{"report_id":"11ecd827-ea35-4d36-abe3-ecad41a8f641","version":6,"status":"done","tags":[],"date":"2025-09-17T03:31:24Z","url":{"schema":"https","addr":"blockbits-chainspro.cc","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":0,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"blockbits-chainspro.cc/","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"title":"Articles"},"submit":{"url":{"schema":"https","addr":"blockbits-chainspro.cc","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":0,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-22T03:31:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"blockbits-chainspro.cc","ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"domain_registered":"2025-08-14","domain_rank":0,"first_seen":"2025-09-17T03:31:24.758886Z","last_seen":"2025-09-17T03:31:24.758886Z","alert_count":37,"request_count":37,"received_data":771906,"sent_data":16854,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"blockbits-chainspro.cc/js/custom.js","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"df107b8eafd41236f329121272086203","sha1":"e4b3a9397e348918d47324cc3f0882ce6c0a6d29","sha256":"2898314370c7bf0ad685fa16837cc89289e6bf8d09897205358c08016e14d70d","sha512":"ffbc070a3042bccb1374f8d7ca742d987bec082a317d5f0b98ce1dbb1abd23fa277dbbd1d1985b5e681a23cff62c2d1cabbfb6e39de31dada20688f85b873c08","ssdeep":"","tlshash":"af613208b030b87996afe212946b8754b1730e56c2da85b1d1f41479cbb952c7ae3fcd","size":3176,"data":"","first_seen":"2023-04-10T15:44:45Z","last_seen":"2025-11-17T17:31:43.850728Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a1dacbae246df9fb2672f4f678235f16","sha1":"e7cdf7c72fd112e69f433f86272f9c88b890bd83","sha256":"70f042487600bdc855715972bf9d5cd959ff328254b056ed5de0f47ce4af707b","sha512":"3e6cac03364701dc12d6ebec0d7f06205ed2180cd74e4214bb0cb904f3a4ef2038e923c958ffa4dcb5156df29b541804da492953515993885ddb279b9f1787d5","ssdeep":"","tlshash":"43a0021501522554622720901225c39d5579a0679c49d33a765e57404b80405c528401","size":73,"data":"","first_seen":"2023-03-07T18:52:25Z","last_seen":"2026-06-06T13:08:46.084953Z","times_seen":297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e3adfd9ad0ace18b35a7722c1eeeb866","sha1":"889a18605e5977404e88c3d8b5d049e4c9e45b89","sha256":"d2661d3bc112fb558e3e9da17650bac68b5e8db29929c5e34cc631e6a93124a1","sha512":"42ad711b66059149e99fef9a0e2339f5d6b5b5c6128b108d2940db3e69f0def5293ff34ad60d07b0157159ae7e8e18e435c77e5d25815ff2fd414e00a0a4455f","ssdeep":"","tlshash":"d8c02b0d38e65020003f30bccf6f20041829142b504dc9047d0c87e08f3043f490130f","size":150,"data":"","first_seen":"2023-03-08T04:54:28Z","last_seen":"2025-09-17T03:31:27.515248Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"88aa77f3d6a0c22041a3d6c616222230","sha1":"af92a15571fbf1dec9f4f5d413feb900b0e723a6","sha256":"3c66bad3b807a91fd90461760bc56e4bad6913429ff8fafc1288329ef075790a","sha512":"8bf68c127bbf697db315f788c42002a998747ec3fb4af92713ff955d567e4e6b3c9e7b8bcbc23f583385bbb10d7186958a4be7c76c4a8e06de8009aa5db98c14","ssdeep":"","tlshash":"76c08c89483740395163901b934342862196008f2401ac02bd0c10093f61a0a49e6ee9","size":159,"data":"","first_seen":"2023-03-08T04:54:28Z","last_seen":"2026-05-25T10:10:18.117159Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c574128f297cdfea4fb67029d717ca96","sha1":"79e96ee9bcc95e9776d43b61815faca2bc627607","sha256":"e9eec02b6f9370f24becae0e887a2d77baeb9944206a096076cb2d26d0bccc1c","sha512":"7f424e2f3501a462c900d4d546b6ca4b226c94abac28bbedb67042481cdfe1f181c40537584d753a5dfc8c9e70d10ba2a70fd6634af88d7b9f4a28505d0cb829","ssdeep":"","tlshash":"17714209baa7225449b330bdd79f53452769a117044ee420bdae13c00f95c7cf6a9bfd","size":3663,"data":"","first_seen":"2023-12-12T00:14:59Z","last_seen":"2025-09-17T03:31:27.517589Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"312351bff07989769097660a56395065","sha1":"004be89dd9e070ecb080b9b759e5be29ec24881b","sha256":"b2b2f104d32c638903e151a9b20d6e27b41d8c0c84cf8458738f83ca2f1dd744","sha512":"454935a0b9fe288a70896e9e0548537ed09c564e47d771b91202f70ddc94946fa6b209e205034983ebe3160633bf5401df01cdfc54b7f98c4bfbd5845a89124f","ssdeep":"","tlshash":"1f3000000000000000cc00000000000000000000000000000000000000000000000c00","size":4,"data":"","first_seen":"2023-03-13T00:05:53Z","last_seen":"2026-06-07T07:17:39.905306Z","times_seen":32226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"blockbits-chainspro.cc/js/jquery.pogo-slider.min.js","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:03.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /js/jquery.pogo-slider.min.js HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:03 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":266,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/webfonts/fa-solid-900.woff2","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:04.