sha256":"6e88f180b93e446c44aafc7a54ca27eb8b0720251390c7d4ba6749fd70171721","sha512":"24e47c7de8469f2e9a36117ad5a0fe7e491c1912f156228180da135d672877040c38250a1596ae47b7575fdddd22a3a085fe1dc9f38d45838b5035f8b2021d15","ssdeep":"96:ZXRxROs2HOGo4EJK0/NUACgxLcOINtBRZew35H5H5H5H5H5HttRoC93OSXHKgH+u:ZXP4YOnDf","tlshash":"b863496320075417e879f6b34565cd7dd1aceeef31e06c8bb5a87b0e1039662a884f17","first_seen":"2024-08-19T22:55:39.133284Z","last_seen":"2026-07-05T15:56:39.075409Z","times_seen":55,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/m1.7d900c2d1c59c910feb9.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/m1.7d900c2d1c59c910feb9.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 10437\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:27 GMT\r\netag: \"67474a8b-28c5\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EKfjpXb3SBad4UbXzlweQyXCvI1I4wE%2Bha%2BopkaHtD8XF0QWfk81B4rCZGfBvTB953JoVzju2r%2FKsbtOabthr8CntcjNuZQE5hye\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659bfdf96d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10437,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 301 x 435, 8-bit colormap, non-interlaced","md5":"ac49872ab33d7e19ec14ee2b45636123","sha1":"c6fcb8ccc6f837b820180fd8ded45277a6d89441","sha256":"ef75598356439f7f9821d61a5983cca90186d1545744d5ec8b695b712cf7ba9f","sha512":"96859dbfff2a05d9605edba85a047f40fde2f56e15835b6ed68537cfdedf23af06959e59fc3df1e3185774e6d216ecc6efa148c73f4376a5ea8878cd50cb838b","ssdeep":"192:cSSCRtK8UE8uUIe7oQyYXP4XGPkTrnb9D/XnXY8tXaTDm4aZJmKTFrjqWgV5l:AAtKNAe7oAPTPkHbd3XtKvmpDNqWgnl","tlshash":"fa22b00a590a967632a32e5ecef25424062b4f67fea2741f2c0938be2d31a49d2c710d","first_seen":"2024-08-19T22:55:39.114921Z","last_seen":"2026-07-05T15:56:39.042925Z","times_seen":57,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/images/currencies/s/e541cb7d.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:11.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /images/currencies/s/e541cb7d.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 8231\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 25 Apr 2023 19:05:32 GMT\r\netag: \"6448247c-2027\"\r\nexpires: Thu, 03 Sep 2026 18:44:11 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9mQ3nTS0qe%2Ft978zqQVyMSgbpYnhfz9ar1sdwjm25OdZLKwzet7wY9ECvQTQePNNIUIXbpXCcx31e0QNKDoTcnSepJV%2Bce7J45dG\"}]}\r\nvary: accept-encoding\r\ncf-ray: 979765a11e8a6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8231,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"1ebcb9bff903582c51f40af5c45223b5","sha1":"82105596ad5c7afe3bf204e7d1f982d40b4f5d76","sha256":"23ff36f69f0f0e8a218cbb1830df4f512dc5d6879f8943e64aa40a768713bfbc","sha512":"479dab663305f5a178500cd73414fdb97c33e2d80e1cb7cd95bf79e5d1e4b59a827c03decc82177d154d2fb60395edd911ebf39e84bf8d41dd74ceecfb8f6b33","ssdeep":"192:DS0izJXnQiDhP/M184Ejav4Pk3203inA4LJ1g/3qk9CuTp:20kgilPCuk/iJLc3h99Tp","tlshash":"77029fea5cbe62b8da00e153ede4be806f4143d45da35e901edac436bb78c43d0368d6","first_seen":"2024-08-19T22:55:39.132566Z","last_seen":"2026-07-05T15:56:39.083541Z","times_seen":71,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/IBMPlexSans.177e36a80520ea4ad85d.ttf","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:11.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/IBMPlexSans.177e36a80520ea4ad85d.ttf HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=38A28BOpWxhn9FU4H0GIk8zk%2BiLEqGTYzi0eVdZowvsysZuvOu9LvhP4C%2FDE11tmIpqf%2Fzzkt2ocrYpCxSKtnEYDaUfPkqRzYCxg\"}]}\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Wed, 03 Sep 2025 17:19:40 GMT\r\nx-fastcgi-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 979765a38f0a6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"048d68d71c6fee61f21710309ffa1385","sha1":"871f67e82c82f829a2e05f7ea179216fbcd3fe01","sha256":"bc9aafb4ce9f3dd84068d8d28bf375fd0f168863c21ec259ee38344bdd5298e6","sha512":"668da9b2202af7667191121992c100c8fdb64a1f08018f807f021052501f1c4a177e6b5a7aafe125e7148aa7dd759aef8df9b6ebbcb1cecc4784cedb29f40925","ssdeep":"","tlshash":"cff0c9972d13804d04005a96b479fb0ed5ceed647b93ac6078c85abe8c9cedd2c63048","first_seen":"2025-06-30T14:28:31.827217Z","last_seen":"2026-07-05T15:56:39.03125Z","times_seen":30,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/maestro-min.a4a0f55458ceff844806.