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:04 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 157192\r\nLast-Modified: Tue, 23 Jul 2024 20:58:44 GMT\r\nConnection: keep-alive\r\nETag: \"66a01984-26608\"\r\nExpires: Thu, 18 Sep 2025 03:31:04 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":157192,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 157192, version 774.256","md5":"e3d9513db7d912cc274718d6c4c5f3a4","sha1":"260237cbc4d301cb00887cb52100af8ffa1c3778","sha256":"a5eb86bd517e297391cf9ca5ad93ff049b7f8be2ce8d71a7bc002c6f8be01e41","sha512":"b2d75efb048a48776bc743dbe7d3971769b164dadf4aad3fd03cf90f7fac55658456767bc3b7f277696f129319baa824118284c50384a3cc28b38c9a99e4be5c","ssdeep":"3072:AxY0T77V1Gp/FgEB0x9g8yvszbC5RQYO70s0HnKR:AFT77V1GxFgEvFWmOX0qR","tlshash":"31e312032e32cbd1115629b9571b3ff0cf8071f5b9a409c1af65b9ee2ee411ae7046da","first_seen":"2024-07-31T08:58:48Z","last_seen":"2026-07-05T08:28:14.703862Z","times_seen":78,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":156,"dns":0,"connect":0,"send":0,"wait":196,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/assets/images/bulksplash-cferdo-uedpqdg92be.jpg","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:03.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /assets/images/bulksplash-cferdo-uedpqdg92be.jpg HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:04 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":780,"timings":{"blocked":676,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/js/images-loded.min.js","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:05.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /js/images-loded.min.js HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:05 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/js/jquery.magnific-popup.min.js","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:03.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /js/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:03 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":177,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/js/form-validator.min.js","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:03.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /js/form-validator.min.js HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:04 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":305,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/js/isotope.min.js","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:03.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /js/isotope.min.js HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:04 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":383,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/js/jquery.pogo-slider.min.js","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:04.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /js/jquery.pogo-slider.min.js HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:04 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/js/slider-index.js","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:04.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /js/slider-index.js HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:04 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/css2","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:03.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /css2 HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:04 GMT\r\nContent-Length: 3020\r\nConnection: keep-alive\r\nLast-Modified: Tue, 23 Jul 2024 20:59:44 GMT\r\nETag: \"bcc-61df070e9f000\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3020,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"be6548d89a240b0ffe7d034b51c3beea","sha1":"10b51ca6c230c3d7f1f42aa30c909610794bbdc2","sha256":"6dcc3afbbac202ea7c659c3b5dba4ff86bcc9df047d492d38b64aff6749c7e51","sha512":"fc6401ca010bb16ac1a6310507dbd2ab27330ccf8186ac0a3d2a31ef89c505624e2e05c093997b9c1c1823bdc95a29089e1839982fdadbcf3728395c9b6fe5cc","ssdeep":"","tlshash":"62512610044e6160eea21c6d73cf7f2dbd0c29192163c4bd9769a8789edf92b8384f5d","first_seen":"2025-09-17T03:31:27.509043Z","last_seen":"2025-09-17T03:31:27.509043Z","times_seen":1,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":185,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/s/roboto/v30/KFOmCnqEu92Fr1Me5Q.ttf","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:04.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /s/roboto/v30/KFOmCnqEu92Fr1Me5Q.ttf HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/css2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:04 GMT\r\nContent-Type: font/ttf\r\nContent-Length: 129584\r\nConnection: keep-alive\r\nLast-Modified: Wed, 19 Jun 2024 14:05:10 GMT\r\nETag: \"1fa30-61b3eafb41180\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":129584,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-Regularhtt","md5":"afe8eacfc0903cc0612dc696881f0480","sha1":"ba879317acdc045b8fa78cb8f948650627d0477c","sha256":"7277cfb805def6410f317129b8e1f78bdd47d1a4e24c233077d06e88a36e57ae","sha512":"f6f135748e4d5afe4f8f05a4a07a51ceeaa5cc250c62305769661c9c61277d961678b03ef1848b660dde2980028350ec5cbe1090bfc8d7a41e55e64c9693e76b","ssdeep":"3072:By2g0L/sAQRuzzlPrvR39RB1zMolYE0B5YvPliLg24flLc:1Omp/TnnliLg2wlLc","tlshash":"dfc3b400da41a629c9d6b2797c7de3be4c75e82dfd4b641330aa9b2115c8c41ec69bfc","first_seen":"2023-05-06T12:03:53Z","last_seen":"2026-07-31T06:50:58.608144Z","times_seen":1331,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":339,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/css/bootstrap.min.css","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:03.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:03 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/css/custom.css","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:03.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /css/custom.css HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:03 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":186,"dns":1,"connect":99,"send":0,"wait":136,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/css/responsive.css","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:03.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /css/responsive.css HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:03 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":181,"dns":1,"connect":96,"send":0,"wait":102,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/assets/images/bulksplash-alexfedini-baczyh9rlmq.jpg","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:03.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /assets/images/bulksplash-alexfedini-baczyh9rlmq.jpg HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:04 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":865,"timings":{"blocked":679,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/assets/images/bulksplash-crisdinoto-8coxime-_ds.jpg","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:03.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /assets/images/bulksplash-crisdinoto-8coxime-_ds.jpg HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:04 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":776,"timings":{"blocked":674,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/js/contact-form-script.js","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:03.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /js/contact-form-script.js HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:04 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":344,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/images/loader.gif","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:03.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /images/loader.gif HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:04 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":904,"timings":{"blocked":680,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/js/popper.min.js","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:03.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /js/popper.min.js HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:03 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":176,"dns":1,"connect":101,"send":0,"wait":174,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/js/popper.min.js","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:04.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /js/popper.min.js HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:04 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/js/jquery.magnific-popup.min.js","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:04.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /js/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:04 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/css/pogo-slider.min.css","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:03.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /css/pogo-slider.min.css HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:03 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":109,"dns":1,"connect":58,"send":0,"wait":87,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/css/style.css","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:03.