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/maestro-min.a4a0f55458ceff844806.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 916\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:27 GMT\r\netag: \"67474a8b-394\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2BEezAFNa6fjHnq87xa4odho3H%2BrSHSuTRPzTmuIf2xlMevGkwMFcp75h2V%2BXBANYsDON%2Fhu9Ra7UxAv540f%2BI6njmuPtZNhibXE\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659a3d7d6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":916,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2dec5ea07bfa9a2b4c072ac3005995d6","sha1":"a2dfe0105b55975d7ac18fbc669d9692e87290b7","sha256":"16ba181ff6491878a0c7da95bc8e54da45d9519dc26d79b613697fd1f366df97","sha512":"4a96ecc48080ee0f079b75a1d7bfcd5b5dcf46a9c284c0d8ea078124741d9739197c053c21995100cd250332a59468189f3dcb6c1a7f55d9dacba9870e1e8f23","ssdeep":"","tlshash":"af11634f280d61d0c9b7201a3aea3b06ae4d778f0a9e918644743838ff742d1b9ea651","first_seen":"2024-08-19T22:55:39.092983Z","last_seen":"2026-07-05T15:56:39.121191Z","times_seen":37,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/vietqr.70553031dfa0b0ee0a63.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/vietqr.70553031dfa0b0ee0a63.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 781\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:29 GMT\r\netag: \"67474a8d-30d\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2BVRLLx0mNEKXG7H7lJDF507ysA7EU51QMtZD%2Bu2jPDteXL6KZZ9W9NdJTm7JLtCPArMdLYWzSrAsn%2BRCrgtFWCbeqITer%2BBqr1F\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659a4d876d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":781,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 38 x 24, 8-bit/color RGBA, non-interlaced","md5":"e16c4a42bd9999d026263d97f00942fa","sha1":"b3563d3e9ab528fe9af1d6e28342e6c6b328b573","sha256":"fbb2a45a0c003104bbdcb869a1bff316bdf25a1d8e6d8583f9c26a26901a586c","sha512":"57174eec2f92f18f77d31f1dd82f1402f49378a99a349d385f415e603c36052e8f0dc2d5eb2b8c0a76c331495d9e088d28101e03a2127eb6d6ef42aa2053658e","ssdeep":"","tlshash":"050175dda99c09bbd50597b60cb2819d805e7cbd0023050e3c7c8c241a43e9d7acb6b8","first_seen":"2024-08-19T22:55:39.101815Z","last_seen":"2026-07-05T15:56:39.103086Z","times_seen":57,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/IBMPlexSans-SemiBold.a2a5260f7afea34fcadb.woff2","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/IBMPlexSans-SemiBold.a2a5260f7afea34fcadb.woff2 HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z1WCqdPsTH5gTY%2Foy%2BFp%2F4n2iJmB4Sc%2BnCcFHpXroPBVX7VIUnON58HocRXJ5CmRGYdgBvniRdZFtXF6eQwu65%2BwTza2Seao%2FTbG\"}]}\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Wed, 03 Sep 2025 17:19:40 GMT\r\nx-fastcgi-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-ray: 9797659adda36d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"048d68d71c6fee61f21710309ffa1385","sha1":"871f67e82c82f829a2e05f7ea179216fbcd3fe01","sha256":"bc9aafb4ce9f3dd84068d8d28bf375fd0f168863c21ec259ee38344bdd5298e6","sha512":"668da9b2202af7667191121992c100c8fdb64a1f08018f807f021052501f1c4a177e6b5a7aafe125e7148aa7dd759aef8df9b6ebbcb1cecc4784cedb29f40925","ssdeep":"","tlshash":"cff0c9972d13804d04005a96b479fb0ed5ceed647b93ac6078c85abe8c9cedd2c63048","first_seen":"2025-06-30T14:28:31.827217Z","last_seen":"2026-07-05T15:56:39.03125Z","times_seen":30,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/steps-d.e9171849c0069a31df3f.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/steps-d.e9171849c0069a31df3f.