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:03 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 23 Jul 2024 20:53:07 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"66a01833-4c442\"\r\nExpires: Thu, 18 Sep 2025 03:31:03 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":312386,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text, with very long lines (308)","md5":"e419d5bd49617790be3240d4ae51fa71","sha1":"3abb94d13c1f7ab7eafd098d4fc97847f79307d1","sha256":"f3985b023188448cd009f8366bd3f1d2c400609158baa89ecf990ff82ea35080","sha512":"5e2f2b3fde96e2ed6e131429730e8fa873d5ef434346c43b18936340ff50b75cf1978cd48cc752134417697b0497773b04cb8bba7932801e90dbe53f6b51efee","ssdeep":"6144:QD1HtCipr5Lp/tApU/mdk8Lqz2Pupfqi04d7S3TieUFBMA3kZDrY3GlgtTdtykLA:QD1HBt5ltApUOdk8Lqz2Pupfqi04d7SF","tlshash":"b464bef895fe1980171ad4d42346e760bb3cb2a98c0a4d68e3e67d8cebc175491d2bcd","first_seen":"2025-09-17T03:31:27.51071Z","last_seen":"2025-09-17T03:31:27.51071Z","times_seen":1,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":109,"dns":0,"connect":59,"send":0,"wait":125,"receive":59,"ssl":63},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/js/jquery.min.js","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:03.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:03 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/js/contact-form-script.js","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:05.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /js/contact-form-script.js HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:05 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/js/isotope.min.js","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:05.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /js/isotope.min.js HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:05 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/js/slider-index.js","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:03.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /js/slider-index.js HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:03 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":274,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/js/custom.js","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:03.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /js/custom.js HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:04 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Wed, 19 Jun 2024 14:04:56 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6672e588-c68\"\r\nExpires: Thu, 18 Sep 2025 03:31:04 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3176,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1882)","md5":"df107b8eafd41236f329121272086203","sha1":"e4b3a9397e348918d47324cc3f0882ce6c0a6d29","sha256":"2898314370c7bf0ad685fa16837cc89289e6bf8d09897205358c08016e14d70d","sha512":"ffbc070a3042bccb1374f8d7ca742d987bec082a317d5f0b98ce1dbb1abd23fa277dbbd1d1985b5e681a23cff62c2d1cabbfb6e39de31dada20688f85b873c08","ssdeep":"","tlshash":"af613208b030b87996afe212946b8754b1730e56c2da85b1d1f41479cbb952c7ae3fcd","first_seen":"2023-04-10T15:44:45Z","last_seen":"2025-11-17T17:31:43.850728Z","times_seen":47,"resource_available":true,"data":null}},"time_used":556,"timings":{"blocked":459,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/js/jquery.min.js","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:04.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:04 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/s/roboto/v30/KFOlCnqEu92Fr1MmWUlvAw.ttf","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:04.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlvAw.ttf HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/css2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:04 GMT\r\nContent-Type: font/ttf\r\nContent-Length: 128676\r\nConnection: keep-alive\r\nLast-Modified: Wed, 19 Jun 2024 14:05:08 GMT\r\nETag: \"1f6a4-61b3eaf958d00\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":128676,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo","md5":"fb6210739c4993c1a86f812e6502e471","sha1":"3a4a7ff4fdba5317d6941e2d66e629df6c3c8cf3","sha256":"39a2f9d2c6a99fb8de9bf674373c4082cde84253311808ca80db6582266962ef","sha512":"26487b7df0c38dd128ec9871dca33498d1f1492f7b5b04ac7bda91df98908babc7ccb85ccaf473432fae1e8bf24121a471d3db2248e6107a7e2d5fdfbd8304bf","ssdeep":"3072:gBa9dX3CuiSB1/R7O0aXjC1ZnFAPbXj9K9SINj9V0kXwHXYXXXXXXxoIPi0c:XXaX9jCS3eoIPrc","tlshash":"d0c3d400e646a628cac6b278bc3cd3be5970e42ebc6b611735e49f3155c4845ec69bfc","first_seen":"2023-05-08T12:10:57Z","last_seen":"2026-07-25T04:59:21.475232Z","times_seen":376,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":299,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/js/bootstrap.min.js","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:04.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:04 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/js/form-validator.min.js","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:04.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /js/form-validator.min.js HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:04 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/favicon.ico","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:05.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:05 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 9662\r\nConnection: keep-alive\r\nLast-Modified: Wed, 19 Jun 2024 14:04:02 GMT\r\nETag: \"25be-61b3eaba67880\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9662,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"62f73885181b37b8b3a5321a1acb6994","sha1":"8c0aff34504b2f0b94055c56437dd62490cfaa08","sha256":"637ce20f86f025fcd5fc46d66d116ee20f639f4adb1f70fe0b31944cc997576f","sha512":"9836668fe2da669abf6a2f1314e53b55d44647612cfc191a42f65987c66c2546fd43c95d56811eac9e70702761dd89be8e5136ccec91888f09c6374f6f165756","ssdeep":"96:9F6MvBmHU6sn9maVlgqQ7jYQARZMxxJIW/0nKNcn:L6Mv8HU6sn9maA7jYQATMxTcn","tlshash":"4412f91e3521fd8de7454830db438ab12d149e39dd264d4af3aebacfa7cee388591424","first_seen":"2024-06-04T09:42:01Z","last_seen":"2026-07-14T22:34:24.793686Z","times_seen":87,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-17T03:31:03.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:03 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":12088,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"bfa5cd937d6b9439b262738832db658b","sha1":"8d7947e4f194206c80e8a5ebe4f4f2d56a2ad3fb","sha256":"1cf6b27abf57689e43447f0cf1f6f90afc82af54ca20ac5aaf3926cb47334cea","sha512":"d6a7f74fb05d1d62d9fd27e5eb1c8c19adf33629e0f5817dc8bb0549d399467398e1ccad5b441b8dfa63f04110419bcf2095695414d010ad8b762a8584dede8d","ssdeep":"192:a55gK829UeKnm19KaGk8g0p+xMX11gAa57UAK:a55DGPp+C1is","tlshash":"62423f186cc150270173a2a99a76ab4effa19207824a8615b6fc2bd70ff3d45cc47edd","first_seen":"2025-09-17T03:31:27.513619Z","last_seen":"2025-09-17T03:31:27.513619Z","times_seen":1,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":202,"dns":3,"connect":99,"send":0,"wait":106,"receive":1,"ssl":105},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/assets/images/bulksplash-m_d_adventures-rbdzmcjsbky.jpg","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:03.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /assets/images/bulksplash-m_d_adventures-rbdzmcjsbky.jpg HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:04 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":936,"timings":{"blocked":673,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/js/bootstrap.min.js","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:03.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:03 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":176,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blockbits-chainspro.cc/js/images-loded.min.js","fqdn":"blockbits-chainspro.cc","domain":"blockbits-chainspro.cc","tld":"cc"},"ip":{"addr":"91.212.166.122","port":443,"asn":198953,"as":"Proton66 OOO","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blockbits-chainspro.cc/","date":"2025-09-17T03:31:03.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockbits-chainspro.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 20:00:51 GMT","end":"Wed, 12 Nov 2025 20:00:50 GMT"},"fingerprint":{"sha1":"DE:95:F9:8A:08:B3:43:F8:38:CB:B3:CD:94:71:F3:81:CA:C1:CA:84","sha256":"1F:05:37:1D:4D:F2:6F:24:74:E0:E0:61:38:61:FD:5E:FF:91:11:75:E2:18:6B:CF:9E:A4:79:E0:BE:C8:5D:21"}}},"request":{"raw":"GET /js/images-loded.min.js HTTP/1.1\r\nHost: blockbits-chainspro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blockbits-chainspro.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 17 Sep 2025 03:31:04 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f36049e0488d7e037e5d77f3ba7a79af","sha1":"7c52e437eab6222d5172745ab49fa381c25111d4","sha256":"29b370f44184d3361589e1a9432e3c40622297989b100715fa99b37ab0eec354","sha512":"99d27a25523b925e7a130c3f84441dbfeed7bac10cb7ba959592da7f3ccd5e496eb1960d95c9554320012fcd301956373bf88f082090fbdc23e261a58b7eceec","ssdeep":"","tlshash":"24d0ebee809322cb082224603ac119c3328c13f6b42a81e82d87d44b420e43dcc862c9","first_seen":"2025-09-17T03:31:27.506114Z","last_seen":"2025-09-17T03:31:27.506114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":384,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"blockbits-chainspro.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}