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 66561\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:28 GMT\r\netag: \"67474a8c-10401\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ARIh9ACHRdAXqUPo%2FPpHjD6PI3riWZKF3klJqGfeorBntudsu7PtqZTXEcPVmCc3ri24tY51q6UfnyROYA%2BKkdD6u%2F9B%2BASypcTX\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659abd9d6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66561,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1521 x 853, 8-bit colormap, non-interlaced","md5":"a281eaecc3a386982d0a3068f5b47b92","sha1":"5652bfeca868f94bf8c184688201ee2ace68c27f","sha256":"6dfd7207852cb4427b710868add7f130ac7b05cf34790f9e8eec66f05a4ceab5","sha512":"ed3b03edaff33a7480f4bb6b20dce504e8f07da20a7622c5a48a170b720bfdad05230e6d3772d1ecf0f7d484d7a1c57e60aa61a36099ae31d2d7810ec70dc9f8","ssdeep":"1536:HvjObN0cq1Rm6nWmldMoStr+tQ2xQMFcGLNrxkaM:HvjmHqXmxYV2r+tQ267GLBxQ","tlshash":"e85302bac4c498b7c998293f145ebb9ade69dc5c6bc188058f71b3f00c7d59dd1d28a0","first_seen":"2024-08-19T22:55:39.110956Z","last_seen":"2026-07-05T15:56:39.096713Z","times_seen":57,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/stat-bg.0af1b1b8a5df01ba4868.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/stat-bg.0af1b1b8a5df01ba4868.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25416\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:28 GMT\r\netag: \"67474a8c-6348\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=meHPDNzyazAKAvnURgheYteuE2IaffIYcLhM3Sgv4mXhQ%2FWeSAuJZ48JAGyX1z45irdq%2FR2HAuZbC27DjPo1My1n3E%2BgK7f%2F9Fm8\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659acd9f6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25416,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1360x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"779df426c2ba68b05737ce68bcc4b9f2","sha1":"f817da8c9f9d414de437611df2c4070c00f1df76","sha256":"54b4be51edcc02dabcf37c63728d130a48793dd62f6c63ea846835c8ebae0b9d","sha512":"5f156303cac2dad63feba37e6805cd0ed1f3521633133e165e10f73358893ae60cb1015757b70dc8684249cccfa1006936c3cd2942563469781816ae385fc7fa","ssdeep":"768:Ra5XmJBpYxkKBr4DgS720j4C1alWISpes:RaFmTiy200CFes","tlshash":"a8b2d0a6f8453cdd95c2d8bb25002a85230c74f87ab7d6e92cda4db8d95c39642ae600","first_seen":"2024-08-19T22:55:39.130407Z","last_seen":"2026-07-05T15:56:39.088955Z","times_seen":37,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/m3.7403a4877d05d1b8ad1e.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:10.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/m3.7403a4877d05d1b8ad1e.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10730\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:27 GMT\r\netag: \"67474a8b-29ea\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=56VPHduUhmhkbazeXlROnFr8u6zVTxWHWSTYaOkdYksMc0%2FPlcCVVBkBUIqke0zjr6NeG6HTHPevm0tWVkZ5wwwmyyz9g0%2Bozi%2Bh\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659bfdfc6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10730,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"35a32fed72dd51dd1bd1ecc53e207084","sha1":"2e3011f441c7a68613f47ea769962045ad4fc122","sha256":"f6e8bf5b54a84cad9bac5f622fd227d6d4114ad61511841e6092dbdd4b0a1ad7","sha512":"cad2f61f5213e6af008c0c36e4e262f453a525af72a6b153b59ccb21603b5e0994e389f9bca4a7d129198fa6517b916d74dd7e3ce747f0fb5cb3e261ae761db8","ssdeep":"192:tXV1Da95gggBgn5PcIyXwYUzm9ChjtF9MV5OekIyq0n4c3J3:tTDRfuPvyXGmIhjnfekINg4w","tlshash":"7522b092edcfc21319e8c6908fe87ea4a49106e945999e1c1d124a3568a78a03dbd7f1","first_seen":"2024-08-19T22:55:39.112861Z","last_seen":"2026-07-05T15:56:39.044176Z","times_seen":37,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/743.3bd8b706661122578b4c.js","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/743.3bd8b706661122578b4c.js HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TOQpRzPWOAnt90A3UBziZCx4p88%2Bn1j9U%2FQ7sgDig8eAtfW50xCqeYdU8lUrbZW8CC1yfn9CMAyS1ETq3Xj7oMi7%2BfYCJq%2FC2%2FEZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 27 Nov 2024 16:36:18 GMT\r\netag: W/\"67474a82-a8e48\"\r\nexpires: Thu, 03 Sep 2026 18:44:09 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97976594cc996d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":691784,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65454)","md5":"8d929b4aa77bbbf23ad67b41c871c3fc","sha1":"bc32968717a664126bc7624c6d79476d03841e6b","sha256":"8a28fec90aea7e59d543559ec86ddeb0bb24273f2184ab5b2703c1931bb1827e","sha512":"29b68b74609c34c5ca8bddbf93e0ba55c77323f3898435c612d3fd610d2ff4c6b5d2cfb150d3484d79efa79aa630772786766092800ccb265f95213ba85aba90","ssdeep":"6144:7ZJOTEVtPbwhuFE61CtcMtT62YjXouFmhDE+ByXFyWPrqA0:7htPbw8Gvm0uFkF9","tlshash":"c7e430a2738427a6a64909e94029a107d0f6d42d302525ccfbf6f7d7f83d9a2f82d774","first_seen":"2025-02-23T17:36:35.640209Z","last_seen":"2026-07-05T15:56:39.080759Z","times_seen":59,"resource_available":true,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/m-moonpay.acf8e57bb930ecbd4211.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/m-moonpay.acf8e57bb930ecbd4211.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 499\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:27 GMT\r\netag: \"67474a8b-1f3\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c530cT5%2BDesWfvUl6get9SR87Cy4rwPHb5%2FK%2Fr3CSMfyoqPzt4jA%2FeOtqve%2Ff2YGZF7eoGpX54u7o3Oimsy7EsOUXQyKNp9dRK1g\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659a0d716d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":499,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 21, 8-bit/color RGBA, non-interlaced","md5":"56d9825a00f6e17884bbe819f625fb28","sha1":"6c94f1cc072edd17d615cead4aee5228f1de1add","sha256":"4aa4c4027958ef843cc61e82c5d931d80154601f7a5d47751f07c4e52723ac08","sha512":"cffdf2e943798cb4ca106873dd35731e37eba1a9270ffbcdf57cd49fc1a49252aedd31e4d6bb220a9ff0b4363a54493775bb5d6741f86f7300459241f5d3ce41","ssdeep":"","tlshash":"6cf00eed7e41e8684aa803f505dbf237b0272f2e09004004fd70b112b51ec0869892aa","first_seen":"2024-08-19T22:55:39.131837Z","last_seen":"2026-07-05T15:56:39.053128Z","times_seen":57,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitowex.com/web/assets/banktransfer-min.13c50eb2e5b9c49f1d94.png","fqdn":"bitowex.com","domain":"bitowex.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitowex.com/","date":"2025-09-03T18:44:09.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Jul 2025 23:48:13 GMT","end":"Thu, 23 Oct 2025 00:46:26 GMT"},"fingerprint":{"sha1":"02:C6:56:C9:A4:A9:6F:51:1B:D1:28:E3:69:7A:36:03:86:13:01:5E","sha256":"6F:0B:A5:B1:85:79:93:C0:2B:D4:55:CA:DE:77:EF:51:2A:23:00:1B:E0:6B:09:BF:CE:A0:0D:D3:9E:FC:2D:DC"}}},"request":{"raw":"GET /web/assets/banktransfer-min.13c50eb2e5b9c49f1d94.png HTTP/1.1\r\nHost: bitowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:44:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 942\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 27 Nov 2024 16:36:20 GMT\r\netag: \"67474a84-3ae\"\r\nexpires: Thu, 03 Sep 2026 18:44:10 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ypqe7sdqiqXBjwZGXrEBDu4Y8j%2BGxBEUN1f7Vzbtfb4PWfqOvHuq7TXLBWj5YhXOmqiVW4kS8D5bsiPDlYeVsvuRrfr9HRW4A7i\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9797659a2d7a6d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":942,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 24, 8-bit colormap, non-interlaced","md5":"1cab90300c916e5106f2b95e43f882db","sha1":"46961d0772387b00ccc829fe19d03bd92ccc7612","sha256":"32f373c3d3732a0812330fb8c1d263c3a89dc82279c1e0e35469967bc91d7011","sha512":"1cb13cd708a98a031cc0a789b30a8caa826afa1b098a9c53ab0b4749dcb3c0be85ef2cd2c04d65a87fe5ffefa7bf5f63ae8a045e8e220d73114f689dc8c9d6be","ssdeep":"","tlshash":"f11148e37342cd97895d5c210afb6293e8e79bb445c5b25deb70880415758f69358c41","first_seen":"2024-08-19T22:55:39.093775Z","last_seen":"2026-07-05T15:56:39.100393Z","times_seen":57,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"bitowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}